90 R15: 0000000000000006 07:25:19 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x2}}}) 07:25:19 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'\"rans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 07:25:19 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe7]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:19 executing program 1 (fault-call:4 fault-nth:6): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) 07:25:19 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:19 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)) ioctl$sock_proto_private(r0, 0x894c, 0x0) syz_extract_tcp_res(&(0x7f0000000040), 0x9, 0x1aa) [ 419.439583] FAT-fs (loop4): bogus number of reserved sectors [ 419.446001] FAT-fs (loop4): Can't find a valid FAT filesystem [ 419.546669] FAULT_INJECTION: forcing a failure. [ 419.546669] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 419.565250] FAT-fs (loop4): bogus number of reserved sectors [ 419.572665] FAT-fs (loop4): Can't find a valid FAT filesystem [ 419.597696] CPU: 0 PID: 21008 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #161 [ 419.605130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 419.614493] Call Trace: [ 419.617104] dump_stack+0x244/0x39d [ 419.620752] ? dump_stack_print_info.cold.1+0x20/0x20 [ 419.625987] should_fail.cold.4+0xa/0x17 [ 419.630075] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 419.635196] ? is_bpf_text_address+0xac/0x170 [ 419.639705] ? zap_class+0x640/0x640 [ 419.643435] ? lock_downgrade+0x900/0x900 07:25:19 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:19 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0xfdfdffff00000000}}}) 07:25:19 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'%rans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) [ 419.647597] ? check_preemption_disabled+0x48/0x280 [ 419.652632] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 419.657584] ? kasan_check_read+0x11/0x20 [ 419.661769] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 419.667073] ? rcu_softirq_qs+0x20/0x20 [ 419.671060] ? find_held_lock+0x36/0x1c0 [ 419.671094] ? check_preemption_disabled+0x48/0x280 [ 419.671114] ? lock_release+0xa00/0xa00 [ 419.671132] ? perf_trace_sched_process_exec+0x860/0x860 [ 419.671149] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 419.671170] ? rcu_pm_notify+0xc0/0xc0 [ 419.680289] ? __might_sleep+0x95/0x190 [ 419.680313] __alloc_pages_nodemask+0x366/0xea0 [ 419.680331] ? iov_iter_get_pages_alloc+0x8ac/0x15a0 [ 419.680361] ? default_file_splice_read+0x1db/0xb20 [ 419.680374] ? do_splice_to+0x12e/0x190 [ 419.680399] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 419.689821] ? check_preemption_disabled+0x48/0x280 [ 419.689851] ? rcu_pm_notify+0xc0/0xc0 [ 419.689876] ? __kmalloc_node+0x3c/0x70 [ 419.689891] ? __kmalloc_node+0x3c/0x70 07:25:19 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ffffff]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 419.689913] ? rcu_read_lock_sched_held+0x14f/0x180 [ 419.748894] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 419.754448] alloc_pages_current+0x173/0x350 [ 419.758879] push_pipe+0x3ff/0x7a0 [ 419.762431] ? __kmalloc_node+0x50/0x70 [ 419.766430] iov_iter_get_pages_alloc+0x938/0x15a0 [ 419.771380] ? check_preemption_disabled+0x48/0x280 [ 419.776419] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 419.781367] ? copyin+0x100/0x100 [ 419.781383] ? rcu_softirq_qs+0x20/0x20 [ 419.781398] ? unwind_dump+0x190/0x190 [ 419.781425] ? is_bpf_text_address+0xd3/0x170 [ 419.781443] ? kernel_text_address+0x79/0xf0 [ 419.781467] ? __kernel_text_address+0xd/0x40 [ 419.788893] ? unwind_get_return_address+0x61/0xa0 [ 419.788915] ? __save_stack_trace+0x8d/0xf0 [ 419.788942] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 419.788963] ? iov_iter_pipe+0xbb/0x2f0 [ 419.824453] default_file_splice_read+0x1db/0xb20 [ 419.829303] ? __kmalloc+0x15b/0x760 [ 419.833035] ? alloc_pipe_info+0x2ce/0x5d0 [ 419.837279] ? splice_direct_to_actor+0x786/0x9d0 [ 419.842135] ? do_syscall_64+0x1b9/0x820 07:25:19 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={',rans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 07:25:19 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0xffffffff00000000}}}) 07:25:19 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffe7]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 419.846209] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 419.851598] ? percpu_ref_put_many+0x11c/0x260 [ 419.856191] ? iter_file_splice_write+0x1050/0x1050 [ 419.861221] ? check_preemption_disabled+0x48/0x280 [ 419.866256] ? kasan_check_read+0x11/0x20 [ 419.870412] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 419.875700] ? rcu_softirq_qs+0x20/0x20 [ 419.879695] ? __lockdep_init_map+0x105/0x590 [ 419.884260] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 419.889809] ? fsnotify+0x50e/0xef0 [ 419.893459] ? __init_waitqueue_head+0x9e/0x150 [ 419.898144] ? fsnotify_first_mark+0x350/0x350 [ 419.902740] ? __fsnotify_parent+0xcc/0x430 [ 419.907086] ? __might_sleep+0x95/0x190 [ 419.911075] ? fsnotify+0xef0/0xef0 [ 419.914727] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 419.919778] ? selinux_file_permission+0x90/0x540 [ 419.924641] ? security_file_permission+0x1c2/0x220 [ 419.929678] ? iter_file_splice_write+0x1050/0x1050 [ 419.934708] do_splice_to+0x12e/0x190 [ 419.938526] splice_direct_to_actor+0x31c/0x9d0 [ 419.943213] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 419.948795] ? pipe_to_sendpage+0x400/0x400 [ 419.953143] ? do_splice_to+0x190/0x190 [ 419.957134] ? security_file_permission+0x1c2/0x220 [ 419.962167] ? rw_verify_area+0x118/0x360 [ 419.966333] do_splice_direct+0x2d4/0x420 [ 419.970516] ? splice_direct_to_actor+0x9d0/0x9d0 [ 419.975381] ? rw_verify_area+0x118/0x360 [ 419.979548] do_sendfile+0x62a/0xe20 [ 419.983285] ? do_compat_pwritev64+0x1c0/0x1c0 [ 419.987913] ? __sb_end_write+0xd9/0x110 [ 419.991989] ? fput+0x130/0x1a0 [ 419.995296] ? do_syscall_64+0x9a/0x820 07:25:19 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'t%ans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 07:25:19 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x2000000}}}) [ 419.999284] ? do_syscall_64+0x9a/0x820 [ 420.003321] __x64_sys_sendfile64+0x1fd/0x250 [ 420.007836] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 420.012445] do_syscall_64+0x1b9/0x820 [ 420.016353] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 420.021732] ? syscall_return_slowpath+0x5e0/0x5e0 [ 420.026687] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 420.031541] ? trace_hardirqs_on_caller+0x310/0x310 [ 420.036587] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 420.041619] ? prepare_exit_to_usermode+0x291/0x3b0 [ 420.046659] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 420.051525] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 420.056732] RIP: 0033:0x457669 [ 420.059968] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 420.078886] RSP: 002b:00007f3befc2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 420.086610] RAX: ffffffffffffffda RBX: 00007f3befc2fc90 RCX: 0000000000457669 [ 420.093887] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 420.101166] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 420.108444] R10: 000000000000a10a R11: 0000000000000246 R12: 00007f3befc306d4 [ 420.115724] R13: 00000000004c3e42 R14: 00000000004d6c90 R15: 0000000000000006 07:25:19 executing program 1 (fault-call:4 fault-nth:7): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) [ 420.158295] FAT-fs (loop4): bogus number of reserved sectors [ 420.169567] FAT-fs (loop4): Can't find a valid FAT filesystem 07:25:19 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\a', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:19 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdfd]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:19 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'t,ans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 07:25:19 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000240)=r1) setrlimit(0x408000000000007, &(0x7f0000000000)) ioctl$sock_proto_private(r0, 0x894c, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0xffffffff, 0x84000) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000280)={'filter\x00', 0xb1, "85f20e5cb4c4d48e94bed5aab188b25910a3b04b2ce973ad0cca0a1f5b2e3e729ff121a3048a3c15c20e36f05f24b7cf24e959215f131de14daa60989be24cb91a1710e3ee9fccdecd8e0547e4e4c4dcc321db9467c2443cf42998964cb97a0cff5bf20d3ff4ab698c80f2bd13020e762dc5632a04b7f7bc231e9892736c1bf2d479e1d645621fb2fecb001eded986ce9d0bdf6f8225a1b6fe21db5561707fa65dec39d33ed7d77e258ec14f2e1c297dac"}, &(0x7f00000000c0)=0xd5) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000140), &(0x7f0000000180)=0x4) 07:25:19 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0xfdfdffff}}}) [ 420.225185] FAULT_INJECTION: forcing a failure. [ 420.225185] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 420.248738] CPU: 0 PID: 21054 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #161 [ 420.256146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 420.265523] Call Trace: [ 420.268130] dump_stack+0x244/0x39d [ 420.271808] ? dump_stack_print_info.cold.1+0x20/0x20 [ 420.277041] should_fail.cold.4+0xa/0x17 [ 420.281126] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 420.286247] ? is_bpf_text_address+0xac/0x170 [ 420.290795] ? zap_class+0x640/0x640 [ 420.294523] ? lock_downgrade+0x900/0x900 [ 420.298687] ? check_preemption_disabled+0x48/0x280 [ 420.303752] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 420.303781] ? kasan_check_read+0x11/0x20 [ 420.303796] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 420.303818] ? rcu_softirq_qs+0x20/0x20 07:25:19 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'t\nans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) [ 420.312911] ? find_held_lock+0x36/0x1c0 [ 420.312944] ? check_preemption_disabled+0x48/0x280 [ 420.312963] ? lock_release+0xa00/0xa00 [ 420.312979] ? perf_trace_sched_process_exec+0x860/0x860 [ 420.312998] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 420.313024] ? rcu_pm_notify+0xc0/0xc0 [ 420.350133] ? __might_sleep+0x95/0x190 [ 420.354130] __alloc_pages_nodemask+0x366/0xea0 [ 420.358833] ? iov_iter_get_pages_alloc+0x8ac/0x15a0 [ 420.364042] ? default_file_splice_read+0x1db/0xb20 [ 420.369210] ? do_splice_to+0x12e/0x190 [ 420.373191] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 420.378238] ? check_preemption_disabled+0x48/0x280 [ 420.383284] ? rcu_pm_notify+0xc0/0xc0 [ 420.387195] ? __kmalloc_node+0x3c/0x70 [ 420.391194] ? __kmalloc_node+0x3c/0x70 [ 420.395178] ? rcu_read_lock_sched_held+0x14f/0x180 [ 420.400212] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 420.405782] alloc_pages_current+0x173/0x350 [ 420.410214] push_pipe+0x3ff/0x7a0 [ 420.413780] ? __kmalloc_node+0x50/0x70 [ 420.417791] iov_iter_get_pages_alloc+0x938/0x15a0 07:25:20 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'t\"ans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) [ 420.422736] ? check_preemption_disabled+0x48/0x280 [ 420.427785] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 420.432734] ? copyin+0x100/0x100 [ 420.436214] ? rcu_softirq_qs+0x20/0x20 [ 420.440200] ? unwind_dump+0x190/0x190 [ 420.444110] ? is_bpf_text_address+0xd3/0x170 [ 420.448623] ? kernel_text_address+0x79/0xf0 [ 420.453050] ? __kernel_text_address+0xd/0x40 [ 420.457565] ? unwind_get_return_address+0x61/0xa0 [ 420.462513] ? __save_stack_trace+0x8d/0xf0 [ 420.466857] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 420.471907] ? iov_iter_pipe+0xbb/0x2f0 07:25:20 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'tr\"ns=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) [ 420.475943] default_file_splice_read+0x1db/0xb20 [ 420.480801] ? __kmalloc+0x15b/0x760 [ 420.484526] ? alloc_pipe_info+0x2ce/0x5d0 [ 420.488782] ? splice_direct_to_actor+0x786/0x9d0 [ 420.493645] ? do_syscall_64+0x1b9/0x820 [ 420.497720] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 420.503119] ? percpu_ref_put_many+0x11c/0x260 [ 420.507720] ? iter_file_splice_write+0x1050/0x1050 [ 420.512773] ? check_preemption_disabled+0x48/0x280 [ 420.517831] ? kasan_check_read+0x11/0x20 [ 420.521992] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 420.527295] ? rcu_softirq_qs+0x20/0x20 [ 420.531291] ? __lockdep_init_map+0x105/0x590 [ 420.535823] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 420.541375] ? fsnotify+0x50e/0xef0 [ 420.545036] ? __init_waitqueue_head+0x9e/0x150 [ 420.549722] ? fsnotify_first_mark+0x350/0x350 [ 420.554326] ? __fsnotify_parent+0xcc/0x430 [ 420.558665] ? __might_sleep+0x95/0x190 [ 420.562656] ? fsnotify+0xef0/0xef0 [ 420.566305] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 420.571338] ? selinux_file_permission+0x90/0x540 07:25:20 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'tr,ns=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 07:25:20 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0xfffffffffffffdfd}}}) [ 420.576199] ? security_file_permission+0x1c2/0x220 [ 420.581238] ? iter_file_splice_write+0x1050/0x1050 [ 420.586270] do_splice_to+0x12e/0x190 [ 420.590092] splice_direct_to_actor+0x31c/0x9d0 [ 420.594784] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 420.600337] ? pipe_to_sendpage+0x400/0x400 [ 420.604686] ? do_splice_to+0x190/0x190 [ 420.608669] ? security_file_permission+0x1c2/0x220 [ 420.613709] ? rw_verify_area+0x118/0x360 [ 420.617875] do_splice_direct+0x2d4/0x420 [ 420.622048] ? splice_direct_to_actor+0x9d0/0x9d0 [ 420.626911] ? rw_verify_area+0x118/0x360 [ 420.631073] do_sendfile+0x62a/0xe20 [ 420.631102] ? do_compat_pwritev64+0x1c0/0x1c0 [ 420.631125] ? __sb_end_write+0xd9/0x110 [ 420.643478] ? fput+0x130/0x1a0 [ 420.646788] ? do_syscall_64+0x9a/0x820 [ 420.650787] ? do_syscall_64+0x9a/0x820 [ 420.654790] __x64_sys_sendfile64+0x1fd/0x250 [ 420.659305] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 420.663916] do_syscall_64+0x1b9/0x820 [ 420.667818] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 420.673199] ? syscall_return_slowpath+0x5e0/0x5e0 [ 420.678152] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 420.683037] ? trace_hardirqs_on_caller+0x310/0x310 [ 420.688084] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 420.693119] ? prepare_exit_to_usermode+0x291/0x3b0 [ 420.698152] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 420.703029] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 420.708234] RIP: 0033:0x457669 07:25:20 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0xffffffffffffffe7}}}) [ 420.711440] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 420.730349] RSP: 002b:00007f3befc2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 420.738064] RAX: ffffffffffffffda RBX: 00007f3befc2fc90 RCX: 0000000000457669 [ 420.745342] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 420.752621] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 420.759898] R10: 000000000000a10a R11: 0000000000000246 R12: 00007f3befc306d4 [ 420.767174] R13: 00000000004c3e42 R14: 00000000004d6c90 R15: 0000000000000006 07:25:20 executing program 1 (fault-call:4 fault-nth:8): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) 07:25:20 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat;', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:20 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b6b6b00]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:20 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'tra\ns=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 07:25:20 executing program 3: r0 = socket$unix(0x1, 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x8000, 0x0) connect$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x1, 0x6, 0xffffffff, 0x20, "70f5e57056b1f45b603b641296d9ae9e3a54c4d445a493306b08f51b93fc3427f8965da41c22fdd6e2e8075866b8f157e4618a7626de17439cf6cc39c5fab1", 0x8}, 0x60) setrlimit(0x408000000000007, &(0x7f0000000000)) ioctl$sock_proto_private(r0, 0x894c, 0x0) 07:25:20 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0xfdfdffffffffffff}}}) [ 420.930598] FAULT_INJECTION: forcing a failure. [ 420.930598] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 420.993628] CPU: 0 PID: 21101 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #161 [ 421.001054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 421.010418] Call Trace: [ 421.013031] dump_stack+0x244/0x39d [ 421.016684] ? dump_stack_print_info.cold.1+0x20/0x20 [ 421.021925] should_fail.cold.4+0xa/0x17 [ 421.026027] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 421.026048] ? is_bpf_text_address+0xac/0x170 [ 421.026065] ? zap_class+0x640/0x640 [ 421.026090] ? lock_downgrade+0x900/0x900 [ 421.039400] ? check_preemption_disabled+0x48/0x280 [ 421.039423] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 421.039439] ? kasan_check_read+0x11/0x20 [ 421.039461] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 421.062943] ? rcu_softirq_qs+0x20/0x20 [ 421.066936] ? find_held_lock+0x36/0x1c0 [ 421.071015] ? synproxy_cpu_seq_next+0x70/0x560 [ 421.075720] ? check_preemption_disabled+0x48/0x280 [ 421.080776] ? lock_release+0xa00/0xa00 [ 421.084769] ? perf_trace_sched_process_exec+0x860/0x860 07:25:20 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'tra\"s=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 07:25:20 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x440) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@ipv4={[], [], @local}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) r3 = geteuid() syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x400, 0x6, &(0x7f00000004c0)=[{&(0x7f0000000100)="b23bdf7ad5e914209e6deadddbd402c38da98189d4fb09b9ec1650e10e945074c8865830d6be13cbbc474383962a91fe0441e360ab5fc774884d30264064643617c4c4b5f28a5e6ca783bbd5a8f6819d55a6df7b8e2eb020435d2f164f98b1f56906d864d9006d8e416a1587cce1e1aa195f5b4e0a6c5e0e1bd5ca723ea53abe76bbb50ae1eddbfcdd41bf000f2bf558cba028810abe10be06f1eae82f8359dc8c0bf71bc7c410532f44e954c545f5777c358bcd231bae44ad42d4926a1318a12585b9303168b811ec2d", 0xca, 0xc9dd}, {&(0x7f0000000200)="15c971a6468b582a83cc3bb9ff9b862f5f516d0b3bcd856284d11adb3071efa859f4f4756ee6f77825a5aadf3e168b37d5a28404fdc5fabd2829fe87c63eedf102af784aa224e19afef39b5501169c7ca975ea8f32786f930d5f5092a75fdffe74caf33a3e6ce539", 0x68, 0x10000}, {&(0x7f0000000280), 0x0, 0xe}, {&(0x7f00000002c0)="268545e0ee329ea963ad274b1ee2e16bcf6da7a9aa84cac6b6ea51252fe3dcd1569fdb902b74a911aa81d58db70992407de35158d57e129c51029449cefa03af517099917c3c1b26637cc387fbc22d93d8c8c18599d8bcb26b1e4156fd7e0931f716e1cfcb606b5841bf373a05e7c17a1c7013932fe94519842795492df922046f85860f30571080fbade2f9878e6ec93f0bb3d14fe40a2b168ca1488734f0a74e376d14d9a47532e1938b727ebc0556541df6fa7cfa3cbb0adf942aed450f2bcf35d2fde052281ecb48905b1b7e901ed39aba5e2fcd098796f186eb5a04742057538f775ad6d9d1c21949b530b2a8a1abde", 0xf2, 0xe000000000000000}, {&(0x7f00000003c0)="604bdd3dca659287a9990008d1961ac2b1b130a46265c0b6d847bf47d0970426f3e5a5f979ee317da58d83b3cd3a3233c3335099dcf80b67e98874cdf1c45823e29b9145bec7b204344587249e33ba89335f39c716354e83079a87cde7379930f143cae87ea83d14c889dcf6c84e58a59630fe9afeef46a8cccef999acd4bf07e6c96c937bcb619d9b48543559f10787d234e07b2b3b91f11d330d5e3d", 0x9d, 0xda}, {&(0x7f0000000480)="35db0df4c83207778a770a8ecc345a2e88db9eb5c961267cdf37c4b17dd38aa8c41e98a881684db32795015db05154ee032f480b", 0x34, 0x80}], 0x100000, &(0x7f00000006c0)={[{@commit={'commit', 0x3d, 0x8000}}, {@noinode_cache='noinode_cache'}, {@barrier='barrier'}, {@space_cache='space_cache'}, {@subvolid={'subvolid', 0x3d, 0x5}}], [{@euid_eq={'euid', 0x3d, r2}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_user={'subj_user', 0x3d, ')'}}]}) ioctl$sock_proto_private(r0, 0x894c, 0x0) 07:25:20 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 421.084789] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 421.084819] ? rcu_pm_notify+0xc0/0xc0 [ 421.084855] ? __might_sleep+0x95/0x190 [ 421.103694] __alloc_pages_nodemask+0x366/0xea0 [ 421.108379] ? iov_iter_get_pages_alloc+0x8ac/0x15a0 [ 421.113495] ? default_file_splice_read+0x1db/0xb20 [ 421.118519] ? do_splice_to+0x12e/0x190 [ 421.122514] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 421.127559] ? check_preemption_disabled+0x48/0x280 [ 421.132603] ? rcu_pm_notify+0xc0/0xc0 [ 421.132629] ? __kmalloc_node+0x3c/0x70 [ 421.132644] ? __kmalloc_node+0x3c/0x70 [ 421.132660] ? rcu_read_lock_sched_held+0x14f/0x180 [ 421.132682] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 421.144503] alloc_pages_current+0x173/0x350 [ 421.144528] push_pipe+0x3ff/0x7a0 [ 421.144543] ? __kmalloc_node+0x50/0x70 [ 421.144569] iov_iter_get_pages_alloc+0x938/0x15a0 [ 421.144591] ? check_preemption_disabled+0x48/0x280 [ 421.176993] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 421.181951] ? copyin+0x100/0x100 [ 421.185420] ? rcu_softirq_qs+0x20/0x20 [ 421.189417] ? unwind_dump+0x190/0x190 07:25:20 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)="d709dcb37caf0c5ea992b82d08e5ab702aba0e8046cfecc43b5ff02585bf0df6248122b0fd35f532557c125d13378f2852c1de8f3fc747ed7d3b81", 0x3b, 0xfffffffffffffffb) keyctl$get_keyring_id(0x0, r1, 0x1) ioctl$sock_proto_private(r0, 0x894c, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x5, 0x14000) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x1c) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f0000000140)={0x9, 0x9, 0x1ff}) [ 421.193333] ? is_bpf_text_address+0xd3/0x170 [ 421.197848] ? kernel_text_address+0x79/0xf0 [ 421.202282] ? __kernel_text_address+0xd/0x40 [ 421.206800] ? unwind_get_return_address+0x61/0xa0 [ 421.211750] ? __save_stack_trace+0x8d/0xf0 [ 421.216115] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 421.221156] ? iov_iter_pipe+0xbb/0x2f0 [ 421.225150] default_file_splice_read+0x1db/0xb20 [ 421.230003] ? __kmalloc+0x15b/0x760 [ 421.233736] ? alloc_pipe_info+0x2ce/0x5d0 [ 421.238248] ? splice_direct_to_actor+0x786/0x9d0 07:25:20 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 421.243111] ? do_syscall_64+0x1b9/0x820 [ 421.247183] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 421.252562] ? percpu_ref_put_many+0x11c/0x260 [ 421.257154] ? iter_file_splice_write+0x1050/0x1050 [ 421.262180] ? check_preemption_disabled+0x48/0x280 [ 421.262203] ? kasan_check_read+0x11/0x20 [ 421.262220] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 421.262234] ? rcu_softirq_qs+0x20/0x20 [ 421.262251] ? __lockdep_init_map+0x105/0x590 [ 421.262279] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 421.262294] ? fsnotify+0x50e/0xef0 [ 421.262317] ? __init_waitqueue_head+0x9e/0x150 [ 421.298997] ? fsnotify_first_mark+0x350/0x350 [ 421.303606] ? __fsnotify_parent+0xcc/0x430 [ 421.307942] ? __might_sleep+0x95/0x190 [ 421.311926] ? fsnotify+0xef0/0xef0 [ 421.315571] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 421.320608] ? selinux_file_permission+0x90/0x540 [ 421.325469] ? security_file_permission+0x1c2/0x220 [ 421.330507] ? iter_file_splice_write+0x1050/0x1050 [ 421.335537] do_splice_to+0x12e/0x190 [ 421.339359] splice_direct_to_actor+0x31c/0x9d0 07:25:20 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x4000) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000001c0)=0x7fffffff) r1 = socket$unix(0x1, 0x1, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)={0x0, 0x61800}) ioctl$sock_proto_private(r1, 0x894c, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4, 0x800) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000080)=0x105000) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x800, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000000c0)={{0x6, 0x1, 0x2}, 'syz0\x00', 0x27}) [ 421.344051] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 421.349614] ? pipe_to_sendpage+0x400/0x400 [ 421.353957] ? do_splice_to+0x190/0x190 [ 421.357944] ? security_file_permission+0x1c2/0x220 [ 421.362978] ? rw_verify_area+0x118/0x360 [ 421.367146] do_splice_direct+0x2d4/0x420 [ 421.371312] ? splice_direct_to_actor+0x9d0/0x9d0 [ 421.376176] ? rw_verify_area+0x118/0x360 [ 421.380343] do_sendfile+0x62a/0xe20 [ 421.384080] ? do_compat_pwritev64+0x1c0/0x1c0 [ 421.388693] ? __sb_end_write+0xd9/0x110 [ 421.392779] ? fput+0x130/0x1a0 [ 421.392799] ? do_syscall_64+0x9a/0x820 [ 421.392815] ? do_syscall_64+0x9a/0x820 [ 421.392836] __x64_sys_sendfile64+0x1fd/0x250 [ 421.392856] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 421.400117] do_syscall_64+0x1b9/0x820 [ 421.417026] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 421.422412] ? syscall_return_slowpath+0x5e0/0x5e0 [ 421.427355] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 421.432209] ? trace_hardirqs_on_caller+0x310/0x310 [ 421.437335] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 421.442371] ? prepare_exit_to_usermode+0x291/0x3b0 [ 421.447407] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 421.452276] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 421.457478] RIP: 0033:0x457669 [ 421.460687] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 421.479602] RSP: 002b:00007f3befc2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 421.487324] RAX: ffffffffffffffda RBX: 00007f3befc2fc90 RCX: 0000000000457669 07:25:21 executing program 1 (fault-call:4 fault-nth:9): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) [ 421.494602] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 421.501878] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 421.501888] R10: 000000000000a10a R11: 0000000000000246 R12: 00007f3befc306d4 [ 421.501897] R13: 00000000004c3e42 R14: 00000000004d6c90 R15: 0000000000000006 [ 421.616204] FAULT_INJECTION: forcing a failure. [ 421.616204] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 421.628602] CPU: 0 PID: 21151 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #161 [ 421.635965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 421.635981] Call Trace: [ 421.647926] dump_stack+0x244/0x39d [ 421.647949] ? dump_stack_print_info.cold.1+0x20/0x20 [ 421.647978] should_fail.cold.4+0xa/0x17 [ 421.660845] ? fault_create_debugfs_attr+0x1f0/0x1f0 07:25:21 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:21 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'tra%s=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 07:25:21 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/166, 0xa6) setrlimit(0x408000000000007, &(0x7f0000000000)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x3ae5285337c9ad0d, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_proto_private(r0, 0x894c, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040), 0x10) 07:25:21 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0xe7ffffffffffffff}}}) 07:25:21 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 421.665970] ? is_bpf_text_address+0xac/0x170 [ 421.670484] ? zap_class+0x640/0x640 [ 421.674213] ? lock_downgrade+0x900/0x900 [ 421.678376] ? check_preemption_disabled+0x48/0x280 [ 421.683408] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 421.688357] ? kasan_check_read+0x11/0x20 [ 421.692520] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 421.697810] ? rcu_softirq_qs+0x20/0x20 [ 421.701816] ? find_held_lock+0x36/0x1c0 [ 421.705906] ? check_preemption_disabled+0x48/0x280 [ 421.710954] ? lock_release+0xa00/0xa00 [ 421.714942] ? perf_trace_sched_process_exec+0x860/0x860 [ 421.720415] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 421.725972] ? rcu_pm_notify+0xc0/0xc0 [ 421.729881] ? __might_sleep+0x95/0x190 [ 421.733876] __alloc_pages_nodemask+0x366/0xea0 [ 421.738566] ? iov_iter_get_pages_alloc+0x8ac/0x15a0 [ 421.743680] ? default_file_splice_read+0x1db/0xb20 [ 421.748707] ? do_splice_to+0x12e/0x190 [ 421.752715] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 421.757781] ? check_preemption_disabled+0x48/0x280 [ 421.762825] ? rcu_pm_notify+0xc0/0xc0 [ 421.762852] ? __kmalloc_node+0x3c/0x70 [ 421.762867] ? __kmalloc_node+0x3c/0x70 [ 421.762884] ? rcu_read_lock_sched_held+0x14f/0x180 [ 421.762903] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 421.762926] alloc_pages_current+0x173/0x350 [ 421.762948] push_pipe+0x3ff/0x7a0 [ 421.770811] ? __kmalloc_node+0x50/0x70 [ 421.797279] iov_iter_get_pages_alloc+0x938/0x15a0 [ 421.801364] FAT-fs (loop4): bogus number of reserved sectors [ 421.802222] ? check_preemption_disabled+0x48/0x280 07:25:21 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x2b80, 0x8000) fanotify_mark(r1, 0x4, 0x8, r2, &(0x7f00000000c0)='./file0\x00') ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)) ioctl$sock_proto_private(r0, 0x894c, 0x0) [ 421.802245] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 421.802267] ? copyin+0x100/0x100 [ 421.802282] ? rcu_softirq_qs+0x20/0x20 [ 421.802296] ? unwind_dump+0x190/0x190 [ 421.802320] ? is_bpf_text_address+0xd3/0x170 [ 421.810702] FAT-fs (loop4): Can't find a valid FAT filesystem [ 421.813131] ? kernel_text_address+0x79/0xf0 [ 421.813150] ? __kernel_text_address+0xd/0x40 [ 421.813165] ? unwind_get_return_address+0x61/0xa0 [ 421.813185] ? __save_stack_trace+0x8d/0xf0 [ 421.813214] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 421.813229] ? iov_iter_pipe+0xbb/0x2f0 [ 421.813250] default_file_splice_read+0x1db/0xb20 [ 421.813271] ? __kmalloc+0x15b/0x760 [ 421.839847] ? alloc_pipe_info+0x2ce/0x5d0 [ 421.839863] ? splice_direct_to_actor+0x786/0x9d0 [ 421.839884] ? do_syscall_64+0x1b9/0x820 [ 421.839904] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 421.848809] ? percpu_ref_put_many+0x11c/0x260 [ 421.898651] ? iter_file_splice_write+0x1050/0x1050 [ 421.903684] ? check_preemption_disabled+0x48/0x280 [ 421.908727] ? kasan_check_read+0x11/0x20 07:25:21 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0xffffffe7}}}) [ 421.912906] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 421.918196] ? rcu_softirq_qs+0x20/0x20 [ 421.922198] ? __lockdep_init_map+0x105/0x590 [ 421.926721] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 421.932283] ? fsnotify+0x50e/0xef0 [ 421.935941] ? __init_waitqueue_head+0x9e/0x150 [ 421.940623] ? fsnotify_first_mark+0x350/0x350 [ 421.945213] ? __fsnotify_parent+0xcc/0x430 [ 421.949557] ? __might_sleep+0x95/0x190 [ 421.953542] ? fsnotify+0xef0/0xef0 [ 421.957185] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 421.962218] ? selinux_file_permission+0x90/0x540 [ 421.967110] ? security_file_permission+0x1c2/0x220 [ 421.972152] ? iter_file_splice_write+0x1050/0x1050 [ 421.972168] do_splice_to+0x12e/0x190 [ 421.972188] splice_direct_to_actor+0x31c/0x9d0 [ 421.972203] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 421.972222] ? pipe_to_sendpage+0x400/0x400 [ 421.972242] ? do_splice_to+0x190/0x190 [ 421.999552] ? security_file_permission+0x1c2/0x220 [ 422.004593] ? rw_verify_area+0x118/0x360 [ 422.008775] do_splice_direct+0x2d4/0x420 [ 422.012943] ? splice_direct_to_actor+0x9d0/0x9d0 07:25:21 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0xe7ffffff}}}) [ 422.017809] ? rw_verify_area+0x118/0x360 [ 422.021976] do_sendfile+0x62a/0xe20 [ 422.025716] ? do_compat_pwritev64+0x1c0/0x1c0 [ 422.030322] ? __sb_end_write+0xd9/0x110 [ 422.034407] ? fput+0x130/0x1a0 [ 422.037703] ? do_syscall_64+0x9a/0x820 [ 422.041689] ? do_syscall_64+0x9a/0x820 [ 422.045683] __x64_sys_sendfile64+0x1fd/0x250 [ 422.050193] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 422.054812] do_syscall_64+0x1b9/0x820 [ 422.058712] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 422.064090] ? syscall_return_slowpath+0x5e0/0x5e0 [ 422.069046] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 422.073909] ? trace_hardirqs_on_caller+0x310/0x310 [ 422.078956] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 422.083988] ? prepare_exit_to_usermode+0x291/0x3b0 [ 422.089039] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 422.093911] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 422.099114] RIP: 0033:0x457669 07:25:21 executing program 3: syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)) ioctl$sock_proto_private(r0, 0x894c, 0x0) [ 422.102315] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 422.121226] RSP: 002b:00007f3befc2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 422.128942] RAX: ffffffffffffffda RBX: 00007f3befc2fc90 RCX: 0000000000457669 [ 422.136221] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 422.143500] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 422.143511] R10: 000000000000a10a R11: 0000000000000246 R12: 00007f3befc306d4 [ 422.143520] R13: 00000000004c3e42 R14: 00000000004d6c90 R15: 0000000000000006 07:25:21 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'tra,s=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 07:25:21 executing program 1 (fault-call:4 fault-nth:10): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) 07:25:21 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x2000000}}}) [ 422.230882] FAT-fs (loop4): bogus number of reserved sectors [ 422.250136] FAT-fs (loop4): Can't find a valid FAT filesystem 07:25:21 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\xff', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:21 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 422.320242] FAULT_INJECTION: forcing a failure. [ 422.320242] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 422.357680] CPU: 0 PID: 21195 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #161 07:25:21 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)) ioctl$sock_proto_private(r0, 0x894d, 0x0) 07:25:22 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'tranu=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) [ 422.365100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 422.374582] Call Trace: [ 422.377191] dump_stack+0x244/0x39d [ 422.380851] ? dump_stack_print_info.cold.1+0x20/0x20 [ 422.386080] should_fail.cold.4+0xa/0x17 [ 422.390163] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 422.395279] ? is_bpf_text_address+0xac/0x170 [ 422.399828] ? zap_class+0x640/0x640 [ 422.403586] ? lock_downgrade+0x900/0x900 [ 422.407747] ? check_preemption_disabled+0x48/0x280 [ 422.412807] ? rcu_read_unlock_special+0x1c0/0x1c0 07:25:22 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'tranx=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) [ 422.417750] ? kasan_check_read+0x11/0x20 [ 422.421937] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 422.427225] ? rcu_softirq_qs+0x20/0x20 [ 422.431220] ? find_held_lock+0x36/0x1c0 [ 422.435319] ? check_preemption_disabled+0x48/0x280 [ 422.440352] ? lock_release+0xa00/0xa00 [ 422.444342] ? perf_trace_sched_process_exec+0x860/0x860 [ 422.449806] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 422.455358] ? rcu_pm_notify+0xc0/0xc0 [ 422.459263] ? __might_sleep+0x95/0x190 [ 422.463253] __alloc_pages_nodemask+0x366/0xea0 07:25:22 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}}}) [ 422.467932] ? iov_iter_get_pages_alloc+0x8ac/0x15a0 [ 422.473055] ? default_file_splice_read+0x1db/0xb20 [ 422.478081] ? do_splice_to+0x12e/0x190 [ 422.482074] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 422.487116] ? check_preemption_disabled+0x48/0x280 [ 422.492169] ? rcu_pm_notify+0xc0/0xc0 [ 422.496080] ? __kmalloc_node+0x3c/0x70 [ 422.500071] ? __kmalloc_node+0x3c/0x70 [ 422.504071] ? rcu_read_lock_sched_held+0x14f/0x180 [ 422.509103] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 422.514689] alloc_pages_current+0x173/0x350 07:25:22 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'tran\n=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 07:25:22 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 422.519112] push_pipe+0x3ff/0x7a0 [ 422.522661] ? __kmalloc_node+0x50/0x70 [ 422.526656] iov_iter_get_pages_alloc+0x938/0x15a0 [ 422.531598] ? check_preemption_disabled+0x48/0x280 [ 422.536633] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 422.541580] ? copyin+0x100/0x100 [ 422.545071] ? rcu_softirq_qs+0x20/0x20 [ 422.549060] ? unwind_dump+0x190/0x190 [ 422.552971] ? is_bpf_text_address+0xd3/0x170 [ 422.557475] ? kernel_text_address+0x79/0xf0 [ 422.561893] ? __kernel_text_address+0xd/0x40 [ 422.566406] ? unwind_get_return_address+0x61/0xa0 07:25:22 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'tran\"=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) [ 422.571356] ? __save_stack_trace+0x8d/0xf0 [ 422.575701] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 422.580729] ? iov_iter_pipe+0xbb/0x2f0 [ 422.584726] default_file_splice_read+0x1db/0xb20 [ 422.589595] ? __kmalloc+0x15b/0x760 [ 422.593321] ? alloc_pipe_info+0x2ce/0x5d0 [ 422.597571] ? splice_direct_to_actor+0x786/0x9d0 [ 422.602430] ? do_syscall_64+0x1b9/0x820 [ 422.606507] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 422.611895] ? percpu_ref_put_many+0x11c/0x260 [ 422.616488] ? iter_file_splice_write+0x1050/0x1050 07:25:22 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'tran%=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) [ 422.621516] ? check_preemption_disabled+0x48/0x280 [ 422.626551] ? kasan_check_read+0x11/0x20 [ 422.630714] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 422.636004] ? rcu_softirq_qs+0x20/0x20 [ 422.640011] ? __lockdep_init_map+0x105/0x590 [ 422.644547] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 422.650109] ? fsnotify+0x50e/0xef0 [ 422.653771] ? __init_waitqueue_head+0x9e/0x150 [ 422.658457] ? fsnotify_first_mark+0x350/0x350 [ 422.663053] ? __fsnotify_parent+0xcc/0x430 [ 422.667386] ? __might_sleep+0x95/0x190 [ 422.671365] ? fsnotify+0xef0/0xef0 [ 422.674983] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 422.679984] ? selinux_file_permission+0x90/0x540 [ 422.684817] ? security_file_permission+0x1c2/0x220 [ 422.689820] ? iter_file_splice_write+0x1050/0x1050 [ 422.694820] do_splice_to+0x12e/0x190 [ 422.698621] splice_direct_to_actor+0x31c/0x9d0 [ 422.703280] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 422.708807] ? pipe_to_sendpage+0x400/0x400 [ 422.713121] ? do_splice_to+0x190/0x190 [ 422.717083] ? security_file_permission+0x1c2/0x220 [ 422.722089] ? rw_verify_area+0x118/0x360 [ 422.726241] do_splice_direct+0x2d4/0x420 [ 422.730375] ? splice_direct_to_actor+0x9d0/0x9d0 [ 422.735210] ? rw_verify_area+0x118/0x360 [ 422.739346] do_sendfile+0x62a/0xe20 [ 422.743056] ? do_compat_pwritev64+0x1c0/0x1c0 [ 422.747624] ? __sb_end_write+0xd9/0x110 [ 422.751704] ? fput+0x130/0x1a0 [ 422.754970] ? do_syscall_64+0x9a/0x820 [ 422.758928] ? do_syscall_64+0x9a/0x820 [ 422.762892] __x64_sys_sendfile64+0x1fd/0x250 [ 422.767375] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 422.771948] do_syscall_64+0x1b9/0x820 [ 422.775822] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 422.781181] ? syscall_return_slowpath+0x5e0/0x5e0 [ 422.786112] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 422.790944] ? trace_hardirqs_on_caller+0x310/0x310 [ 422.795946] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 422.800948] ? prepare_exit_to_usermode+0x291/0x3b0 [ 422.805954] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 422.810791] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 422.815966] RIP: 0033:0x457669 [ 422.819144] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 422.838034] RSP: 002b:00007f3befc2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 422.845731] RAX: ffffffffffffffda RBX: 00007f3befc2fc90 RCX: 0000000000457669 [ 422.852983] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 422.860239] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 07:25:22 executing program 1 (fault-call:4 fault-nth:11): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) 07:25:22 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'tran,=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) [ 422.867495] R10: 000000000000a10a R11: 0000000000000246 R12: 00007f3befc306d4 [ 422.874751] R13: 00000000004c3e42 R14: 00000000004d6c90 R15: 0000000000000006 [ 422.990491] FAULT_INJECTION: forcing a failure. [ 422.990491] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 423.061722] CPU: 1 PID: 21231 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #161 [ 423.069156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 423.078531] Call Trace: [ 423.081148] dump_stack+0x244/0x39d [ 423.084845] ? dump_stack_print_info.cold.1+0x20/0x20 [ 423.090105] should_fail.cold.4+0xa/0x17 [ 423.094199] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 423.099323] ? is_bpf_text_address+0xac/0x170 [ 423.103838] ? zap_class+0x640/0x640 [ 423.107564] ? lock_downgrade+0x900/0x900 [ 423.111729] ? check_preemption_disabled+0x48/0x280 [ 423.116796] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 423.121744] ? kasan_check_read+0x11/0x20 [ 423.121771] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 423.121791] ? rcu_softirq_qs+0x20/0x20 [ 423.131219] ? find_held_lock+0x36/0x1c0 [ 423.131252] ? check_preemption_disabled+0x48/0x280 [ 423.131271] ? lock_release+0xa00/0xa00 [ 423.148280] ? perf_trace_sched_process_exec+0x860/0x860 [ 423.153747] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 423.159316] ? rcu_pm_notify+0xc0/0xc0 [ 423.163220] ? __might_sleep+0x95/0x190 [ 423.167212] __alloc_pages_nodemask+0x366/0xea0 [ 423.171896] ? iov_iter_get_pages_alloc+0x8ac/0x15a0 [ 423.177008] ? default_file_splice_read+0x1db/0xb20 [ 423.177026] ? do_splice_to+0x12e/0x190 [ 423.186024] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 423.191069] ? check_preemption_disabled+0x48/0x280 [ 423.196114] ? rcu_pm_notify+0xc0/0xc0 [ 423.200029] ? __kmalloc_node+0x3c/0x70 [ 423.204017] ? __kmalloc_node+0x3c/0x70 [ 423.208010] ? rcu_read_lock_sched_held+0x14f/0x180 [ 423.213037] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 423.218588] alloc_pages_current+0x173/0x350 [ 423.223025] push_pipe+0x3ff/0x7a0 [ 423.226578] ? __kmalloc_node+0x50/0x70 [ 423.230577] iov_iter_get_pages_alloc+0x938/0x15a0 [ 423.235535] ? check_preemption_disabled+0x48/0x280 [ 423.240569] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 423.245505] ? copyin+0x100/0x100 [ 423.248951] ? rcu_softirq_qs+0x20/0x20 [ 423.252909] ? unwind_dump+0x190/0x190 [ 423.256791] ? is_bpf_text_address+0xd3/0x170 [ 423.261280] ? kernel_text_address+0x79/0xf0 [ 423.265673] ? __kernel_text_address+0xd/0x40 [ 423.270152] ? unwind_get_return_address+0x61/0xa0 [ 423.275069] ? __save_stack_trace+0x8d/0xf0 [ 423.279385] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 423.284389] ? iov_iter_pipe+0xbb/0x2f0 [ 423.288352] default_file_splice_read+0x1db/0xb20 [ 423.293184] ? __kmalloc+0x15b/0x760 [ 423.296884] ? alloc_pipe_info+0x2ce/0x5d0 [ 423.301102] ? splice_direct_to_actor+0x786/0x9d0 [ 423.305931] ? do_syscall_64+0x1b9/0x820 [ 423.309977] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 423.315329] ? percpu_ref_put_many+0x11c/0x260 [ 423.319897] ? iter_file_splice_write+0x1050/0x1050 [ 423.324932] ? check_preemption_disabled+0x48/0x280 [ 423.329937] ? kasan_check_read+0x11/0x20 [ 423.334073] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 423.339334] ? rcu_softirq_qs+0x20/0x20 [ 423.343300] ? __lockdep_init_map+0x105/0x590 [ 423.347792] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 423.353315] ? fsnotify+0x50e/0xef0 [ 423.356932] ? __init_waitqueue_head+0x9e/0x150 [ 423.361587] ? fsnotify_first_mark+0x350/0x350 [ 423.366151] ? __fsnotify_parent+0xcc/0x430 [ 423.370457] ? __might_sleep+0x95/0x190 [ 423.374419] ? fsnotify+0xef0/0xef0 [ 423.378038] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 423.383044] ? selinux_file_permission+0x90/0x540 [ 423.387878] ? security_file_permission+0x1c2/0x220 [ 423.392882] ? iter_file_splice_write+0x1050/0x1050 [ 423.397884] do_splice_to+0x12e/0x190 [ 423.401675] splice_direct_to_actor+0x31c/0x9d0 [ 423.406334] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 423.411859] ? pipe_to_sendpage+0x400/0x400 [ 423.416214] ? do_splice_to+0x190/0x190 [ 423.420177] ? security_file_permission+0x1c2/0x220 [ 423.425179] ? rw_verify_area+0x118/0x360 [ 423.429313] do_splice_direct+0x2d4/0x420 [ 423.433450] ? splice_direct_to_actor+0x9d0/0x9d0 [ 423.438298] ? rw_verify_area+0x118/0x360 [ 423.442436] do_sendfile+0x62a/0xe20 [ 423.446143] ? do_compat_pwritev64+0x1c0/0x1c0 [ 423.450713] ? __sb_end_write+0xd9/0x110 [ 423.454768] ? fput+0x130/0x1a0 [ 423.458036] ? do_syscall_64+0x9a/0x820 [ 423.461994] ? do_syscall_64+0x9a/0x820 [ 423.465973] __x64_sys_sendfile64+0x1fd/0x250 [ 423.470454] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 423.475030] do_syscall_64+0x1b9/0x820 [ 423.478908] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 423.484258] ? syscall_return_slowpath+0x5e0/0x5e0 [ 423.489174] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 423.494006] ? trace_hardirqs_on_caller+0x310/0x310 [ 423.499008] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 423.504011] ? prepare_exit_to_usermode+0x291/0x3b0 [ 423.509020] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 423.513874] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 423.519051] RIP: 0033:0x457669 [ 423.522230] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 423.541117] RSP: 002b:00007f3befc2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 423.548828] RAX: ffffffffffffffda RBX: 00007f3befc2fc90 RCX: 0000000000457669 [ 423.556083] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 423.563334] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 423.570589] R10: 000000000000a10a R11: 0000000000000246 R12: 00007f3befc306d4 [ 423.577842] R13: 00000000004c3e42 R14: 00000000004d6c90 R15: 0000000000000006 07:25:23 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x04', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:23 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trand=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 07:25:23 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = dup(0xffffffffffffffff) write$P9_RCREATE(r1, &(0x7f0000000040)={0x18, 0x73, 0x2, {{0x1, 0x2, 0x6}, 0x4}}, 0x18) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$sock_proto_private(r0, 0x894c, 0x0) 07:25:23 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:23 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}}}) 07:25:23 executing program 1 (fault-call:4 fault-nth:12): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) [ 423.769038] FAULT_INJECTION: forcing a failure. [ 423.769038] name fail_page_alloc, interval 1, probability 0, space 0, times 0 07:25:23 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trano=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 07:25:23 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 423.811625] CPU: 0 PID: 21267 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #161 [ 423.819060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 423.828416] Call Trace: [ 423.831040] dump_stack+0x244/0x39d [ 423.834689] ? dump_stack_print_info.cold.1+0x20/0x20 [ 423.839906] should_fail.cold.4+0xa/0x17 [ 423.843987] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 423.849117] ? is_bpf_text_address+0xac/0x170 [ 423.853619] ? zap_class+0x640/0x640 [ 423.857356] ? lock_downgrade+0x900/0x900 [ 423.861518] ? check_preemption_disabled+0x48/0x280 [ 423.861537] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 423.861553] ? kasan_check_read+0x11/0x20 [ 423.861583] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 423.861597] ? rcu_softirq_qs+0x20/0x20 [ 423.861617] ? find_held_lock+0x36/0x1c0 [ 423.861644] ? check_preemption_disabled+0x48/0x280 [ 423.871578] ? lock_release+0xa00/0xa00 [ 423.871596] ? perf_trace_sched_process_exec+0x860/0x860 [ 423.871614] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 07:25:23 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans\"fd,', {'rfdno'}, 0x2c, {'wfdno'}}) [ 423.871632] ? rcu_pm_notify+0xc0/0xc0 [ 423.871652] ? __might_sleep+0x95/0x190 [ 423.871679] __alloc_pages_nodemask+0x366/0xea0 [ 423.921566] ? iov_iter_get_pages_alloc+0x8ac/0x15a0 [ 423.926682] ? default_file_splice_read+0x1db/0xb20 [ 423.931708] ? do_splice_to+0x12e/0x190 [ 423.935700] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 423.940740] ? check_preemption_disabled+0x48/0x280 [ 423.945806] ? rcu_pm_notify+0xc0/0xc0 [ 423.949720] ? __kmalloc_node+0x3c/0x70 [ 423.953725] ? __kmalloc_node+0x3c/0x70 [ 423.957727] ? rcu_read_lock_sched_held+0x14f/0x180 [ 423.962776] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 423.968336] alloc_pages_current+0x173/0x350 [ 423.972774] push_pipe+0x3ff/0x7a0 [ 423.976330] ? __kmalloc_node+0x50/0x70 [ 423.980332] iov_iter_get_pages_alloc+0x938/0x15a0 [ 423.985276] ? check_preemption_disabled+0x48/0x280 [ 423.990308] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 423.990331] ? copyin+0x100/0x100 [ 423.990346] ? rcu_softirq_qs+0x20/0x20 [ 423.990360] ? unwind_dump+0x190/0x190 [ 423.990384] ? is_bpf_text_address+0xd3/0x170 07:25:23 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:23 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans%fd,', {'rfdno'}, 0x2c, {'wfdno'}}) [ 423.998751] ? kernel_text_address+0x79/0xf0 [ 423.998811] ? __kernel_text_address+0xd/0x40 [ 423.998828] ? unwind_get_return_address+0x61/0xa0 [ 423.998855] ? __save_stack_trace+0x8d/0xf0 [ 424.029322] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 424.034355] ? iov_iter_pipe+0xbb/0x2f0 [ 424.038349] default_file_splice_read+0x1db/0xb20 [ 424.043205] ? __kmalloc+0x15b/0x760 [ 424.046933] ? alloc_pipe_info+0x2ce/0x5d0 [ 424.051179] ? splice_direct_to_actor+0x786/0x9d0 [ 424.056049] ? do_syscall_64+0x1b9/0x820 [ 424.063601] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 424.068983] ? percpu_ref_put_many+0x11c/0x260 [ 424.073599] ? iter_file_splice_write+0x1050/0x1050 [ 424.078631] ? check_preemption_disabled+0x48/0x280 [ 424.083672] ? kasan_check_read+0x11/0x20 [ 424.087832] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 424.093138] ? rcu_softirq_qs+0x20/0x20 [ 424.097132] ? __lockdep_init_map+0x105/0x590 [ 424.101660] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 424.107215] ? fsnotify+0x50e/0xef0 07:25:23 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans,fd,', {'rfdno'}, 0x2c, {'wfdno'}}) [ 424.110868] ? __init_waitqueue_head+0x9e/0x150 [ 424.115551] ? fsnotify_first_mark+0x350/0x350 [ 424.120144] ? __fsnotify_parent+0xcc/0x430 [ 424.124508] ? __might_sleep+0x95/0x190 [ 424.128496] ? fsnotify+0xef0/0xef0 [ 424.132146] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 424.137175] ? selinux_file_permission+0x90/0x540 [ 424.142076] ? security_file_permission+0x1c2/0x220 [ 424.147129] ? iter_file_splice_write+0x1050/0x1050 [ 424.152156] do_splice_to+0x12e/0x190 [ 424.155972] splice_direct_to_actor+0x31c/0x9d0 [ 424.160652] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 424.166206] ? pipe_to_sendpage+0x400/0x400 [ 424.170557] ? do_splice_to+0x190/0x190 [ 424.174549] ? security_file_permission+0x1c2/0x220 [ 424.179579] ? rw_verify_area+0x118/0x360 [ 424.183740] do_splice_direct+0x2d4/0x420 [ 424.187914] ? splice_direct_to_actor+0x9d0/0x9d0 [ 424.192789] ? rw_verify_area+0x118/0x360 [ 424.196962] do_sendfile+0x62a/0xe20 [ 424.200702] ? do_compat_pwritev64+0x1c0/0x1c0 [ 424.205306] ? __sb_end_write+0xd9/0x110 [ 424.209389] ? fput+0x130/0x1a0 [ 424.212690] ? do_syscall_64+0x9a/0x820 [ 424.216681] ? do_syscall_64+0x9a/0x820 [ 424.220678] __x64_sys_sendfile64+0x1fd/0x250 [ 424.225194] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 424.229839] do_syscall_64+0x1b9/0x820 [ 424.233734] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 424.239308] ? syscall_return_slowpath+0x5e0/0x5e0 [ 424.244252] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 424.249117] ? trace_hardirqs_on_caller+0x310/0x310 [ 424.254138] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 424.259144] ? prepare_exit_to_usermode+0x291/0x3b0 [ 424.264171] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 424.269019] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 424.274198] RIP: 0033:0x457669 [ 424.277381] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 424.296280] RSP: 002b:00007f3befc2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 424.303991] RAX: ffffffffffffffda RBX: 00007f3befc2fc90 RCX: 0000000000457669 [ 424.311246] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 424.318502] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 424.325758] R10: 000000000000a10a R11: 0000000000000246 R12: 00007f3befc306d4 [ 424.333031] R13: 00000000004c3e42 R14: 00000000004d6c90 R15: 0000000000000006 07:25:24 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:24 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:24 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans\nfd,', {'rfdno'}, 0x2c, {'wfdno'}}) 07:25:24 executing program 3: socket$unix(0x1, 0x1, 0x0) setrlimit(0x408000080000009, &(0x7f0000000000)={0x0, 0x1}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xb) ioctl$sock_proto_private(r0, 0x894c, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100)={0x7fff, 0xc802, 0x4, 0x4, 0x49b}, 0x14) 07:25:24 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000}}}) 07:25:24 executing program 1 (fault-call:4 fault-nth:13): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) [ 424.522007] FAULT_INJECTION: forcing a failure. [ 424.522007] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 424.563338] FAT-fs (loop4): bogus number of reserved sectors [ 424.567108] CPU: 1 PID: 21314 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #161 [ 424.576556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 424.585914] Call Trace: [ 424.586663] FAT-fs (loop4): Can't find a valid FAT filesystem [ 424.588517] dump_stack+0x244/0x39d [ 424.588550] ? dump_stack_print_info.cold.1+0x20/0x20 [ 424.603245] should_fail.cold.4+0xa/0x17 [ 424.603271] ? fault_create_debugfs_attr+0x1f0/0x1f0 07:25:24 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=\nd,', {'rfdno'}, 0x2c, {'wfdno'}}) 07:25:24 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ff]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:24 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0xffffffe7}}}) [ 424.612432] ? is_bpf_text_address+0xac/0x170 [ 424.616937] ? zap_class+0x640/0x640 [ 424.620659] ? lock_downgrade+0x900/0x900 [ 424.624825] ? check_preemption_disabled+0x48/0x280 [ 424.629860] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 424.634820] ? kasan_check_read+0x11/0x20 [ 424.638980] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 424.644268] ? rcu_softirq_qs+0x20/0x20 [ 424.648259] ? find_held_lock+0x36/0x1c0 [ 424.652347] ? check_preemption_disabled+0x48/0x280 [ 424.657378] ? lock_release+0xa00/0xa00 07:25:24 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 424.661367] ? perf_trace_sched_process_exec+0x860/0x860 [ 424.666847] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 424.672401] ? rcu_pm_notify+0xc0/0xc0 [ 424.676309] ? __might_sleep+0x95/0x190 [ 424.680305] __alloc_pages_nodemask+0x366/0xea0 [ 424.684989] ? iov_iter_get_pages_alloc+0x8ac/0x15a0 [ 424.690100] ? default_file_splice_read+0x1db/0xb20 [ 424.695126] ? do_splice_to+0x12e/0x190 [ 424.699111] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 424.704150] ? check_preemption_disabled+0x48/0x280 [ 424.709188] ? rcu_pm_notify+0xc0/0xc0 [ 424.709214] ? __kmalloc_node+0x3c/0x70 [ 424.709229] ? __kmalloc_node+0x3c/0x70 [ 424.709249] ? rcu_read_lock_sched_held+0x14f/0x180 [ 424.726082] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 424.726107] alloc_pages_current+0x173/0x350 [ 424.726132] push_pipe+0x3ff/0x7a0 [ 424.726151] ? __kmalloc_node+0x50/0x70 [ 424.743590] iov_iter_get_pages_alloc+0x938/0x15a0 [ 424.748559] ? check_preemption_disabled+0x48/0x280 [ 424.753596] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 424.758557] ? copyin+0x100/0x100 07:25:24 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 424.762027] ? rcu_softirq_qs+0x20/0x20 [ 424.766031] ? unwind_dump+0x190/0x190 [ 424.769948] ? is_bpf_text_address+0xd3/0x170 [ 424.774463] ? kernel_text_address+0x79/0xf0 [ 424.778883] ? __kernel_text_address+0xd/0x40 [ 424.783392] ? unwind_get_return_address+0x61/0xa0 [ 424.788339] ? __save_stack_trace+0x8d/0xf0 [ 424.792686] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 424.797719] ? iov_iter_pipe+0xbb/0x2f0 [ 424.801725] default_file_splice_read+0x1db/0xb20 [ 424.806598] ? __kmalloc+0x15b/0x760 [ 424.810323] ? alloc_pipe_info+0x2ce/0x5d0 [ 424.814574] ? splice_direct_to_actor+0x786/0x9d0 [ 424.819438] ? do_syscall_64+0x1b9/0x820 [ 424.823512] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 424.828909] ? percpu_ref_put_many+0x11c/0x260 [ 424.833511] ? iter_file_splice_write+0x1050/0x1050 [ 424.838553] ? check_preemption_disabled+0x48/0x280 [ 424.843592] ? kasan_check_read+0x11/0x20 [ 424.847754] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 424.853069] ? rcu_softirq_qs+0x20/0x20 [ 424.857062] ? __lockdep_init_map+0x105/0x590 07:25:24 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 424.861581] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 424.867131] ? fsnotify+0x50e/0xef0 [ 424.870799] ? __init_waitqueue_head+0x9e/0x150 [ 424.875490] ? fsnotify_first_mark+0x350/0x350 [ 424.880090] ? __fsnotify_parent+0xcc/0x430 [ 424.884426] ? __might_sleep+0x95/0x190 [ 424.888418] ? fsnotify+0xef0/0xef0 [ 424.892072] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 424.897112] ? selinux_file_permission+0x90/0x540 [ 424.901713] 9pnet: Could not find request transport: [ 424.901713] d [ 424.901975] ? security_file_permission+0x1c2/0x220 [ 424.913746] ? iter_file_splice_write+0x1050/0x1050 [ 424.918796] do_splice_to+0x12e/0x190 [ 424.922621] splice_direct_to_actor+0x31c/0x9d0 [ 424.927309] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 424.932867] ? pipe_to_sendpage+0x400/0x400 [ 424.937211] ? do_splice_to+0x190/0x190 [ 424.941201] ? security_file_permission+0x1c2/0x220 [ 424.946237] ? rw_verify_area+0x118/0x360 [ 424.950408] do_splice_direct+0x2d4/0x420 [ 424.954573] ? splice_direct_to_actor+0x9d0/0x9d0 [ 424.959441] ? rw_verify_area+0x118/0x360 [ 424.963602] do_sendfile+0x62a/0xe20 [ 424.967347] ? do_compat_pwritev64+0x1c0/0x1c0 [ 424.971943] ? __sb_end_write+0xd9/0x110 [ 424.976019] ? fput+0x130/0x1a0 [ 424.979312] ? do_syscall_64+0x9a/0x820 [ 424.983301] ? do_syscall_64+0x9a/0x820 [ 424.987297] __x64_sys_sendfile64+0x1fd/0x250 [ 424.991817] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 424.996442] do_syscall_64+0x1b9/0x820 [ 425.000374] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 425.005758] ? syscall_return_slowpath+0x5e0/0x5e0 [ 425.010712] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 425.015574] ? trace_hardirqs_on_caller+0x310/0x310 [ 425.020600] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 425.025625] ? prepare_exit_to_usermode+0x291/0x3b0 [ 425.025648] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 425.025672] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 425.025689] RIP: 0033:0x457669 [ 425.043936] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 425.062852] RSP: 002b:00007f3befc2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 425.070567] RAX: ffffffffffffffda RBX: 00007f3befc2fc90 RCX: 0000000000457669 [ 425.077824] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 425.085079] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 425.092347] R10: 000000000000a10a R11: 0000000000000246 R12: 00007f3befc306d4 [ 425.099609] R13: 00000000004c3e42 R14: 00000000004d6c90 R15: 0000000000000006 [ 425.156143] FAT-fs (loop4): bogus number of reserved sectors [ 425.170408] FAT-fs (loop4): Can't find a valid FAT filesystem 07:25:24 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfatH', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:24 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=\"d,', {'rfdno'}, 0x2c, {'wfdno'}}) 07:25:24 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffffffffffff]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:24 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x2}}}) 07:25:24 executing program 3: r0 = socket$unix(0x1, 0x3, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)) ioctl$sock_proto_private(r0, 0x894c, 0x0) 07:25:24 executing program 1 (fault-call:4 fault-nth:14): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) 07:25:24 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}}}) [ 425.298312] 9pnet: Could not find request transport: "d [ 425.313386] FAULT_INJECTION: forcing a failure. [ 425.313386] name failslab, interval 1, probability 0, space 0, times 0 [ 425.359279] CPU: 0 PID: 21361 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #161 [ 425.366680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 425.376040] Call Trace: [ 425.378641] dump_stack+0x244/0x39d [ 425.382288] ? dump_stack_print_info.cold.1+0x20/0x20 [ 425.387491] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 425.392427] ? kasan_check_read+0x11/0x20 [ 425.392443] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 425.392466] should_fail.cold.4+0xa/0x17 07:25:25 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x4, 0x3, 0x200) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) connect(r2, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @broadcast}, 0x4, 0x3, 0x1, 0x3}}, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000040)=0xfff, 0x4) sendto$inet(r4, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000001180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='sit0\x00', 0x10) flistxattr(r4, &(0x7f0000000580)=""/192, 0xc0) ioctl$UI_END_FF_ERASE(0xffffffffffffff9c, 0x400c55cb, &(0x7f00000004c0)={0x8, 0x4000000000000}) getsockname$inet6(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x1c) sendto$inet(r4, &(0x7f0000d7cfcb), 0x100000252, 0x0, &(0x7f0000893ff0), 0x10) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000240)={{0x3, 0x0, 0x5, 0x4, 0x1f}, 0xc26, 0x9, 0x4}) shutdown(r4, 0x400000000000001) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000400)={{0x3, 0x3, 0x332, 0x3, 0x21}, 0xfffffffffffffffe, 0x3ff, 0xffffffffffffff80}) r5 = gettid() capset(&(0x7f0000000340)={0x20080522, r5}, &(0x7f0000000480)={0x7, 0x4, 0x5, 0xa3e5, 0x9, 0x7fff}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000080)={'lo\x00', {0x2, 0x4e24, @local}}) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f00000002c0)={'broute\x00'}, &(0x7f00000003c0)=0x78) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000540)) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x400, @remote}, 0xffffffffffffff06) connect$inet(r6, &(0x7f0000000380)={0x2, 0x4e21, @broadcast}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 425.392498] ? find_held_lock+0x36/0x1c0 [ 425.392518] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 425.410092] ? check_preemption_disabled+0x48/0x280 [ 425.410119] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 425.410139] ? rcu_pm_notify+0xc0/0xc0 [ 425.420249] ? find_held_lock+0x36/0x1c0 [ 425.433745] ? perf_trace_sched_process_exec+0x860/0x860 [ 425.439226] ? check_preemption_disabled+0x48/0x280 [ 425.444258] __should_failslab+0x124/0x180 [ 425.448508] should_failslab+0x9/0x14 [ 425.452321] __kmalloc+0x2e0/0x760 [ 425.455880] ? __kmalloc_node+0x3c/0x70 07:25:25 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x1000000}}}) [ 425.459866] ? __kmalloc_node+0x3c/0x70 [ 425.463854] ? rw_copy_check_uvector+0x364/0x3e0 [ 425.468631] rw_copy_check_uvector+0x364/0x3e0 [ 425.473232] ? alloc_pages_current+0x17b/0x350 [ 425.477835] import_iovec+0xcf/0x4b0 [ 425.481574] ? dup_iter+0x260/0x260 [ 425.485216] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 425.490777] ? iov_iter_get_pages_alloc+0x3f5/0x15a0 [ 425.495908] vfs_readv+0xf5/0x1c0 [ 425.499377] ? compat_rw_copy_check_uvector+0x440/0x440 [ 425.504750] ? unwind_dump+0x190/0x190 [ 425.508671] ? is_bpf_text_address+0xd3/0x170 [ 425.508691] ? kernel_text_address+0x79/0xf0 [ 425.508714] ? __kernel_text_address+0xd/0x40 [ 425.517606] ? unwind_get_return_address+0x61/0xa0 [ 425.517627] ? __save_stack_trace+0x8d/0xf0 [ 425.517655] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 425.517677] ? iov_iter_pipe+0xbb/0x2f0 [ 425.540381] default_file_splice_read+0x539/0xb20 [ 425.545235] ? __kmalloc+0x15b/0x760 [ 425.548966] ? alloc_pipe_info+0x2ce/0x5d0 [ 425.553212] ? splice_direct_to_actor+0x786/0x9d0 07:25:25 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0xfdfdffffffffffff}}}) [ 425.558082] ? iter_file_splice_write+0x1050/0x1050 [ 425.563115] ? check_preemption_disabled+0x48/0x280 [ 425.568155] ? kasan_check_read+0x11/0x20 [ 425.572320] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 425.577613] ? rcu_softirq_qs+0x20/0x20 [ 425.581601] ? __lockdep_init_map+0x105/0x590 [ 425.586133] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 425.591683] ? fsnotify+0x50e/0xef0 [ 425.595334] ? __init_waitqueue_head+0x9e/0x150 [ 425.600044] ? selinux_file_permission+0x90/0x540 [ 425.604904] ? security_file_permission+0x1c2/0x220 [ 425.609941] ? iter_file_splice_write+0x1050/0x1050 [ 425.614974] do_splice_to+0x12e/0x190 [ 425.618799] splice_direct_to_actor+0x31c/0x9d0 [ 425.623489] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 425.629053] ? pipe_to_sendpage+0x400/0x400 [ 425.633398] ? do_splice_to+0x190/0x190 [ 425.637386] ? security_file_permission+0x1c2/0x220 [ 425.642426] ? rw_verify_area+0x118/0x360 [ 425.646592] do_splice_direct+0x2d4/0x420 [ 425.650757] ? splice_direct_to_actor+0x9d0/0x9d0 [ 425.655636] ? rw_verify_area+0x118/0x360 07:25:25 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0xe7ffffffffffffff}}}) [ 425.659812] do_sendfile+0x62a/0xe20 [ 425.663557] ? do_compat_pwritev64+0x1c0/0x1c0 [ 425.668160] ? __sb_end_write+0xd9/0x110 [ 425.672245] ? fput+0x130/0x1a0 [ 425.675537] ? do_syscall_64+0x9a/0x820 [ 425.679527] ? do_syscall_64+0x9a/0x820 [ 425.683521] __x64_sys_sendfile64+0x1fd/0x250 [ 425.688043] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 425.692654] do_syscall_64+0x1b9/0x820 [ 425.696564] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 425.701940] ? syscall_return_slowpath+0x5e0/0x5e0 [ 425.706885] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 425.711743] ? trace_hardirqs_on_caller+0x310/0x310 [ 425.716830] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 425.721859] ? prepare_exit_to_usermode+0x291/0x3b0 [ 425.726893] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 425.731759] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 425.736968] RIP: 0033:0x457669 [ 425.740171] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 07:25:25 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=%d,', {'rfdno'}, 0x2c, {'wfdno'}}) [ 425.759095] RSP: 002b:00007f3befc2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 425.766807] RAX: ffffffffffffffda RBX: 00007f3befc2fc90 RCX: 0000000000457669 [ 425.774078] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 425.781350] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 425.788619] R10: 000000000000a10a R11: 0000000000000246 R12: 00007f3befc306d4 [ 425.795887] R13: 00000000004c3e42 R14: 00000000004d6c90 R15: 0000000000000006 [ 425.915707] 9pnet: Could not find request transport: %d 07:25:25 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat7', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:25 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:25 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0xfdfd}}}) 07:25:25 executing program 1 (fault-call:4 fault-nth:15): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) 07:25:25 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=,d,', {'rfdno'}, 0x2c, {'wfdno'}}) [ 426.092982] FAULT_INJECTION: forcing a failure. [ 426.092982] name failslab, interval 1, probability 0, space 0, times 0 [ 426.134879] CPU: 1 PID: 21410 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #161 [ 426.142289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 426.151650] Call Trace: [ 426.154257] dump_stack+0x244/0x39d [ 426.157908] ? dump_stack_print_info.cold.1+0x20/0x20 [ 426.163126] should_fail.cold.4+0xa/0x17 [ 426.167207] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 426.172327] ? seq_read+0x71/0x1150 [ 426.176011] ? mutex_trylock+0x2b0/0x2b0 [ 426.180088] ? zap_class+0x640/0x640 [ 426.183828] ? is_bpf_text_address+0xd3/0x170 [ 426.188347] ? find_held_lock+0x36/0x1c0 [ 426.192427] ? __lock_is_held+0xb5/0x140 [ 426.196517] ? perf_trace_sched_process_exec+0x860/0x860 [ 426.201993] ? __kmalloc+0x15b/0x760 [ 426.205720] ? rw_copy_check_uvector+0x364/0x3e0 [ 426.210501] ? import_iovec+0xcf/0x4b0 [ 426.214411] ? vfs_readv+0xf5/0x1c0 [ 426.218054] ? splice_direct_to_actor+0x31c/0x9d0 [ 426.222910] ? do_splice_direct+0x2d4/0x420 [ 426.227253] __should_failslab+0x124/0x180 [ 426.231510] should_failslab+0x9/0x14 [ 426.235348] kmem_cache_alloc_node_trace+0x270/0x740 [ 426.240592] __kmalloc_node+0x3c/0x70 [ 426.244407] kvmalloc_node+0x65/0xf0 [ 426.248140] seq_read+0x99b/0x1150 [ 426.249315] 9pnet: Could not find request transport: .d [ 426.251689] ? usercopy_warn+0x110/0x110 [ 426.251738] ? fsnotify_first_mark+0x350/0x350 [ 426.251753] ? __fsnotify_parent+0xcc/0x430 [ 426.251780] ? seq_escape+0x240/0x240 [ 426.273895] proc_reg_read+0x2a3/0x3d0 [ 426.277822] ? proc_reg_unlocked_ioctl+0x3c0/0x3c0 07:25:25 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:25 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=.d,', {'rfdno'}, 0x2c, {'wfdno'}}) [ 426.282785] ? security_file_permission+0x1c2/0x220 [ 426.287825] ? rw_verify_area+0x118/0x360 [ 426.291992] do_iter_read+0x4a3/0x650 [ 426.295820] vfs_readv+0x175/0x1c0 [ 426.299378] ? compat_rw_copy_check_uvector+0x440/0x440 [ 426.304752] ? unwind_dump+0x190/0x190 [ 426.308682] ? kernel_text_address+0x79/0xf0 [ 426.313106] ? __kernel_text_address+0xd/0x40 [ 426.313123] ? unwind_get_return_address+0x61/0xa0 [ 426.313143] ? __save_stack_trace+0x8d/0xf0 [ 426.313170] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 426.313193] ? iov_iter_pipe+0xbb/0x2f0 [ 426.322608] default_file_splice_read+0x539/0xb20 [ 426.322625] ? __kmalloc+0x15b/0x760 [ 426.322640] ? alloc_pipe_info+0x2ce/0x5d0 [ 426.322654] ? splice_direct_to_actor+0x786/0x9d0 [ 426.322679] ? iter_file_splice_write+0x1050/0x1050 [ 426.340992] ? check_preemption_disabled+0x48/0x280 [ 426.353902] ? kasan_check_read+0x11/0x20 [ 426.353920] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 426.353935] ? rcu_softirq_qs+0x20/0x20 [ 426.353954] ? __lockdep_init_map+0x105/0x590 [ 426.353985] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 426.387921] ? fsnotify+0x50e/0xef0 [ 426.391612] ? __init_waitqueue_head+0x9e/0x150 [ 426.396323] ? selinux_file_permission+0x90/0x540 [ 426.401168] ? security_file_permission+0x1c2/0x220 [ 426.406191] ? iter_file_splice_write+0x1050/0x1050 [ 426.411205] do_splice_to+0x12e/0x190 [ 426.414999] splice_direct_to_actor+0x31c/0x9d0 [ 426.419658] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 426.425183] ? pipe_to_sendpage+0x400/0x400 [ 426.429497] ? do_splice_to+0x190/0x190 [ 426.433468] ? security_file_permission+0x1c2/0x220 [ 426.438473] ? rw_verify_area+0x118/0x360 [ 426.442610] do_splice_direct+0x2d4/0x420 [ 426.446750] ? splice_direct_to_actor+0x9d0/0x9d0 [ 426.451594] ? rw_verify_area+0x118/0x360 [ 426.455732] do_sendfile+0x62a/0xe20 [ 426.459442] ? do_compat_pwritev64+0x1c0/0x1c0 [ 426.464012] ? __sb_end_write+0xd9/0x110 [ 426.468064] ? fput+0x130/0x1a0 [ 426.471354] ? do_syscall_64+0x9a/0x820 [ 426.475316] ? do_syscall_64+0x9a/0x820 [ 426.479282] __x64_sys_sendfile64+0x1fd/0x250 [ 426.483775] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 426.488351] do_syscall_64+0x1b9/0x820 [ 426.492234] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 426.497586] ? syscall_return_slowpath+0x5e0/0x5e0 [ 426.502516] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 426.507366] ? trace_hardirqs_on_caller+0x310/0x310 [ 426.512401] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 426.517404] ? prepare_exit_to_usermode+0x291/0x3b0 [ 426.522412] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 426.527248] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 426.532426] RIP: 0033:0x457669 [ 426.535617] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 426.554521] RSP: 002b:00007f3befc2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 426.562222] RAX: ffffffffffffffda RBX: 00007f3befc2fc90 RCX: 0000000000457669 [ 426.569478] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 426.576731] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 07:25:26 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000100)) getgroups(0x2, &(0x7f0000000140)=[0xee00, 0xee00]) chown(&(0x7f0000000040)='./file0\x00', r1, r2) setrlimit(0x408000000000007, &(0x7f0000000000)) ioctl$sock_proto_private(r0, 0x894c, 0x0) 07:25:26 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:26 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=/d,', {'rfdno'}, 0x2c, {'wfdno'}}) 07:25:26 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0xffe7}}}) [ 426.583985] R10: 000000000000a10a R11: 0000000000000246 R12: 00007f3befc306d4 [ 426.591247] R13: 00000000004c3e42 R14: 00000000004d6c90 R15: 0000000000000006 07:25:26 executing program 1 (fault-call:4 fault-nth:16): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) [ 426.700564] 9pnet: Could not find request transport: /d 07:25:26 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:26 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe7]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:26 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdfd}}}) 07:25:26 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=f%,', {'rfdno'}, 0x2c, {'wfdno'}}) [ 426.777781] FAULT_INJECTION: forcing a failure. [ 426.777781] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 426.789643] CPU: 1 PID: 21448 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #161 [ 426.789656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 426.789661] Call Trace: [ 426.789688] dump_stack+0x244/0x39d [ 426.789713] ? dump_stack_print_info.cold.1+0x20/0x20 [ 426.789743] ? zap_class+0x640/0x640 [ 426.789759] ? print_usage_bug+0xc0/0xc0 [ 426.789810] should_fail.cold.4+0xa/0x17 [ 426.829779] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 426.834911] ? find_held_lock+0x36/0x1c0 [ 426.839003] ? get_mem_cgroup_from_mm.part.62+0x204/0x880 [ 426.844565] ? lock_downgrade+0x900/0x900 [ 426.848727] ? check_preemption_disabled+0x48/0x280 [ 426.853779] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 426.858724] ? kasan_check_read+0x11/0x20 [ 426.862888] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 426.868179] ? zap_class+0x640/0x640 [ 426.871905] ? rcu_softirq_qs+0x20/0x20 07:25:26 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=f,,', {'rfdno'}, 0x2c, {'wfdno'}}) [ 426.874506] 9pnet: Could not find request transport: f% [ 426.875920] ? rcu_read_unlock+0x16/0x60 [ 426.875944] __alloc_pages_nodemask+0x366/0xea0 [ 426.875962] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 426.894957] ? kasan_check_read+0x11/0x20 [ 426.899132] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 426.904177] ? __lock_is_held+0xb5/0x140 [ 426.908352] ? trace_hardirqs_off+0xb8/0x310 [ 426.912779] cache_grow_begin+0xa5/0x8c0 [ 426.916867] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 426.922435] ? check_preemption_disabled+0x48/0x280 07:25:26 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 426.927474] kmem_cache_alloc_node_trace+0x670/0x740 [ 426.932599] __kmalloc_node+0x3c/0x70 [ 426.936416] kvmalloc_node+0x65/0xf0 [ 426.940149] seq_read+0x99b/0x1150 [ 426.943715] ? usercopy_warn+0x110/0x110 [ 426.947829] ? fsnotify_first_mark+0x350/0x350 [ 426.952436] ? __fsnotify_parent+0xcc/0x430 [ 426.956777] ? seq_escape+0x240/0x240 [ 426.960615] proc_reg_read+0x2a3/0x3d0 [ 426.964582] ? proc_reg_unlocked_ioctl+0x3c0/0x3c0 [ 426.969559] ? security_file_permission+0x1c2/0x220 07:25:26 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=f\n,', {'rfdno'}, 0x2c, {'wfdno'}}) [ 426.972105] 9pnet: Could not find request transport: f [ 426.974583] ? rw_verify_area+0x118/0x360 [ 426.974603] do_iter_read+0x4a3/0x650 [ 426.974629] vfs_readv+0x175/0x1c0 [ 426.974647] ? compat_rw_copy_check_uvector+0x440/0x440 [ 426.996790] ? unwind_dump+0x190/0x190 [ 427.000705] ? kernel_text_address+0x79/0xf0 [ 427.005135] ? __kernel_text_address+0xd/0x40 [ 427.009644] ? unwind_get_return_address+0x61/0xa0 [ 427.014592] ? __save_stack_trace+0x8d/0xf0 [ 427.018941] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 427.023974] ? iov_iter_pipe+0xbb/0x2f0 [ 427.027974] default_file_splice_read+0x539/0xb20 [ 427.032831] ? __kmalloc+0x15b/0x760 [ 427.036561] ? alloc_pipe_info+0x2ce/0x5d0 [ 427.040808] ? splice_direct_to_actor+0x786/0x9d0 [ 427.045674] ? iter_file_splice_write+0x1050/0x1050 [ 427.050705] ? check_preemption_disabled+0x48/0x280 [ 427.055739] ? kasan_check_read+0x11/0x20 [ 427.059911] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 427.065202] ? rcu_softirq_qs+0x20/0x20 [ 427.069200] ? __lockdep_init_map+0x105/0x590 [ 427.070650] 9pnet: Could not find request transport: f 07:25:26 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)) ioctl$sock_proto_private(r0, 0x894c, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x3, 0xff}) 07:25:26 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 427.070650] [ 427.073723] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 427.073740] ? fsnotify+0x50e/0xef0 [ 427.073798] ? __init_waitqueue_head+0x9e/0x150 [ 427.073833] ? selinux_file_permission+0x90/0x540 [ 427.099285] ? security_file_permission+0x1c2/0x220 [ 427.104322] ? iter_file_splice_write+0x1050/0x1050 [ 427.109352] do_splice_to+0x12e/0x190 [ 427.113170] splice_direct_to_actor+0x31c/0x9d0 [ 427.117852] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 427.123406] ? pipe_to_sendpage+0x400/0x400 07:25:26 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=f\",', {'rfdno'}, 0x2c, {'wfdno'}}) [ 427.123430] ? do_splice_to+0x190/0x190 [ 427.123450] ? security_file_permission+0x1c2/0x220 [ 427.136801] ? rw_verify_area+0x118/0x360 [ 427.140964] do_splice_direct+0x2d4/0x420 [ 427.140985] ? splice_direct_to_actor+0x9d0/0x9d0 [ 427.141007] ? rw_verify_area+0x118/0x360 [ 427.154124] do_sendfile+0x62a/0xe20 [ 427.157874] ? do_compat_pwritev64+0x1c0/0x1c0 [ 427.162485] ? __sb_end_write+0xd9/0x110 [ 427.166572] ? fput+0x130/0x1a0 [ 427.169884] ? do_syscall_64+0x9a/0x820 [ 427.173867] ? do_syscall_64+0x9a/0x820 [ 427.177873] __x64_sys_sendfile64+0x1fd/0x250 [ 427.182383] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 427.186993] do_syscall_64+0x1b9/0x820 [ 427.190909] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 427.196303] ? syscall_return_slowpath+0x5e0/0x5e0 [ 427.201247] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 427.206108] ? trace_hardirqs_on_caller+0x310/0x310 [ 427.211144] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 427.216180] ? prepare_exit_to_usermode+0x291/0x3b0 [ 427.218614] 9pnet: Could not find request transport: f" 07:25:26 executing program 3: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000002, 0x10050, r0, 0x2c) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000080)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e21, @empty}, {0x2, 0x4e21, @loopback}, 0x100, 0x0, 0x0, 0x0, 0x3, 0x0, 0x14f, 0x5, 0x8dd}) r1 = socket$unix(0x1, 0x1, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)={0x800}) setrlimit(0x8, &(0x7f0000000100)={0x20, 0x5}) ioctl$sock_proto_private(r1, 0x894c, 0x0) [ 427.221209] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 427.221235] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 427.221248] RIP: 0033:0x457669 [ 427.221267] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 427.258732] RSP: 002b:00007f3befc2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 427.258748] RAX: ffffffffffffffda RBX: 00007f3befc2fc90 RCX: 0000000000457669 [ 427.258757] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 427.258776] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 427.258791] R10: 000000000000a10a R11: 0000000000000246 R12: 00007f3befc306d4 [ 427.295611] R13: 00000000004c3e42 R14: 00000000004d6c90 R15: 0000000000000006 07:25:27 executing program 1 (fault-call:4 fault-nth:17): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) [ 427.461518] FAT-fs (loop4): bogus number of reserved sectors [ 427.462219] FAULT_INJECTION: forcing a failure. [ 427.462219] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 427.479195] CPU: 1 PID: 21491 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #161 [ 427.486569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 427.491315] FAT-fs (loop4): Can't find a valid FAT filesystem [ 427.495919] Call Trace: [ 427.495944] dump_stack+0x244/0x39d [ 427.495966] ? dump_stack_print_info.cold.1+0x20/0x20 [ 427.495988] ? zap_class+0x640/0x640 [ 427.516962] ? print_usage_bug+0xc0/0xc0 [ 427.521048] should_fail.cold.4+0xa/0x17 [ 427.525127] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 427.525144] ? find_held_lock+0x36/0x1c0 [ 427.525168] ? get_mem_cgroup_from_mm.part.62+0x204/0x880 [ 427.534327] ? lock_downgrade+0x900/0x900 [ 427.534344] ? check_preemption_disabled+0x48/0x280 [ 427.534363] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 427.534378] ? kasan_check_read+0x11/0x20 [ 427.534398] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 427.549077] ? zap_class+0x640/0x640 [ 427.558134] ? rcu_softirq_qs+0x20/0x20 [ 427.558184] ? rcu_read_unlock+0x16/0x60 [ 427.558206] __alloc_pages_nodemask+0x366/0xea0 [ 427.579893] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 427.584839] ? kasan_check_read+0x11/0x20 [ 427.589006] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 427.594028] ? __lock_is_held+0xb5/0x140 [ 427.598101] ? trace_hardirqs_off+0xb8/0x310 [ 427.602514] cache_grow_begin+0xa5/0x8c0 [ 427.606582] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 427.612112] ? check_preemption_disabled+0x48/0x280 [ 427.617119] kmem_cache_alloc_node_trace+0x670/0x740 [ 427.622230] __kmalloc_node+0x3c/0x70 [ 427.626026] kvmalloc_node+0x65/0xf0 [ 427.629729] seq_read+0x99b/0x1150 [ 427.633259] ? usercopy_warn+0x110/0x110 [ 427.637312] ? fsnotify_first_mark+0x350/0x350 [ 427.641878] ? __fsnotify_parent+0xcc/0x430 [ 427.646188] ? seq_escape+0x240/0x240 [ 427.649978] proc_reg_read+0x2a3/0x3d0 [ 427.653856] ? proc_reg_unlocked_ioctl+0x3c0/0x3c0 [ 427.658788] ? security_file_permission+0x1c2/0x220 [ 427.663799] ? rw_verify_area+0x118/0x360 [ 427.667937] do_iter_read+0x4a3/0x650 [ 427.671732] vfs_readv+0x175/0x1c0 [ 427.675264] ? compat_rw_copy_check_uvector+0x440/0x440 [ 427.680614] ? unwind_dump+0x190/0x190 [ 427.684497] ? kernel_text_address+0x79/0xf0 [ 427.688905] ? __kernel_text_address+0xd/0x40 [ 427.693662] ? unwind_get_return_address+0x61/0xa0 [ 427.698594] ? __save_stack_trace+0x8d/0xf0 [ 427.702916] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 427.707949] ? iov_iter_pipe+0xbb/0x2f0 [ 427.711923] default_file_splice_read+0x539/0xb20 [ 427.716778] ? __kmalloc+0x15b/0x760 [ 427.720481] ? alloc_pipe_info+0x2ce/0x5d0 [ 427.724704] ? splice_direct_to_actor+0x786/0x9d0 [ 427.729546] ? iter_file_splice_write+0x1050/0x1050 [ 427.734559] ? check_preemption_disabled+0x48/0x280 [ 427.739579] ? kasan_check_read+0x11/0x20 [ 427.743724] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 427.749010] ? rcu_softirq_qs+0x20/0x20 [ 427.752978] ? __lockdep_init_map+0x105/0x590 [ 427.757494] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 427.763045] ? fsnotify+0x50e/0xef0 [ 427.766680] ? __init_waitqueue_head+0x9e/0x150 [ 427.771355] ? selinux_file_permission+0x90/0x540 [ 427.776205] ? security_file_permission+0x1c2/0x220 [ 427.781224] ? iter_file_splice_write+0x1050/0x1050 [ 427.786243] do_splice_to+0x12e/0x190 [ 427.790038] splice_direct_to_actor+0x31c/0x9d0 [ 427.794696] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 427.800234] ? pipe_to_sendpage+0x400/0x400 [ 427.804570] ? do_splice_to+0x190/0x190 [ 427.808548] ? security_file_permission+0x1c2/0x220 [ 427.813567] ? rw_verify_area+0x118/0x360 [ 427.817706] do_splice_direct+0x2d4/0x420 [ 427.821844] ? splice_direct_to_actor+0x9d0/0x9d0 [ 427.826691] ? rw_verify_area+0x118/0x360 [ 427.830842] do_sendfile+0x62a/0xe20 [ 427.834558] ? do_compat_pwritev64+0x1c0/0x1c0 [ 427.839153] ? __sb_end_write+0xd9/0x110 [ 427.843217] ? fput+0x130/0x1a0 [ 427.846487] ? do_syscall_64+0x9a/0x820 [ 427.850476] ? do_syscall_64+0x9a/0x820 [ 427.854476] __x64_sys_sendfile64+0x1fd/0x250 [ 427.858958] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 427.863555] do_syscall_64+0x1b9/0x820 [ 427.867460] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 427.872821] ? syscall_return_slowpath+0x5e0/0x5e0 [ 427.877747] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 427.882598] ? trace_hardirqs_on_caller+0x310/0x310 [ 427.887602] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 427.892616] ? prepare_exit_to_usermode+0x291/0x3b0 [ 427.897626] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 427.902459] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 427.907648] RIP: 0033:0x457669 [ 427.910852] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 427.929744] RSP: 002b:00007f3befc2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 427.937447] RAX: ffffffffffffffda RBX: 00007f3befc2fc90 RCX: 0000000000457669 [ 427.944706] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 427.951967] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 427.959222] R10: 000000000000a10a R11: 0000000000000246 R12: 00007f3befc306d4 [ 427.966486] R13: 00000000004c3e42 R14: 00000000004d6c90 R15: 0000000000000006 [ 428.024829] FAT-fs (loop4): bogus number of reserved sectors [ 428.030694] FAT-fs (loop4): Can't find a valid FAT filesystem 07:25:27 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:27 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd8', {'rfdno'}, 0x2c, {'wfdno'}}) 07:25:27 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:27 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe7}}}) 07:25:27 executing program 3: r0 = open(&(0x7f0000000080)='./file0\x00', 0x10000, 0x40) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f00000000c0)={0x9, 0x1000, "ba68e33d7838f476567224b3ce0bf15bea5099fac53b5885", {0x7, 0xd4}, 0xffffffff}) r1 = socket$unix(0x1, 0x3, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) ioctl$sock_proto_private(r1, 0x894c, 0x0) syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x1, 0x501c41) 07:25:27 executing program 1 (fault-call:4 fault-nth:18): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) 07:25:27 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}}}) [ 428.155756] FAULT_INJECTION: forcing a failure. [ 428.155756] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 428.188298] 9pnet: Could not find request transport: fd8rfdno=0xffffffffffffffff 07:25:27 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ffffff]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 428.201452] CPU: 1 PID: 21510 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #161 [ 428.208862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 428.218225] Call Trace: [ 428.220834] dump_stack+0x244/0x39d [ 428.224490] ? dump_stack_print_info.cold.1+0x20/0x20 [ 428.229713] should_fail.cold.4+0xa/0x17 [ 428.233806] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 428.233826] ? is_bpf_text_address+0xac/0x170 [ 428.233844] ? zap_class+0x640/0x640 [ 428.233859] ? lock_downgrade+0x900/0x900 [ 428.233876] ? check_preemption_disabled+0x48/0x280 [ 428.233895] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 428.243730] ? kasan_check_read+0x11/0x20 [ 428.243746] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 428.243761] ? rcu_softirq_qs+0x20/0x20 [ 428.243794] ? find_held_lock+0x36/0x1c0 [ 428.243816] ? ata_sff_drain_fifo+0x1d0/0x1d0 [ 428.283563] ? lock_release+0xa00/0xa00 [ 428.287560] ? perf_trace_sched_process_exec+0x860/0x860 [ 428.293030] ? __might_sleep+0x95/0x190 [ 428.297028] __alloc_pages_nodemask+0x366/0xea0 07:25:27 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}}}) [ 428.301713] ? iov_iter_get_pages_alloc+0x8ac/0x15a0 [ 428.306826] ? default_file_splice_read+0x1db/0xb20 [ 428.311869] ? do_splice_to+0x12e/0x190 [ 428.315874] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 428.320932] ? check_preemption_disabled+0x48/0x280 [ 428.325986] ? rcu_pm_notify+0xc0/0xc0 [ 428.329909] ? __kmalloc_node+0x3c/0x70 [ 428.333900] ? __kmalloc_node+0x3c/0x70 [ 428.337893] ? rcu_read_lock_sched_held+0x14f/0x180 [ 428.342928] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 428.348507] alloc_pages_current+0x173/0x350 [ 428.352941] push_pipe+0x3ff/0x7a0 07:25:27 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffe7]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 428.356493] ? __kmalloc_node+0x50/0x70 [ 428.360507] iov_iter_get_pages_alloc+0x938/0x15a0 [ 428.365463] ? free_unref_page+0x6e0/0x960 [ 428.370221] ? copyin+0x100/0x100 [ 428.373685] ? trace_hardirqs_on+0xbd/0x310 [ 428.378018] ? __put_page+0x122/0x190 [ 428.381850] ? trace_hardirqs_off_caller+0x310/0x310 [ 428.386971] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 428.392534] ? mark_free_pages+0x3c0/0x3c0 [ 428.392556] ? check_preemption_disabled+0x48/0x280 [ 428.392573] ? release_sock+0x1ec/0x2c0 [ 428.392592] ? __local_bh_enable_ip+0x160/0x260 [ 428.410479] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 428.415540] ? iov_iter_pipe+0xbb/0x2f0 [ 428.419557] default_file_splice_read+0x1db/0xb20 [ 428.424435] ? iter_file_splice_write+0x1050/0x1050 [ 428.429484] ? __put_page+0x136/0x190 [ 428.433322] ? __put_compound_page+0xe0/0xe0 [ 428.437758] ? kernel_sendpage+0x9a/0xf0 [ 428.441865] ? generic_pipe_buf_release+0x1de/0x2b0 [ 428.446925] ? anon_pipe_buf_release+0x530/0x530 [ 428.451713] ? pipe_to_sendpage+0x2d8/0x400 07:25:28 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0xe7}}}) [ 428.456081] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 428.461647] ? fsnotify+0x50e/0xef0 [ 428.465308] ? generic_pipe_buf_nosteal+0x10/0x10 [ 428.470178] ? fsnotify_first_mark+0x350/0x350 [ 428.474792] ? __fsnotify_parent+0xcc/0x430 [ 428.479138] ? __might_sleep+0x95/0x190 [ 428.483139] ? fsnotify+0xef0/0xef0 [ 428.486807] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 428.491850] ? selinux_file_permission+0x90/0x540 [ 428.496729] ? security_file_permission+0x1c2/0x220 [ 428.501804] ? iter_file_splice_write+0x1050/0x1050 07:25:28 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 428.506849] do_splice_to+0x12e/0x190 [ 428.510678] splice_direct_to_actor+0x31c/0x9d0 [ 428.515369] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 428.520964] ? pipe_to_sendpage+0x400/0x400 [ 428.525317] ? do_splice_to+0x190/0x190 [ 428.529317] ? security_file_permission+0x1c2/0x220 [ 428.534364] ? rw_verify_area+0x118/0x360 [ 428.538549] do_splice_direct+0x2d4/0x420 [ 428.542737] ? splice_direct_to_actor+0x9d0/0x9d0 [ 428.542773] ? rw_verify_area+0x118/0x360 [ 428.542792] do_sendfile+0x62a/0xe20 [ 428.542822] ? do_compat_pwritev64+0x1c0/0x1c0 [ 428.555546] ? __sb_end_write+0xd9/0x110 [ 428.564204] ? fput+0x130/0x1a0 [ 428.567511] ? do_syscall_64+0x9a/0x820 [ 428.571533] ? do_syscall_64+0x9a/0x820 [ 428.575550] __x64_sys_sendfile64+0x1fd/0x250 [ 428.580081] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 428.584709] do_syscall_64+0x1b9/0x820 [ 428.588625] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 428.594022] ? syscall_return_slowpath+0x5e0/0x5e0 [ 428.598980] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 428.603848] ? trace_hardirqs_on_caller+0x310/0x310 [ 428.608884] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 428.613961] ? prepare_exit_to_usermode+0x291/0x3b0 [ 428.619003] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 428.623881] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 428.629096] RIP: 0033:0x457669 [ 428.632300] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 428.651210] RSP: 002b:00007f3befc2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 428.658924] RAX: ffffffffffffffda RBX: 00007f3befc2fc90 RCX: 0000000000457669 [ 428.666203] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 428.673481] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 428.680785] R10: 000000000000a10a R11: 0000000000000246 R12: 00007f3befc306d4 [ 428.688062] R13: 00000000004c3e42 R14: 00000000004d6c90 R15: 0000000000000006 [ 428.720238] FAT-fs (loop4): bogus number of reserved sectors [ 428.735130] FAT-fs (loop4): Can't find a valid FAT filesystem 07:25:28 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat&', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:28 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0xe7ff}}}) 07:25:28 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:28 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) ioctl$sock_proto_private(r0, 0x894c, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0xa00, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000080)=ANY=[@ANYBLOB="0500020000008100050009000900"], &(0x7f00000000c0)=0xe) 07:25:28 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd\"', {'rfdno'}, 0x2c, {'wfdno'}}) 07:25:28 executing program 1 (fault-call:4 fault-nth:19): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) [ 428.799864] FAT-fs (loop4): bogus number of reserved sectors [ 428.805919] FAT-fs (loop4): Can't find a valid FAT filesystem [ 428.916548] 9pnet: Could not find request transport: fd"rfdno=0xffffffffffffffff [ 428.932218] FAULT_INJECTION: forcing a failure. [ 428.932218] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 428.961408] CPU: 1 PID: 21554 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #161 [ 428.968843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 428.978221] Call Trace: [ 428.980841] dump_stack+0x244/0x39d [ 428.984499] ? dump_stack_print_info.cold.1+0x20/0x20 [ 428.989747] should_fail.cold.4+0xa/0x17 [ 428.993867] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 428.999005] ? is_bpf_text_address+0xac/0x170 [ 429.003543] ? zap_class+0x640/0x640 [ 429.007287] ? lock_downgrade+0x900/0x900 [ 429.011463] ? check_preemption_disabled+0x48/0x280 07:25:28 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)) ioctl$sock_proto_private(r0, 0x894c, 0x0) ioctl$sock_proto_private(r0, 0x89e3, &(0x7f0000000040)="6de9c03545f3cd1cdfc2fd84f308f16c151d9b0a73e44800fdddb6e72d6b332dee0d18770780cf26584bd39a214b264c89ffad668c6d5070139f68eba5401370e3027adeddaa9bc29bcdd0fd78f5eae2a3db09a6c25127d90500e594b983010bffedf4995dc338150b6e33642ff47bb418175621a4a52b363049f5dc9a888f7b7061a30fec76966c309136e9b99a586a0cb4c42159dfa81b5f0962e21f50f4f23f145212a1de86b9aa50c5621a746750f4d6071bde575704c19952ac3d06ce5a6a02a556d76563") 07:25:28 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe7}}}) [ 429.016601] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 429.016619] ? kasan_check_read+0x11/0x20 [ 429.016632] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 429.016646] ? rcu_softirq_qs+0x20/0x20 [ 429.016669] ? find_held_lock+0x36/0x1c0 [ 429.025806] ? lock_release+0xa00/0xa00 [ 429.025823] ? perf_trace_sched_process_exec+0x860/0x860 [ 429.025846] ? __might_sleep+0x95/0x190 [ 429.052579] __alloc_pages_nodemask+0x366/0xea0 [ 429.057265] ? iov_iter_get_pages_alloc+0x8ac/0x15a0 [ 429.062383] ? default_file_splice_read+0x1db/0xb20 07:25:28 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x47c, 0x8001) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000080)) ioctl$sock_proto_private(r0, 0x894c, 0x0) [ 429.067415] ? do_splice_to+0x12e/0x190 [ 429.071431] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 429.076483] ? check_preemption_disabled+0x48/0x280 [ 429.081559] ? rcu_pm_notify+0xc0/0xc0 [ 429.081584] ? __kmalloc_node+0x3c/0x70 [ 429.089455] ? __kmalloc_node+0x3c/0x70 [ 429.089479] ? rcu_read_lock_sched_held+0x14f/0x180 [ 429.098472] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 429.104028] alloc_pages_current+0x173/0x350 [ 429.104054] push_pipe+0x3ff/0x7a0 [ 429.104069] ? __kmalloc_node+0x50/0x70 [ 429.104093] iov_iter_get_pages_alloc+0x938/0x15a0 [ 429.112038] ? free_unref_page+0x6e0/0x960 [ 429.112062] ? copyin+0x100/0x100 [ 429.112077] ? trace_hardirqs_on+0xbd/0x310 [ 429.112093] ? __put_page+0x122/0x190 [ 429.112110] ? trace_hardirqs_off_caller+0x310/0x310 [ 429.112131] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 429.112154] ? mark_free_pages+0x3c0/0x3c0 [ 429.128759] ? check_preemption_disabled+0x48/0x280 [ 429.136915] ? release_sock+0x1ec/0x2c0 [ 429.136937] ? __local_bh_enable_ip+0x160/0x260 07:25:28 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000080)={{0x9, 0xffff}, 'port0\x00', 0x4, 0x2, 0x1, 0x5, 0x2, 0x154c4ffc, 0x8, 0x0, 0x2, 0x8}) ioctl$sock_proto_private(r0, 0x894c, 0x0) [ 429.136954] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 429.136975] ? iov_iter_pipe+0xbb/0x2f0 [ 429.174444] default_file_splice_read+0x1db/0xb20 [ 429.179312] ? iter_file_splice_write+0x1050/0x1050 [ 429.184343] ? __put_page+0x136/0x190 [ 429.188157] ? __put_compound_page+0xe0/0xe0 [ 429.188178] ? kernel_sendpage+0x9a/0xf0 [ 429.188203] ? generic_pipe_buf_release+0x1de/0x2b0 [ 429.188223] ? anon_pipe_buf_release+0x530/0x530 [ 429.196688] ? pipe_to_sendpage+0x2d8/0x400 [ 429.210797] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 07:25:28 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)) ioctl$sock_proto_private(r0, 0x894c, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000040)) [ 429.216348] ? fsnotify+0x50e/0xef0 [ 429.220001] ? generic_pipe_buf_nosteal+0x10/0x10 [ 429.224857] ? fsnotify_first_mark+0x350/0x350 [ 429.229451] ? __fsnotify_parent+0xcc/0x430 [ 429.233801] ? __might_sleep+0x95/0x190 [ 429.237797] ? fsnotify+0xef0/0xef0 [ 429.241445] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 429.246473] ? selinux_file_permission+0x90/0x540 [ 429.251342] ? security_file_permission+0x1c2/0x220 [ 429.256380] ? iter_file_splice_write+0x1050/0x1050 [ 429.261406] do_splice_to+0x12e/0x190 07:25:28 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}}}) [ 429.265225] splice_direct_to_actor+0x31c/0x9d0 [ 429.269905] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 429.269926] ? pipe_to_sendpage+0x400/0x400 [ 429.269947] ? do_splice_to+0x190/0x190 [ 429.283811] ? security_file_permission+0x1c2/0x220 [ 429.288842] ? rw_verify_area+0x118/0x360 [ 429.288862] do_splice_direct+0x2d4/0x420 [ 429.288881] ? splice_direct_to_actor+0x9d0/0x9d0 [ 429.302011] ? rw_verify_area+0x118/0x360 [ 429.306173] do_sendfile+0x62a/0xe20 [ 429.309910] ? do_compat_pwritev64+0x1c0/0x1c0 [ 429.314505] ? __sb_end_write+0xd9/0x110 [ 429.318609] ? fput+0x130/0x1a0 [ 429.321910] ? do_syscall_64+0x9a/0x820 [ 429.325901] ? do_syscall_64+0x9a/0x820 [ 429.329898] __x64_sys_sendfile64+0x1fd/0x250 [ 429.334410] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 429.339019] do_syscall_64+0x1b9/0x820 [ 429.342922] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 429.348306] ? syscall_return_slowpath+0x5e0/0x5e0 [ 429.353249] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 429.358125] ? trace_hardirqs_on_caller+0x310/0x310 [ 429.363163] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 429.368190] ? prepare_exit_to_usermode+0x291/0x3b0 [ 429.373224] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 429.378085] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 429.383277] RIP: 0033:0x457669 [ 429.386484] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 429.405501] RSP: 002b:00007f3befc2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 429.405518] RAX: ffffffffffffffda RBX: 00007f3befc2fc90 RCX: 0000000000457669 [ 429.405546] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 429.405561] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 429.420538] R10: 000000000000a10a R11: 0000000000000246 R12: 00007f3befc306d4 [ 429.420549] R13: 00000000004c3e42 R14: 00000000004d6c90 R15: 0000000000000006 07:25:29 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x04', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:29 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}}}) 07:25:29 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)) ioctl$sock_proto_private(r0, 0x89e3, 0x0) 07:25:29 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ff]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:29 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {',fdno'}, 0x2c, {'wfdno'}}) 07:25:29 executing program 1 (fault-call:4 fault-nth:20): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) [ 429.651866] FAULT_INJECTION: forcing a failure. [ 429.651866] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 429.691831] CPU: 1 PID: 21609 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #161 07:25:29 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}}}) [ 429.699232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 429.708593] Call Trace: [ 429.711204] dump_stack+0x244/0x39d [ 429.714860] ? dump_stack_print_info.cold.1+0x20/0x20 [ 429.720091] should_fail.cold.4+0xa/0x17 [ 429.724164] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 429.724183] ? is_bpf_text_address+0xac/0x170 [ 429.724199] ? zap_class+0x640/0x640 [ 429.724219] ? lock_downgrade+0x900/0x900 [ 429.741656] ? check_preemption_disabled+0x48/0x280 [ 429.746690] ? rcu_read_unlock_special+0x1c0/0x1c0 07:25:29 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000}}}) [ 429.751637] ? kasan_check_read+0x11/0x20 [ 429.755810] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 429.761099] ? rcu_softirq_qs+0x20/0x20 [ 429.765095] ? find_held_lock+0x36/0x1c0 [ 429.769187] ? check_preemption_disabled+0x48/0x280 [ 429.774227] ? lock_release+0xa00/0xa00 [ 429.778214] ? perf_trace_sched_process_exec+0x860/0x860 [ 429.783674] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 429.789223] ? rcu_pm_notify+0xc0/0xc0 [ 429.793131] ? __might_sleep+0x95/0x190 [ 429.797120] __alloc_pages_nodemask+0x366/0xea0 [ 429.801815] ? iov_iter_get_pages_alloc+0x8ac/0x15a0 [ 429.806930] ? default_file_splice_read+0x1db/0xb20 [ 429.811959] ? do_splice_to+0x12e/0x190 [ 429.815958] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 429.821000] ? check_preemption_disabled+0x48/0x280 [ 429.826046] ? rcu_pm_notify+0xc0/0xc0 [ 429.829953] ? __kmalloc_node+0x3c/0x70 [ 429.833944] ? __kmalloc_node+0x3c/0x70 [ 429.837937] ? rcu_read_lock_sched_held+0x14f/0x180 [ 429.842967] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 429.848521] alloc_pages_current+0x173/0x350 07:25:29 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:29 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}) [ 429.852961] push_pipe+0x3ff/0x7a0 [ 429.856512] ? __kmalloc_node+0x50/0x70 [ 429.860510] iov_iter_get_pages_alloc+0x938/0x15a0 [ 429.865472] ? free_unref_page+0x6e0/0x960 [ 429.869729] ? copyin+0x100/0x100 [ 429.873206] ? trace_hardirqs_on+0xbd/0x310 [ 429.877548] ? __put_page+0x122/0x190 [ 429.881364] ? trace_hardirqs_off_caller+0x310/0x310 [ 429.881387] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 429.881410] ? mark_free_pages+0x3c0/0x3c0 [ 429.892051] ? check_preemption_disabled+0x48/0x280 [ 429.892068] ? release_sock+0x1ec/0x2c0 [ 429.892088] ? __local_bh_enable_ip+0x160/0x260 [ 429.909956] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 429.914987] ? iov_iter_pipe+0xbb/0x2f0 [ 429.918976] default_file_splice_read+0x1db/0xb20 [ 429.923847] ? iter_file_splice_write+0x1050/0x1050 [ 429.928875] ? __put_page+0x136/0x190 [ 429.932705] ? __put_compound_page+0xe0/0xe0 [ 429.937132] ? kernel_sendpage+0x9a/0xf0 [ 429.941212] ? generic_pipe_buf_release+0x1de/0x2b0 [ 429.946244] ? anon_pipe_buf_release+0x530/0x530 07:25:29 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:29 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7}}}) [ 429.951016] ? pipe_to_sendpage+0x2d8/0x400 [ 429.955363] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 429.960912] ? fsnotify+0x50e/0xef0 [ 429.964566] ? generic_pipe_buf_nosteal+0x10/0x10 [ 429.969419] ? fsnotify_first_mark+0x350/0x350 [ 429.974028] ? __fsnotify_parent+0xcc/0x430 [ 429.978359] ? __might_sleep+0x95/0x190 [ 429.982346] ? fsnotify+0xef0/0xef0 [ 429.985991] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 429.991021] ? selinux_file_permission+0x90/0x540 [ 429.995887] ? security_file_permission+0x1c2/0x220 [ 430.000924] ? iter_file_splice_write+0x1050/0x1050 [ 430.005947] do_splice_to+0x12e/0x190 [ 430.005968] splice_direct_to_actor+0x31c/0x9d0 [ 430.005990] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 430.020022] ? pipe_to_sendpage+0x400/0x400 [ 430.024362] ? do_splice_to+0x190/0x190 [ 430.028348] ? security_file_permission+0x1c2/0x220 [ 430.033386] ? rw_verify_area+0x118/0x360 [ 430.037555] do_splice_direct+0x2d4/0x420 [ 430.041724] ? splice_direct_to_actor+0x9d0/0x9d0 [ 430.046591] ? rw_verify_area+0x118/0x360 [ 430.050756] do_sendfile+0x62a/0xe20 [ 430.054503] ? do_compat_pwritev64+0x1c0/0x1c0 [ 430.059109] ? __sb_end_write+0xd9/0x110 [ 430.063199] ? fput+0x130/0x1a0 [ 430.066493] ? do_syscall_64+0x9a/0x820 [ 430.070491] ? do_syscall_64+0x9a/0x820 [ 430.074491] __x64_sys_sendfile64+0x1fd/0x250 [ 430.079035] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 430.083642] do_syscall_64+0x1b9/0x820 [ 430.087547] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 430.092919] ? syscall_return_slowpath+0x5e0/0x5e0 [ 430.097860] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 430.102719] ? trace_hardirqs_on_caller+0x310/0x310 [ 430.107755] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 430.112817] ? prepare_exit_to_usermode+0x291/0x3b0 [ 430.112840] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 430.112870] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 430.127894] RIP: 0033:0x457669 [ 430.131102] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 430.150011] RSP: 002b:00007f3befc2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 430.157723] RAX: ffffffffffffffda RBX: 00007f3befc2fc90 RCX: 0000000000457669 [ 430.157748] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 430.157757] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 430.157777] R10: 000000000000a10a R11: 0000000000000246 R12: 00007f3befc306d4 [ 430.157786] R13: 00000000004c3e42 R14: 00000000004d6c90 R15: 0000000000000006 07:25:29 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:29 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ffffff}}}) 07:25:29 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:29 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000080)) setrlimit(0x408000000000007, &(0x7f0000000000)) ioctl$sock_proto_private(r0, 0x894c, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000180)={0x0, 0x3, 0x6, 0xfffffffffffffbc4, &(0x7f00000000c0)=[{}, {}, {}]}) 07:25:29 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'\nfdno'}, 0x2c, {'wfdno'}}) 07:25:29 executing program 1 (fault-call:4 fault-nth:21): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) [ 430.428043] FAULT_INJECTION: forcing a failure. [ 430.428043] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 430.439202] 9pnet: Insufficient options for proto=fd [ 430.477356] CPU: 1 PID: 21665 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #161 [ 430.483415] FAT-fs (loop4): bogus number of reserved sectors [ 430.484762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 430.484781] Call Trace: [ 430.484807] dump_stack+0x244/0x39d [ 430.484833] ? dump_stack_print_info.cold.1+0x20/0x20 [ 430.499995] should_fail.cold.4+0xa/0x17 [ 430.502685] FAT-fs (loop4): Can't find a valid FAT filesystem [ 430.506186] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 430.506205] ? is_bpf_text_address+0xac/0x170 [ 430.506225] ? zap_class+0x640/0x640 [ 430.526448] ? lock_downgrade+0x900/0x900 [ 430.538788] ? check_preemption_disabled+0x48/0x280 [ 430.543826] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 430.548781] ? kasan_check_read+0x11/0x20 [ 430.552944] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 430.558238] ? rcu_softirq_qs+0x20/0x20 [ 430.562224] ? find_held_lock+0x36/0x1c0 [ 430.566296] ? intel_is_valid_msr_idx+0xa0/0xd0 [ 430.570994] ? check_preemption_disabled+0x48/0x280 [ 430.576031] ? lock_release+0xa00/0xa00 [ 430.580025] ? perf_trace_sched_process_exec+0x860/0x860 [ 430.585491] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 430.585510] ? rcu_pm_notify+0xc0/0xc0 [ 430.585537] ? __might_sleep+0x95/0x190 [ 430.594950] __alloc_pages_nodemask+0x366/0xea0 [ 430.594969] ? iov_iter_get_pages_alloc+0x8ac/0x15a0 [ 430.594988] ? default_file_splice_read+0x1db/0xb20 [ 430.613723] ? do_splice_to+0x12e/0x190 [ 430.617727] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 430.622792] ? check_preemption_disabled+0x48/0x280 [ 430.627833] ? rcu_pm_notify+0xc0/0xc0 [ 430.631740] ? __kmalloc_node+0x3c/0x70 [ 430.635737] ? __kmalloc_node+0x3c/0x70 [ 430.639740] ? rcu_read_lock_sched_held+0x14f/0x180 [ 430.644795] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 430.650363] alloc_pages_current+0x173/0x350 [ 430.654807] push_pipe+0x3ff/0x7a0 [ 430.658364] ? __kmalloc_node+0x50/0x70 [ 430.662368] iov_iter_get_pages_alloc+0x938/0x15a0 [ 430.667315] ? free_unref_page+0x6e0/0x960 [ 430.671577] ? copyin+0x100/0x100 [ 430.675041] ? trace_hardirqs_on+0xbd/0x310 [ 430.679377] ? __put_page+0x122/0x190 [ 430.683190] ? trace_hardirqs_off_caller+0x310/0x310 [ 430.688313] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 430.693875] ? mark_free_pages+0x3c0/0x3c0 [ 430.698129] ? check_preemption_disabled+0x48/0x280 [ 430.703157] ? release_sock+0x1ec/0x2c0 [ 430.707147] ? __local_bh_enable_ip+0x160/0x260 [ 430.711829] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 430.716880] ? iov_iter_pipe+0xbb/0x2f0 [ 430.720870] default_file_splice_read+0x1db/0xb20 [ 430.725742] ? iter_file_splice_write+0x1050/0x1050 [ 430.730794] ? __put_page+0x136/0x190 [ 430.734618] ? __put_compound_page+0xe0/0xe0 [ 430.739042] ? kernel_sendpage+0x9a/0xf0 [ 430.739069] ? generic_pipe_buf_release+0x1de/0x2b0 [ 430.739087] ? anon_pipe_buf_release+0x530/0x530 [ 430.739105] ? pipe_to_sendpage+0x2d8/0x400 [ 430.739130] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 430.748198] ? fsnotify+0x50e/0xef0 [ 430.748226] ? generic_pipe_buf_nosteal+0x10/0x10 [ 430.748245] ? fsnotify_first_mark+0x350/0x350 [ 430.748266] ? __fsnotify_parent+0xcc/0x430 [ 430.780208] ? __might_sleep+0x95/0x190 [ 430.784203] ? fsnotify+0xef0/0xef0 [ 430.787858] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 430.792896] ? selinux_file_permission+0x90/0x540 [ 430.797760] ? security_file_permission+0x1c2/0x220 [ 430.802819] ? iter_file_splice_write+0x1050/0x1050 [ 430.807855] do_splice_to+0x12e/0x190 [ 430.811673] splice_direct_to_actor+0x31c/0x9d0 [ 430.816359] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 430.821918] ? pipe_to_sendpage+0x400/0x400 [ 430.826260] ? do_splice_to+0x190/0x190 [ 430.830267] ? security_file_permission+0x1c2/0x220 [ 430.835305] ? rw_verify_area+0x118/0x360 [ 430.839469] do_splice_direct+0x2d4/0x420 [ 430.843632] ? splice_direct_to_actor+0x9d0/0x9d0 [ 430.848496] ? rw_verify_area+0x118/0x360 [ 430.852673] do_sendfile+0x62a/0xe20 [ 430.856411] ? do_compat_pwritev64+0x1c0/0x1c0 [ 430.861015] ? __sb_end_write+0xd9/0x110 [ 430.865099] ? fput+0x130/0x1a0 [ 430.868390] ? do_syscall_64+0x9a/0x820 [ 430.872376] ? do_syscall_64+0x9a/0x820 [ 430.876370] __x64_sys_sendfile64+0x1fd/0x250 [ 430.880883] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 430.885491] do_syscall_64+0x1b9/0x820 [ 430.889397] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 430.894790] ? syscall_return_slowpath+0x5e0/0x5e0 [ 430.899739] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 430.904611] ? trace_hardirqs_on_caller+0x310/0x310 [ 430.909643] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 430.914676] ? prepare_exit_to_usermode+0x291/0x3b0 [ 430.919716] ? trace_hardirqs_off_thunk+0x1a/0x1c 07:25:30 executing program 3: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000080)=ANY=[], 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)) getsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$sock_proto_private(0xffffffffffffffff, 0x894c, 0x0) 07:25:30 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:30 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'\"fdno'}, 0x2c, {'wfdno'}}) 07:25:30 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}}) 07:25:30 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ffffffffffffff]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:30 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfd}}}) [ 430.924579] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 430.929787] RIP: 0033:0x457669 [ 430.932993] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 430.950232] 9pnet: Insufficient options for proto=fd [ 430.951901] RSP: 002b:00007f3befc2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 430.951918] RAX: ffffffffffffffda RBX: 00007f3befc2fc90 RCX: 0000000000457669 [ 430.951928] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 430.951938] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 430.951947] R10: 000000000000a10a R11: 0000000000000246 R12: 00007f3befc306d4 [ 430.951957] R13: 00000000004c3e42 R14: 00000000004d6c90 R15: 0000000000000006 [ 431.059895] FAT-fs (loop4): bogus number of reserved sectors [ 431.065899] FAT-fs (loop4): Can't find a valid FAT filesystem 07:25:30 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:30 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfd]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:30 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ff}}}) 07:25:30 executing program 1 (fault-call:4 fault-nth:22): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) 07:25:30 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)) ioctl$sock_proto_private(r0, 0x894c, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x4040, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x1}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000100)={r2, 0x4, 0x6, 0xff, 0x86, 0x400}, &(0x7f0000000140)=0x14) 07:25:30 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'%fdno'}, 0x2c, {'wfdno'}}) [ 431.189189] FAULT_INJECTION: forcing a failure. [ 431.189189] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 431.215318] 9pnet: Insufficient options for proto=fd [ 431.224795] CPU: 1 PID: 21706 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #161 07:25:30 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}}}) 07:25:30 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_proto_private(r0, 0x894c, 0x0) [ 431.232209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 431.241573] Call Trace: [ 431.244175] dump_stack+0x244/0x39d [ 431.247828] ? dump_stack_print_info.cold.1+0x20/0x20 [ 431.253040] should_fail.cold.4+0xa/0x17 [ 431.257119] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 431.262245] ? is_bpf_text_address+0xac/0x170 [ 431.266755] ? zap_class+0x640/0x640 [ 431.266782] ? lock_downgrade+0x900/0x900 [ 431.266805] ? check_preemption_disabled+0x48/0x280 [ 431.274661] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 431.274682] ? kasan_check_read+0x11/0x20 [ 431.274697] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 431.274717] ? rcu_softirq_qs+0x20/0x20 [ 431.294076] ? find_held_lock+0x36/0x1c0 [ 431.294111] ? check_preemption_disabled+0x48/0x280 [ 431.294131] ? lock_release+0xa00/0xa00 [ 431.311132] ? perf_trace_sched_process_exec+0x860/0x860 [ 431.316593] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 431.316613] ? rcu_pm_notify+0xc0/0xc0 [ 431.316635] ? __might_sleep+0x95/0x190 [ 431.316656] __alloc_pages_nodemask+0x366/0xea0 [ 431.326070] ? iov_iter_get_pages_alloc+0x8ac/0x15a0 [ 431.326086] ? default_file_splice_read+0x1db/0xb20 [ 431.326098] ? do_splice_to+0x12e/0x190 [ 431.326119] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 431.353831] ? check_preemption_disabled+0x48/0x280 [ 431.353861] ? rcu_pm_notify+0xc0/0xc0 [ 431.353890] ? __kmalloc_node+0x3c/0x70 [ 431.365456] FAT-fs (loop4): bogus number of reserved sectors [ 431.366778] ? __kmalloc_node+0x3c/0x70 [ 431.366799] ? rcu_read_lock_sched_held+0x14f/0x180 [ 431.366817] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 431.366839] alloc_pages_current+0x173/0x350 [ 431.391560] push_pipe+0x3ff/0x7a0 [ 431.391763] FAT-fs (loop4): Can't find a valid FAT filesystem [ 431.395112] ? __kmalloc_node+0x50/0x70 [ 431.395141] iov_iter_get_pages_alloc+0x938/0x15a0 [ 431.395162] ? free_unref_page+0x6e0/0x960 [ 431.395183] ? copyin+0x100/0x100 [ 431.417626] ? trace_hardirqs_on+0xbd/0x310 [ 431.421972] ? __put_page+0x122/0x190 [ 431.425790] ? trace_hardirqs_off_caller+0x310/0x310 [ 431.430906] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 431.436461] ? mark_free_pages+0x3c0/0x3c0 [ 431.440707] ? check_preemption_disabled+0x48/0x280 [ 431.445731] ? release_sock+0x1ec/0x2c0 [ 431.449726] ? __local_bh_enable_ip+0x160/0x260 [ 431.454405] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 431.459429] ? iov_iter_pipe+0xbb/0x2f0 [ 431.463417] default_file_splice_read+0x1db/0xb20 [ 431.468289] ? iter_file_splice_write+0x1050/0x1050 [ 431.473315] ? __put_page+0x136/0x190 [ 431.477125] ? __put_compound_page+0xe0/0xe0 [ 431.481547] ? kernel_sendpage+0x9a/0xf0 [ 431.485620] ? generic_pipe_buf_release+0x1de/0x2b0 [ 431.490640] ? anon_pipe_buf_release+0x530/0x530 [ 431.495401] ? pipe_to_sendpage+0x2d8/0x400 [ 431.499783] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 431.505324] ? fsnotify+0x50e/0xef0 [ 431.508967] ? generic_pipe_buf_nosteal+0x10/0x10 [ 431.513823] ? fsnotify_first_mark+0x350/0x350 [ 431.518408] ? __fsnotify_parent+0xcc/0x430 [ 431.522736] ? __might_sleep+0x95/0x190 [ 431.526726] ? fsnotify+0xef0/0xef0 [ 431.530364] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 431.535647] ? selinux_file_permission+0x90/0x540 [ 431.540505] ? security_file_permission+0x1c2/0x220 [ 431.545542] ? iter_file_splice_write+0x1050/0x1050 [ 431.550562] do_splice_to+0x12e/0x190 [ 431.554386] splice_direct_to_actor+0x31c/0x9d0 [ 431.559064] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 431.564609] ? pipe_to_sendpage+0x400/0x400 [ 431.568944] ? do_splice_to+0x190/0x190 [ 431.572926] ? security_file_permission+0x1c2/0x220 [ 431.577951] ? rw_verify_area+0x118/0x360 [ 431.582107] do_splice_direct+0x2d4/0x420 [ 431.586265] ? splice_direct_to_actor+0x9d0/0x9d0 [ 431.591117] ? rw_verify_area+0x118/0x360 [ 431.595273] do_sendfile+0x62a/0xe20 [ 431.599003] ? do_compat_pwritev64+0x1c0/0x1c0 [ 431.603593] ? __sb_end_write+0xd9/0x110 [ 431.607662] ? fput+0x130/0x1a0 [ 431.610950] ? do_syscall_64+0x9a/0x820 [ 431.614930] ? do_syscall_64+0x9a/0x820 [ 431.618915] __x64_sys_sendfile64+0x1fd/0x250 [ 431.623418] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 431.628021] do_syscall_64+0x1b9/0x820 [ 431.631917] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 431.637288] ? syscall_return_slowpath+0x5e0/0x5e0 [ 431.642224] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 431.647075] ? trace_hardirqs_on_caller+0x310/0x310 [ 431.652100] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 431.657120] ? prepare_exit_to_usermode+0x291/0x3b0 [ 431.662152] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 431.667011] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 431.672205] RIP: 0033:0x457669 [ 431.675405] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 431.694311] RSP: 002b:00007f3befc2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 431.702031] RAX: ffffffffffffffda RBX: 00007f3befc2fc90 RCX: 0000000000457669 [ 431.709303] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 431.716576] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 431.723845] R10: 000000000000a10a R11: 0000000000000246 R12: 00007f3befc306d4 [ 431.731118] R13: 00000000004c3e42 R14: 00000000004d6c90 R15: 0000000000000006 07:25:31 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:31 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'r.dno'}, 0x2c, {'wfdno'}}) 07:25:31 executing program 1 (fault-call:4 fault-nth:23): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) 07:25:31 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)) ioctl$sock_proto_private(r0, 0x100000001, 0x0) [ 431.853386] 9pnet: Insufficient options for proto=fd 07:25:31 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:31 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}}}) 07:25:31 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) setrlimit(0x408000000000007, &(0x7f0000000000)) ioctl$sock_proto_private(r0, 0x89ef, 0x0) memfd_create(&(0x7f0000000040)='+self*-bdevtrusted,wlan0\x00', 0x1) 07:25:31 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'r/dno'}, 0x2c, {'wfdno'}}) 07:25:31 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ffffffffffffff}}}) 07:25:31 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 432.045862] FAT-fs (loop4): bogus number of reserved sectors [ 432.096218] FAT-fs (loop4): Can't find a valid FAT filesystem [ 432.139859] 9pnet: Insufficient options for proto=fd [ 432.149409] FAULT_INJECTION: forcing a failure. [ 432.149409] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 432.172753] CPU: 0 PID: 21763 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #161 [ 432.180157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 432.189512] Call Trace: [ 432.192115] dump_stack+0x244/0x39d [ 432.195755] ? dump_stack_print_info.cold.1+0x20/0x20 [ 432.200974] should_fail.cold.4+0xa/0x17 [ 432.205055] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 432.210165] ? is_bpf_text_address+0xac/0x170 [ 432.214665] ? zap_class+0x640/0x640 [ 432.218384] ? lock_downgrade+0x900/0x900 [ 432.222541] ? check_preemption_disabled+0x48/0x280 [ 432.227571] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 432.232522] ? kasan_check_read+0x11/0x20 [ 432.236677] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 432.242169] ? rcu_softirq_qs+0x20/0x20 [ 432.246155] ? find_held_lock+0x36/0x1c0 [ 432.250235] ? check_preemption_disabled+0x48/0x280 [ 432.255262] ? lock_release+0xa00/0xa00 [ 432.259240] ? perf_trace_sched_process_exec+0x860/0x860 [ 432.264696] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 432.270237] ? rcu_pm_notify+0xc0/0xc0 [ 432.274134] ? __might_sleep+0x95/0x190 [ 432.278118] __alloc_pages_nodemask+0x366/0xea0 [ 432.282806] ? iov_iter_get_pages_alloc+0x8ac/0x15a0 [ 432.287910] ? default_file_splice_read+0x1db/0xb20 [ 432.292928] ? do_splice_to+0x12e/0x190 [ 432.296913] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 432.301961] ? check_preemption_disabled+0x48/0x280 [ 432.306996] ? rcu_pm_notify+0xc0/0xc0 [ 432.310907] ? __kmalloc_node+0x3c/0x70 [ 432.314883] ? __kmalloc_node+0x3c/0x70 [ 432.318864] ? rcu_read_lock_sched_held+0x14f/0x180 [ 432.323888] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 432.329438] alloc_pages_current+0x173/0x350 [ 432.333861] push_pipe+0x3ff/0x7a0 [ 432.337408] ? __kmalloc_node+0x50/0x70 [ 432.341394] iov_iter_get_pages_alloc+0x938/0x15a0 [ 432.346332] ? free_unref_page+0x6e0/0x960 [ 432.350572] ? copyin+0x100/0x100 [ 432.354037] ? trace_hardirqs_on+0xbd/0x310 [ 432.358364] ? __put_page+0x122/0x190 [ 432.362170] ? trace_hardirqs_off_caller+0x310/0x310 [ 432.367280] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 432.372943] ? mark_free_pages+0x3c0/0x3c0 [ 432.377192] ? check_preemption_disabled+0x48/0x280 [ 432.382311] ? release_sock+0x1ec/0x2c0 [ 432.386292] ? __local_bh_enable_ip+0x160/0x260 [ 432.390965] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 432.395988] ? iov_iter_pipe+0xbb/0x2f0 [ 432.399969] default_file_splice_read+0x1db/0xb20 [ 432.404830] ? iter_file_splice_write+0x1050/0x1050 [ 432.409853] ? __put_page+0x136/0x190 [ 432.413661] ? __put_compound_page+0xe0/0xe0 [ 432.418075] ? kernel_sendpage+0x9a/0xf0 [ 432.422155] ? generic_pipe_buf_release+0x1de/0x2b0 [ 432.427182] ? anon_pipe_buf_release+0x530/0x530 [ 432.431942] ? pipe_to_sendpage+0x2d8/0x400 [ 432.436293] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 432.441839] ? fsnotify+0x50e/0xef0 [ 432.445480] ? generic_pipe_buf_nosteal+0x10/0x10 [ 432.450327] ? fsnotify_first_mark+0x350/0x350 [ 432.454916] ? __fsnotify_parent+0xcc/0x430 [ 432.459239] ? __might_sleep+0x95/0x190 [ 432.463215] ? fsnotify+0xef0/0xef0 [ 432.466854] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 432.471880] ? selinux_file_permission+0x90/0x540 [ 432.476735] ? security_file_permission+0x1c2/0x220 [ 432.481778] ? iter_file_splice_write+0x1050/0x1050 [ 432.486802] do_splice_to+0x12e/0x190 [ 432.490611] splice_direct_to_actor+0x31c/0x9d0 [ 432.495284] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 432.500834] ? pipe_to_sendpage+0x400/0x400 [ 432.505166] ? do_splice_to+0x190/0x190 [ 432.509151] ? security_file_permission+0x1c2/0x220 [ 432.514184] ? rw_verify_area+0x118/0x360 [ 432.518342] do_splice_direct+0x2d4/0x420 [ 432.522497] ? splice_direct_to_actor+0x9d0/0x9d0 [ 432.527365] ? rw_verify_area+0x118/0x360 [ 432.531520] do_sendfile+0x62a/0xe20 [ 432.535248] ? do_compat_pwritev64+0x1c0/0x1c0 [ 432.539834] ? __sb_end_write+0xd9/0x110 [ 432.543905] ? fput+0x130/0x1a0 [ 432.547192] ? do_syscall_64+0x9a/0x820 [ 432.551178] ? do_syscall_64+0x9a/0x820 [ 432.555167] __x64_sys_sendfile64+0x1fd/0x250 [ 432.559681] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 432.564283] do_syscall_64+0x1b9/0x820 [ 432.568177] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 432.573550] ? syscall_return_slowpath+0x5e0/0x5e0 [ 432.578484] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 432.583333] ? trace_hardirqs_on_caller+0x310/0x310 [ 432.588357] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 432.593380] ? prepare_exit_to_usermode+0x291/0x3b0 [ 432.598405] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 432.603259] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 432.608451] RIP: 0033:0x457669 [ 432.611650] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 432.630556] RSP: 002b:00007f3befc2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 07:25:32 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b6b6b00]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:32 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000080)=0x4, 0x4) ioctl$sock_proto_private(r0, 0x894c, 0x0) 07:25:32 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}}) 07:25:32 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'r\ndno'}, 0x2c, {'wfdno'}}) [ 432.638269] RAX: ffffffffffffffda RBX: 00007f3befc2fc90 RCX: 0000000000457669 [ 432.645538] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 432.652809] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 432.660077] R10: 000000000000a10a R11: 0000000000000246 R12: 00007f3befc306d4 [ 432.667344] R13: 00000000004c3e42 R14: 00000000004d6c90 R15: 0000000000000006 07:25:32 executing program 1 (fault-call:4 fault-nth:24): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) [ 432.761610] FAT-fs (loop4): bogus number of reserved sectors [ 432.794274] FAT-fs (loop4): Can't find a valid FAT filesystem 07:25:32 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffe7}}}) [ 432.844828] 9pnet: Insufficient options for proto=fd 07:25:32 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:32 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:32 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000540)='/dev/rfkill\x00', 0x8000, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000580)) r1 = socket$unix(0x1, 0x1, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x301000) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f00000000c0)=0x8) setrlimit(0x408000000000007, &(0x7f0000000000)) getsockname$unix(r1, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000480)=0xe8) recvfrom$packet(r2, &(0x7f00000001c0)=""/133, 0x85, 0x10060, &(0x7f00000004c0)={0x11, 0x1c, r3, 0x1, 0x100000001, 0x6, @random="4130fc79268e"}, 0x14) ioctl$sock_proto_private(r1, 0x894c, 0x0) recvfrom$packet(r2, &(0x7f0000000280)=""/213, 0xd5, 0x40, &(0x7f0000000500)={0x11, 0x0, r3, 0x1, 0x80, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 07:25:32 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'r\"dno'}, 0x2c, {'wfdno'}}) [ 432.911499] FAULT_INJECTION: forcing a failure. [ 432.911499] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 432.996193] 9pnet: Insufficient options for proto=fd [ 433.014220] CPU: 1 PID: 21790 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #161 [ 433.021631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 433.030992] Call Trace: [ 433.033603] dump_stack+0x244/0x39d [ 433.037271] ? dump_stack_print_info.cold.1+0x20/0x20 [ 433.042495] should_fail.cold.4+0xa/0x17 [ 433.046582] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 433.051727] ? is_bpf_text_address+0xac/0x170 [ 433.056241] ? zap_class+0x640/0x640 [ 433.056258] ? lock_downgrade+0x900/0x900 [ 433.056277] ? check_preemption_disabled+0x48/0x280 [ 433.056311] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 433.056327] ? kasan_check_read+0x11/0x20 [ 433.056342] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 433.056360] ? rcu_softirq_qs+0x20/0x20 [ 433.064216] ? find_held_lock+0x36/0x1c0 [ 433.064238] ? __split_huge_pud+0x30/0x530 07:25:32 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdfd}}}) [ 433.064264] ? check_preemption_disabled+0x48/0x280 [ 433.064284] ? lock_release+0xa00/0xa00 [ 433.064301] ? perf_trace_sched_process_exec+0x860/0x860 [ 433.064319] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 433.064339] ? rcu_pm_notify+0xc0/0xc0 [ 433.076188] FAT-fs (loop4): bogus number of reserved sectors [ 433.078423] ? __might_sleep+0x95/0x190 [ 433.078448] __alloc_pages_nodemask+0x366/0xea0 [ 433.078466] ? iov_iter_get_pages_alloc+0x8ac/0x15a0 [ 433.078481] ? default_file_splice_read+0x1db/0xb20 07:25:32 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe7}}}) [ 433.078493] ? do_splice_to+0x12e/0x190 [ 433.078514] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 433.084690] FAT-fs (loop4): Can't find a valid FAT filesystem [ 433.087780] ? check_preemption_disabled+0x48/0x280 [ 433.087810] ? rcu_pm_notify+0xc0/0xc0 [ 433.087835] ? __kmalloc_node+0x3c/0x70 [ 433.087849] ? __kmalloc_node+0x3c/0x70 [ 433.087869] ? rcu_read_lock_sched_held+0x14f/0x180 [ 433.181153] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 433.186714] alloc_pages_current+0x173/0x350 [ 433.191150] push_pipe+0x3ff/0x7a0 07:25:32 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffffffffffff}}}) [ 433.194704] ? __kmalloc_node+0x50/0x70 [ 433.198709] iov_iter_get_pages_alloc+0x938/0x15a0 [ 433.203657] ? free_unref_page+0x6e0/0x960 [ 433.207914] ? copyin+0x100/0x100 [ 433.211379] ? trace_hardirqs_on+0xbd/0x310 [ 433.215717] ? __put_page+0x122/0x190 [ 433.219543] ? trace_hardirqs_off_caller+0x310/0x310 [ 433.224669] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 433.230232] ? mark_free_pages+0x3c0/0x3c0 [ 433.234483] ? check_preemption_disabled+0x48/0x280 [ 433.239514] ? release_sock+0x1ec/0x2c0 [ 433.243514] ? __local_bh_enable_ip+0x160/0x260 [ 433.248210] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 433.253247] ? iov_iter_pipe+0xbb/0x2f0 [ 433.257241] default_file_splice_read+0x1db/0xb20 [ 433.262110] ? iter_file_splice_write+0x1050/0x1050 [ 433.267148] ? __put_page+0x136/0x190 [ 433.270971] ? __put_compound_page+0xe0/0xe0 [ 433.275398] ? kernel_sendpage+0x9a/0xf0 [ 433.279489] ? generic_pipe_buf_release+0x1de/0x2b0 [ 433.284540] ? anon_pipe_buf_release+0x530/0x530 [ 433.289324] ? pipe_to_sendpage+0x2d8/0x400 07:25:32 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}}}) 07:25:32 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'r%dno'}, 0x2c, {'wfdno'}}) [ 433.293679] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 433.299236] ? fsnotify+0x50e/0xef0 [ 433.302887] ? generic_pipe_buf_nosteal+0x10/0x10 [ 433.307753] ? fsnotify_first_mark+0x350/0x350 [ 433.312366] ? __fsnotify_parent+0xcc/0x430 [ 433.316701] ? __might_sleep+0x95/0x190 [ 433.320693] ? fsnotify+0xef0/0xef0 [ 433.324346] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 433.329377] ? selinux_file_permission+0x90/0x540 [ 433.334241] ? security_file_permission+0x1c2/0x220 [ 433.339276] ? iter_file_splice_write+0x1050/0x1050 [ 433.344306] do_splice_to+0x12e/0x190 [ 433.348131] splice_direct_to_actor+0x31c/0x9d0 [ 433.352814] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 433.358371] ? pipe_to_sendpage+0x400/0x400 [ 433.362717] ? do_splice_to+0x190/0x190 [ 433.364757] 9pnet: Insufficient options for proto=fd [ 433.366702] ? security_file_permission+0x1c2/0x220 [ 433.366725] ? rw_verify_area+0x118/0x360 [ 433.366745] do_splice_direct+0x2d4/0x420 [ 433.366777] ? splice_direct_to_actor+0x9d0/0x9d0 [ 433.366802] ? rw_verify_area+0x118/0x360 [ 433.394170] do_sendfile+0x62a/0xe20 07:25:33 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'r,dno'}, 0x2c, {'wfdno'}}) [ 433.397909] ? do_compat_pwritev64+0x1c0/0x1c0 [ 433.402517] ? __sb_end_write+0xd9/0x110 [ 433.406608] ? fput+0x130/0x1a0 [ 433.409907] ? do_syscall_64+0x9a/0x820 [ 433.413900] ? do_syscall_64+0x9a/0x820 [ 433.417893] __x64_sys_sendfile64+0x1fd/0x250 [ 433.422406] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 433.427017] do_syscall_64+0x1b9/0x820 [ 433.430943] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 433.436324] ? syscall_return_slowpath+0x5e0/0x5e0 [ 433.441265] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 433.446127] ? trace_hardirqs_on_caller+0x310/0x310 [ 433.451188] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 433.456235] ? prepare_exit_to_usermode+0x291/0x3b0 [ 433.461270] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 433.466136] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 433.471336] RIP: 0033:0x457669 [ 433.473620] 9pnet: Insufficient options for proto=fd [ 433.474580] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 433.474590] RSP: 002b:00007f3befc2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 433.474606] RAX: ffffffffffffffda RBX: 00007f3befc2fc90 RCX: 0000000000457669 [ 433.474616] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 433.474626] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 433.474636] R10: 000000000000a10a R11: 0000000000000246 R12: 00007f3befc306d4 [ 433.474645] R13: 00000000004c3e42 R14: 00000000004d6c90 R15: 0000000000000006 07:25:33 executing program 1 (fault-call:4 fault-nth:25): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) 07:25:33 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}}}) [ 433.565127] FAT-fs (loop4): bogus number of reserved sectors [ 433.570965] FAT-fs (loop4): Can't find a valid FAT filesystem 07:25:33 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:33 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x80000) accept4$packet(0xffffffffffffff9c, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14, 0x80000) bind$can_raw(r0, &(0x7f0000000100)={0x1d, r1}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)) ioctl$sock_proto_private(r2, 0x894c, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={'\x00', {0x2, 0x4e22, @loopback}}) 07:25:33 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:33 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rf\nno'}, 0x2c, {'wfdno'}}) 07:25:33 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ffffff}}}) 07:25:33 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b6b6b]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 433.758640] FAULT_INJECTION: forcing a failure. [ 433.758640] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 433.800346] 9pnet: Insufficient options for proto=fd [ 433.814229] CPU: 0 PID: 21847 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #161 [ 433.821626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 433.824517] FAT-fs (loop4): bogus number of reserved sectors [ 433.830980] Call Trace: [ 433.831009] dump_stack+0x244/0x39d [ 433.831044] ? dump_stack_print_info.cold.1+0x20/0x20 07:25:33 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe7}}}) [ 433.831079] should_fail.cold.4+0xa/0x17 [ 433.852299] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 433.855864] FAT-fs (loop4): Can't find a valid FAT filesystem [ 433.857418] ? is_bpf_text_address+0xac/0x170 [ 433.857438] ? zap_class+0x640/0x640 [ 433.857454] ? lock_downgrade+0x900/0x900 [ 433.857471] ? check_preemption_disabled+0x48/0x280 [ 433.857490] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 433.885643] ? kasan_check_read+0x11/0x20 [ 433.889806] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 433.895124] ? rcu_softirq_qs+0x20/0x20 [ 433.899115] ? find_held_lock+0x36/0x1c0 [ 433.903200] ? check_preemption_disabled+0x48/0x280 [ 433.903220] ? lock_release+0xa00/0xa00 [ 433.903236] ? perf_trace_sched_process_exec+0x860/0x860 [ 433.903258] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 433.923226] ? rcu_pm_notify+0xc0/0xc0 [ 433.927130] ? __might_sleep+0x95/0x190 [ 433.931120] __alloc_pages_nodemask+0x366/0xea0 [ 433.935807] ? iov_iter_get_pages_alloc+0x8ac/0x15a0 [ 433.940923] ? default_file_splice_read+0x1db/0xb20 [ 433.945968] ? do_splice_to+0x12e/0x190 [ 433.949980] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 433.955023] ? check_preemption_disabled+0x48/0x280 [ 433.960106] ? rcu_pm_notify+0xc0/0xc0 [ 433.964036] ? __kmalloc_node+0x3c/0x70 [ 433.968024] ? __kmalloc_node+0x3c/0x70 [ 433.972039] ? rcu_read_lock_sched_held+0x14f/0x180 [ 433.977084] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 433.982649] alloc_pages_current+0x173/0x350 [ 433.987090] push_pipe+0x3ff/0x7a0 [ 433.990663] ? __kmalloc_node+0x50/0x70 [ 433.994660] iov_iter_get_pages_alloc+0x938/0x15a0 07:25:33 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}) [ 433.999611] ? free_unref_page+0x6e0/0x960 [ 434.003873] ? copyin+0x100/0x100 [ 434.007341] ? trace_hardirqs_on+0xbd/0x310 [ 434.011671] ? __put_page+0x122/0x190 [ 434.015481] ? trace_hardirqs_off_caller+0x310/0x310 [ 434.020590] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 434.026177] ? mark_free_pages+0x3c0/0x3c0 [ 434.030431] ? check_preemption_disabled+0x48/0x280 [ 434.035461] ? release_sock+0x1ec/0x2c0 [ 434.039456] ? __local_bh_enable_ip+0x160/0x260 [ 434.044139] ? __sanitizer_cov_trace_cmp4+0x16/0x20 07:25:33 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 434.049166] ? iov_iter_pipe+0xbb/0x2f0 [ 434.053161] default_file_splice_read+0x1db/0xb20 [ 434.058038] ? iter_file_splice_write+0x1050/0x1050 [ 434.063075] ? __put_page+0x136/0x190 [ 434.066911] ? __put_compound_page+0xe0/0xe0 [ 434.071334] ? kernel_sendpage+0x9a/0xf0 [ 434.075418] ? generic_pipe_buf_release+0x1de/0x2b0 [ 434.080460] ? anon_pipe_buf_release+0x530/0x530 [ 434.085243] ? pipe_to_sendpage+0x2d8/0x400 [ 434.089587] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 434.095137] ? fsnotify+0x50e/0xef0 [ 434.098797] ? generic_pipe_buf_nosteal+0x10/0x10 [ 434.103662] ? fsnotify_first_mark+0x350/0x350 [ 434.108255] ? __fsnotify_parent+0xcc/0x430 [ 434.112599] ? __might_sleep+0x95/0x190 [ 434.112615] ? fsnotify+0xef0/0xef0 [ 434.112638] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 434.112656] ? selinux_file_permission+0x90/0x540 [ 434.112677] ? security_file_permission+0x1c2/0x220 [ 434.135129] ? iter_file_splice_write+0x1050/0x1050 [ 434.140163] do_splice_to+0x12e/0x190 [ 434.143979] splice_direct_to_actor+0x31c/0x9d0 07:25:33 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfd}}}) [ 434.148663] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 434.154217] ? pipe_to_sendpage+0x400/0x400 [ 434.158560] ? do_splice_to+0x190/0x190 [ 434.162546] ? security_file_permission+0x1c2/0x220 [ 434.167583] ? rw_verify_area+0x118/0x360 [ 434.171746] do_splice_direct+0x2d4/0x420 [ 434.175918] ? splice_direct_to_actor+0x9d0/0x9d0 [ 434.180793] ? rw_verify_area+0x118/0x360 [ 434.184964] do_sendfile+0x62a/0xe20 [ 434.188702] ? do_compat_pwritev64+0x1c0/0x1c0 [ 434.193296] ? __sb_end_write+0xd9/0x110 [ 434.197369] ? fput+0x130/0x1a0 [ 434.200664] ? do_syscall_64+0x9a/0x820 [ 434.204666] ? do_syscall_64+0x9a/0x820 [ 434.208661] __x64_sys_sendfile64+0x1fd/0x250 [ 434.213180] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 434.217805] do_syscall_64+0x1b9/0x820 [ 434.221712] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 434.227089] ? syscall_return_slowpath+0x5e0/0x5e0 [ 434.232034] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 434.236896] ? trace_hardirqs_on_caller+0x310/0x310 [ 434.242189] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 434.247221] ? prepare_exit_to_usermode+0x291/0x3b0 [ 434.252260] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 434.257123] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 434.262322] RIP: 0033:0x457669 [ 434.265524] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 434.284439] RSP: 002b:00007f3befc2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 434.292173] RAX: ffffffffffffffda RBX: 00007f3befc2fc90 RCX: 0000000000457669 [ 434.299453] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 434.306733] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 434.314026] R10: 000000000000a10a R11: 0000000000000246 R12: 00007f3befc306d4 [ 434.321314] R13: 00000000004c3e42 R14: 00000000004d6c90 R15: 0000000000000006 07:25:33 executing program 1 (fault-call:4 fault-nth:26): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) 07:25:33 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 434.354485] FAT-fs (loop4): bogus number of reserved sectors [ 434.360431] FAT-fs (loop4): Can't find a valid FAT filesystem 07:25:34 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:34 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rf\"no'}, 0x2c, {'wfdno'}}) 07:25:34 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}}) 07:25:34 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2) ioctl$sock_proto_private(r0, 0x894c, 0x0) 07:25:34 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe7]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 434.462582] FAULT_INJECTION: forcing a failure. [ 434.462582] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 434.493639] 9pnet: Insufficient options for proto=fd [ 434.513521] CPU: 0 PID: 21883 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #161 [ 434.520923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 434.530293] Call Trace: [ 434.532911] dump_stack+0x244/0x39d [ 434.536565] ? dump_stack_print_info.cold.1+0x20/0x20 [ 434.541797] should_fail.cold.4+0xa/0x17 [ 434.545882] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 434.551005] ? is_bpf_text_address+0xac/0x170 [ 434.555527] ? zap_class+0x640/0x640 [ 434.559247] ? lock_downgrade+0x900/0x900 07:25:34 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)) ioctl$sock_proto_private(r0, 0x894c, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000040)={'lo\x00', {0x2, 0x4e24, @loopback}}) 07:25:34 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 434.563408] ? check_preemption_disabled+0x48/0x280 [ 434.568442] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 434.573383] ? kasan_check_read+0x11/0x20 [ 434.577544] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 434.582846] ? rcu_softirq_qs+0x20/0x20 [ 434.586842] ? find_held_lock+0x36/0x1c0 [ 434.590926] ? intel_is_valid_msr_idx+0xa0/0xd0 [ 434.595631] ? check_preemption_disabled+0x48/0x280 [ 434.600659] ? lock_release+0xa00/0xa00 [ 434.604650] ? perf_trace_sched_process_exec+0x860/0x860 [ 434.610119] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 434.615672] ? rcu_pm_notify+0xc0/0xc0 [ 434.619586] ? __might_sleep+0x95/0x190 [ 434.623586] __alloc_pages_nodemask+0x366/0xea0 [ 434.628268] ? iov_iter_get_pages_alloc+0x8ac/0x15a0 [ 434.633382] ? default_file_splice_read+0x1db/0xb20 [ 434.638405] ? do_splice_to+0x12e/0x190 [ 434.642398] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 434.647443] ? check_preemption_disabled+0x48/0x280 [ 434.652488] ? rcu_pm_notify+0xc0/0xc0 [ 434.656396] ? __kmalloc_node+0x3c/0x70 [ 434.660385] ? __kmalloc_node+0x3c/0x70 07:25:34 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x8000, 0x4000) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) setrlimit(0x408000000000007, &(0x7f0000000000)) ioctl$sock_proto_private(r0, 0x894c, 0x0) [ 434.664376] ? rcu_read_lock_sched_held+0x14f/0x180 [ 434.669407] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 434.674972] alloc_pages_current+0x173/0x350 [ 434.679399] push_pipe+0x3ff/0x7a0 [ 434.682946] ? __kmalloc_node+0x50/0x70 [ 434.686951] iov_iter_get_pages_alloc+0x938/0x15a0 [ 434.691927] ? free_unref_page+0x6e0/0x960 [ 434.696182] ? copyin+0x100/0x100 [ 434.699648] ? trace_hardirqs_on+0xbd/0x310 [ 434.703990] ? __put_page+0x122/0x190 [ 434.707816] ? trace_hardirqs_off_caller+0x310/0x310 07:25:34 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 434.712937] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 434.712964] ? mark_free_pages+0x3c0/0x3c0 [ 434.712985] ? check_preemption_disabled+0x48/0x280 [ 434.713002] ? release_sock+0x1ec/0x2c0 [ 434.713022] ? __local_bh_enable_ip+0x160/0x260 [ 434.713045] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 434.722834] ? iov_iter_pipe+0xbb/0x2f0 [ 434.722858] default_file_splice_read+0x1db/0xb20 [ 434.722888] ? iter_file_splice_write+0x1050/0x1050 [ 434.722903] ? __put_page+0x136/0x190 [ 434.722921] ? __put_compound_page+0xe0/0xe0 [ 434.722939] ? kernel_sendpage+0x9a/0xf0 [ 434.722970] ? generic_pipe_buf_release+0x1de/0x2b0 [ 434.751797] FAT-fs (loop4): bogus number of reserved sectors [ 434.755417] ? anon_pipe_buf_release+0x530/0x530 [ 434.755437] ? pipe_to_sendpage+0x2d8/0x400 [ 434.755466] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 434.755487] ? fsnotify+0x50e/0xef0 [ 434.767359] FAT-fs (loop4): Can't find a valid FAT filesystem [ 434.767751] ? generic_pipe_buf_nosteal+0x10/0x10 [ 434.807501] ? fsnotify_first_mark+0x350/0x350 07:25:34 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffe7}}}) [ 434.812100] ? __fsnotify_parent+0xcc/0x430 [ 434.816433] ? __might_sleep+0x95/0x190 [ 434.820422] ? fsnotify+0xef0/0xef0 [ 434.824080] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 434.829119] ? selinux_file_permission+0x90/0x540 [ 434.833979] ? security_file_permission+0x1c2/0x220 [ 434.839016] ? iter_file_splice_write+0x1050/0x1050 [ 434.844060] do_splice_to+0x12e/0x190 [ 434.847890] splice_direct_to_actor+0x31c/0x9d0 [ 434.852589] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 434.858144] ? pipe_to_sendpage+0x400/0x400 [ 434.862489] ? do_splice_to+0x190/0x190 [ 434.866479] ? security_file_permission+0x1c2/0x220 [ 434.871516] ? rw_verify_area+0x118/0x360 [ 434.875679] do_splice_direct+0x2d4/0x420 [ 434.879845] ? splice_direct_to_actor+0x9d0/0x9d0 [ 434.884710] ? rw_verify_area+0x118/0x360 [ 434.888888] do_sendfile+0x62a/0xe20 [ 434.892628] ? do_compat_pwritev64+0x1c0/0x1c0 [ 434.897226] ? __sb_end_write+0xd9/0x110 [ 434.901311] ? fput+0x130/0x1a0 [ 434.904606] ? do_syscall_64+0x9a/0x820 [ 434.908596] ? do_syscall_64+0x9a/0x820 [ 434.912592] __x64_sys_sendfile64+0x1fd/0x250 [ 434.917105] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 434.921710] do_syscall_64+0x1b9/0x820 [ 434.925614] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 434.930991] ? syscall_return_slowpath+0x5e0/0x5e0 [ 434.936377] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 434.936397] ? trace_hardirqs_on_caller+0x310/0x310 [ 434.936415] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 434.936432] ? prepare_exit_to_usermode+0x291/0x3b0 [ 434.936454] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 434.936476] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 434.936493] RIP: 0033:0x457669 [ 434.961199] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 434.961209] RSP: 002b:00007f3befc2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 434.961225] RAX: ffffffffffffffda RBX: 00007f3befc2fc90 RCX: 0000000000457669 [ 434.961235] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 07:25:34 executing program 1 (fault-call:4 fault-nth:27): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) 07:25:34 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 434.961245] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 434.961255] R10: 000000000000a10a R11: 0000000000000246 R12: 00007f3befc306d4 [ 434.961264] R13: 00000000004c3e42 R14: 00000000004d6c90 R15: 0000000000000006 [ 435.099042] FAT-fs (loop4): bogus number of reserved sectors [ 435.142593] FAT-fs (loop4): Can't find a valid FAT filesystem [ 435.175561] FAULT_INJECTION: forcing a failure. [ 435.175561] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 435.207074] CPU: 1 PID: 21930 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #161 [ 435.214479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 435.223849] Call Trace: [ 435.226466] dump_stack+0x244/0x39d [ 435.230126] ? dump_stack_print_info.cold.1+0x20/0x20 [ 435.235330] should_fail.cold.4+0xa/0x17 [ 435.239400] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 435.244507] ? is_bpf_text_address+0xac/0x170 [ 435.248993] ? zap_class+0x640/0x640 [ 435.252694] ? lock_downgrade+0x900/0x900 [ 435.256829] ? check_preemption_disabled+0x48/0x280 [ 435.261837] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 435.266758] ? kasan_check_read+0x11/0x20 [ 435.270900] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 435.276167] ? rcu_softirq_qs+0x20/0x20 [ 435.280130] ? find_held_lock+0x36/0x1c0 [ 435.284187] ? check_preemption_disabled+0x48/0x280 [ 435.289195] ? lock_release+0xa00/0xa00 [ 435.293176] ? perf_trace_sched_process_exec+0x860/0x860 [ 435.298620] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 435.304158] ? rcu_pm_notify+0xc0/0xc0 [ 435.308051] ? __might_sleep+0x95/0x190 [ 435.312017] __alloc_pages_nodemask+0x366/0xea0 [ 435.316692] ? iov_iter_get_pages_alloc+0x8ac/0x15a0 [ 435.321797] ? default_file_splice_read+0x1db/0xb20 [ 435.326802] ? do_splice_to+0x12e/0x190 [ 435.330786] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 435.335820] ? check_preemption_disabled+0x48/0x280 [ 435.340841] ? rcu_pm_notify+0xc0/0xc0 [ 435.344722] ? __kmalloc_node+0x3c/0x70 [ 435.348729] ? __kmalloc_node+0x3c/0x70 [ 435.352695] ? rcu_read_lock_sched_held+0x14f/0x180 [ 435.357699] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 435.363242] alloc_pages_current+0x173/0x350 [ 435.367657] push_pipe+0x3ff/0x7a0 [ 435.371205] ? __kmalloc_node+0x50/0x70 [ 435.375188] iov_iter_get_pages_alloc+0x938/0x15a0 [ 435.380111] ? free_unref_page+0x6e0/0x960 [ 435.384339] ? copyin+0x100/0x100 [ 435.387788] ? trace_hardirqs_on+0xbd/0x310 [ 435.392098] ? __put_page+0x122/0x190 [ 435.395889] ? trace_hardirqs_off_caller+0x310/0x310 [ 435.400983] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 435.406511] ? mark_free_pages+0x3c0/0x3c0 [ 435.410743] ? check_preemption_disabled+0x48/0x280 [ 435.415758] ? release_sock+0x1ec/0x2c0 [ 435.419731] ? __local_bh_enable_ip+0x160/0x260 [ 435.424398] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 435.429418] ? iov_iter_pipe+0xbb/0x2f0 [ 435.433381] default_file_splice_read+0x1db/0xb20 [ 435.438231] ? iter_file_splice_write+0x1050/0x1050 [ 435.443247] ? __put_page+0x136/0x190 [ 435.447043] ? __put_compound_page+0xe0/0xe0 [ 435.451463] ? kernel_sendpage+0x9a/0xf0 [ 435.455515] ? generic_pipe_buf_release+0x1de/0x2b0 [ 435.460525] ? anon_pipe_buf_release+0x530/0x530 [ 435.465288] ? pipe_to_sendpage+0x2d8/0x400 [ 435.469630] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 435.475157] ? fsnotify+0x50e/0xef0 [ 435.478786] ? generic_pipe_buf_nosteal+0x10/0x10 [ 435.483643] ? fsnotify_first_mark+0x350/0x350 [ 435.488214] ? __fsnotify_parent+0xcc/0x430 [ 435.492537] ? __might_sleep+0x95/0x190 [ 435.496514] ? fsnotify+0xef0/0xef0 [ 435.500136] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 435.505148] ? selinux_file_permission+0x90/0x540 [ 435.509982] ? security_file_permission+0x1c2/0x220 [ 435.514990] ? iter_file_splice_write+0x1050/0x1050 [ 435.519994] do_splice_to+0x12e/0x190 [ 435.523792] splice_direct_to_actor+0x31c/0x9d0 [ 435.528449] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 435.533976] ? pipe_to_sendpage+0x400/0x400 [ 435.538289] ? do_splice_to+0x190/0x190 [ 435.542265] ? security_file_permission+0x1c2/0x220 [ 435.547270] ? rw_verify_area+0x118/0x360 [ 435.551408] do_splice_direct+0x2d4/0x420 [ 435.555549] ? splice_direct_to_actor+0x9d0/0x9d0 [ 435.560383] ? rw_verify_area+0x118/0x360 [ 435.564522] do_sendfile+0x62a/0xe20 [ 435.568234] ? do_compat_pwritev64+0x1c0/0x1c0 [ 435.572806] ? __sb_end_write+0xd9/0x110 [ 435.576857] ? fput+0x130/0x1a0 [ 435.580126] ? do_syscall_64+0x9a/0x820 [ 435.584090] ? do_syscall_64+0x9a/0x820 [ 435.588055] __x64_sys_sendfile64+0x1fd/0x250 [ 435.592546] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 435.597123] do_syscall_64+0x1b9/0x820 [ 435.601010] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 435.606364] ? syscall_return_slowpath+0x5e0/0x5e0 [ 435.611282] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 435.616125] ? trace_hardirqs_on_caller+0x310/0x310 [ 435.621147] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 435.626165] ? prepare_exit_to_usermode+0x291/0x3b0 [ 435.631183] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 435.636025] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 435.641209] RIP: 0033:0x457669 [ 435.644410] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 435.663314] RSP: 002b:00007f3befc2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 435.671009] RAX: ffffffffffffffda RBX: 00007f3befc2fc90 RCX: 0000000000457669 [ 435.678269] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 435.685522] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 435.692791] R10: 000000000000a10a R11: 0000000000000246 R12: 00007f3befc306d4 [ 435.700052] R13: 00000000004c3e42 R14: 00000000004d6c90 R15: 0000000000000006 07:25:35 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x04', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:35 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ff}}}) 07:25:35 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rf%no'}, 0x2c, {'wfdno'}}) 07:25:35 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)) ioctl$sock_proto_private(r0, 0x894b, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x7f, 0x80900) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000140)) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000080)={0x400, 0x0, [], {0x0, @reserved}}) 07:25:35 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:35 executing program 1 (fault-call:4 fault-nth:28): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) 07:25:35 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdfd}}}) [ 435.846633] 9pnet: Insufficient options for proto=fd 07:25:35 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b6b6b00000000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:35 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = accept4$unix(r0, &(0x7f0000000400), &(0x7f0000000480)=0x6e, 0x800) setrlimit(0xf, &(0x7f0000000500)={0x0, 0x8}) ioctl$sock_proto_private(r1, 0x894a, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/xfrm_stat\x00') ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000100)={0x3, 0x4, 0x3, 0x0, 0x6, 0x4, 0x3f, 0x3, 0xfffffffffffff72c, 0x3, 0x8, 0xf8, 0x0, 0x20, 0x800, 0x10001, 0x8, 0x1ff, 0x8}) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000000540)) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f00000004c0)={'L+', 0x7f}, 0x28, 0x3) [ 435.903330] FAULT_INJECTION: forcing a failure. [ 435.903330] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 435.991293] CPU: 0 PID: 21956 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #161 [ 435.998708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 436.008076] Call Trace: [ 436.010686] dump_stack+0x244/0x39d [ 436.014347] ? dump_stack_print_info.cold.1+0x20/0x20 [ 436.019572] should_fail.cold.4+0xa/0x17 [ 436.023679] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 436.028815] ? is_bpf_text_address+0xac/0x170 [ 436.033325] ? zap_class+0x640/0x640 [ 436.037060] ? lock_downgrade+0x900/0x900 [ 436.041225] ? check_preemption_disabled+0x48/0x280 [ 436.046258] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 436.051201] ? kasan_check_read+0x11/0x20 [ 436.055366] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 436.060662] ? rcu_softirq_qs+0x20/0x20 [ 436.064654] ? find_held_lock+0x36/0x1c0 [ 436.068742] ? check_preemption_disabled+0x48/0x280 [ 436.073798] ? lock_release+0xa00/0xa00 [ 436.077804] ? perf_trace_sched_process_exec+0x860/0x860 [ 436.083272] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 07:25:35 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 436.088830] ? rcu_pm_notify+0xc0/0xc0 [ 436.092741] ? __might_sleep+0x95/0x190 [ 436.096746] __alloc_pages_nodemask+0x366/0xea0 [ 436.101439] ? iov_iter_get_pages_alloc+0x8ac/0x15a0 [ 436.106569] ? default_file_splice_read+0x1db/0xb20 [ 436.111612] ? do_splice_to+0x12e/0x190 [ 436.115601] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 436.120644] ? check_preemption_disabled+0x48/0x280 [ 436.125688] ? rcu_pm_notify+0xc0/0xc0 [ 436.129598] ? __kmalloc_node+0x3c/0x70 [ 436.133602] ? __kmalloc_node+0x3c/0x70 [ 436.137608] ? rcu_read_lock_sched_held+0x14f/0x180 [ 436.142672] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 436.148233] alloc_pages_current+0x173/0x350 [ 436.148258] push_pipe+0x3ff/0x7a0 [ 436.148273] ? __kmalloc_node+0x50/0x70 [ 436.148297] iov_iter_get_pages_alloc+0x938/0x15a0 [ 436.165132] ? free_unref_page+0x6e0/0x960 [ 436.169390] ? copyin+0x100/0x100 [ 436.172859] ? trace_hardirqs_on+0xbd/0x310 [ 436.177199] ? __put_page+0x122/0x190 [ 436.181017] ? trace_hardirqs_off_caller+0x310/0x310 [ 436.186176] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 436.191757] ? mark_free_pages+0x3c0/0x3c0 [ 436.196021] ? check_preemption_disabled+0x48/0x280 [ 436.201072] ? release_sock+0x1ec/0x2c0 [ 436.205071] ? __local_bh_enable_ip+0x160/0x260 [ 436.209760] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 436.214830] ? iov_iter_pipe+0xbb/0x2f0 [ 436.218828] default_file_splice_read+0x1db/0xb20 [ 436.223701] ? iter_file_splice_write+0x1050/0x1050 [ 436.228735] ? __put_page+0x136/0x190 [ 436.232589] ? __put_compound_page+0xe0/0xe0 [ 436.237363] ? kernel_sendpage+0x9a/0xf0 07:25:35 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 436.241674] ? generic_pipe_buf_release+0x1de/0x2b0 [ 436.246707] ? anon_pipe_buf_release+0x530/0x530 [ 436.251478] ? pipe_to_sendpage+0x2d8/0x400 [ 436.255830] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 436.261382] ? fsnotify+0x50e/0xef0 [ 436.265042] ? generic_pipe_buf_nosteal+0x10/0x10 [ 436.269897] ? fsnotify_first_mark+0x350/0x350 [ 436.269913] ? __fsnotify_parent+0xcc/0x430 [ 436.269934] ? __might_sleep+0x95/0x190 [ 436.282813] ? fsnotify+0xef0/0xef0 [ 436.286458] ? __sanitizer_cov_trace_cmp4+0x16/0x20 07:25:35 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000}}}) [ 436.286478] ? selinux_file_permission+0x90/0x540 [ 436.286499] ? security_file_permission+0x1c2/0x220 [ 436.301362] ? iter_file_splice_write+0x1050/0x1050 [ 436.306390] do_splice_to+0x12e/0x190 [ 436.310209] splice_direct_to_actor+0x31c/0x9d0 [ 436.314893] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 436.314916] ? pipe_to_sendpage+0x400/0x400 [ 436.314938] ? do_splice_to+0x190/0x190 [ 436.314959] ? security_file_permission+0x1c2/0x220 [ 436.328804] ? rw_verify_area+0x118/0x360 [ 436.337978] do_splice_direct+0x2d4/0x420 [ 436.342151] ? splice_direct_to_actor+0x9d0/0x9d0 [ 436.347016] ? rw_verify_area+0x118/0x360 [ 436.351190] do_sendfile+0x62a/0xe20 [ 436.354929] ? do_compat_pwritev64+0x1c0/0x1c0 [ 436.359534] ? __sb_end_write+0xd9/0x110 [ 436.363624] ? fput+0x130/0x1a0 [ 436.366922] ? do_syscall_64+0x9a/0x820 [ 436.371060] ? do_syscall_64+0x9a/0x820 [ 436.375066] __x64_sys_sendfile64+0x1fd/0x250 [ 436.379581] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 436.384811] do_syscall_64+0x1b9/0x820 [ 436.388709] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 436.394101] ? syscall_return_slowpath+0x5e0/0x5e0 [ 436.399095] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 436.403972] ? trace_hardirqs_on_caller+0x310/0x310 [ 436.408997] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 436.414038] ? prepare_exit_to_usermode+0x291/0x3b0 [ 436.419077] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 436.423939] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 436.429140] RIP: 0033:0x457669 [ 436.429157] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 436.429165] RSP: 002b:00007f3befc2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 436.451260] RAX: ffffffffffffffda RBX: 00007f3befc2fc90 RCX: 0000000000457669 [ 436.451270] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 436.451279] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 436.451288] R10: 000000000000a10a R11: 0000000000000246 R12: 00007f3befc306d4 [ 436.451297] R13: 00000000004c3e42 R14: 00000000004d6c90 R15: 0000000000000006 07:25:36 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:36 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdfd]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:36 executing program 1 (fault-call:4 fault-nth:29): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) 07:25:36 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket(0x12, 0x80001, 0x6) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) setrlimit(0x2, &(0x7f00000000c0)={0x4, 0xb45}) ioctl$sock_proto_private(r0, 0x894c, 0x0) 07:25:36 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rf,no'}, 0x2c, {'wfdno'}}) [ 436.679051] FAULT_INJECTION: forcing a failure. [ 436.679051] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 436.692884] 9pnet: Insufficient options for proto=fd [ 436.694887] CPU: 0 PID: 22002 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #161 [ 436.705378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 436.714744] Call Trace: [ 436.717359] dump_stack+0x244/0x39d [ 436.721008] ? dump_stack_print_info.cold.1+0x20/0x20 07:25:36 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfd\no'}, 0x2c, {'wfdno'}}) [ 436.726230] should_fail.cold.4+0xa/0x17 [ 436.727577] mmap: syz-executor3 (21995): VmData 18493440 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 436.730307] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 436.730326] ? is_bpf_text_address+0xac/0x170 [ 436.730343] ? zap_class+0x640/0x640 [ 436.730358] ? lock_downgrade+0x900/0x900 [ 436.730382] ? check_preemption_disabled+0x48/0x280 [ 436.730401] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 436.764955] ? kasan_check_read+0x11/0x20 [ 436.764973] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 436.764989] ? rcu_softirq_qs+0x20/0x20 [ 436.765010] ? find_held_lock+0x36/0x1c0 [ 436.765048] ? check_preemption_disabled+0x48/0x280 [ 436.779369] ? lock_release+0xa00/0xa00 [ 436.795707] FAT-fs (loop4): bogus number of reserved sectors [ 436.796359] ? perf_trace_sched_process_exec+0x860/0x860 [ 436.796379] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 436.796397] ? rcu_pm_notify+0xc0/0xc0 [ 436.796419] ? __might_sleep+0x95/0x190 [ 436.814178] FAT-fs (loop4): Can't find a valid FAT filesystem [ 436.817079] __alloc_pages_nodemask+0x366/0xea0 [ 436.817099] ? iov_iter_get_pages_alloc+0x8ac/0x15a0 [ 436.817114] ? default_file_splice_read+0x1db/0xb20 [ 436.817133] ? do_splice_to+0x12e/0x190 [ 436.845721] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 436.847570] 9pnet: Insufficient options for proto=fd [ 436.850763] ? check_preemption_disabled+0x48/0x280 [ 436.850803] ? rcu_pm_notify+0xc0/0xc0 [ 436.850827] ? __kmalloc_node+0x3c/0x70 [ 436.850847] ? __kmalloc_node+0x3c/0x70 [ 436.872792] ? rcu_read_lock_sched_held+0x14f/0x180 07:25:36 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfd\"o'}, 0x2c, {'wfdno'}}) [ 436.877827] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 436.883382] alloc_pages_current+0x173/0x350 [ 436.887819] push_pipe+0x3ff/0x7a0 [ 436.891374] ? __kmalloc_node+0x50/0x70 [ 436.895372] iov_iter_get_pages_alloc+0x938/0x15a0 [ 436.900327] ? free_unref_page+0x6e0/0x960 [ 436.904579] ? copyin+0x100/0x100 [ 436.908061] ? trace_hardirqs_on+0xbd/0x310 [ 436.912398] ? __put_page+0x122/0x190 [ 436.916214] ? trace_hardirqs_off_caller+0x310/0x310 [ 436.921339] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 436.926901] ? mark_free_pages+0x3c0/0x3c0 [ 436.931152] ? check_preemption_disabled+0x48/0x280 [ 436.936186] ? release_sock+0x1ec/0x2c0 [ 436.940179] ? __local_bh_enable_ip+0x160/0x260 [ 436.944869] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 436.947731] 9pnet: Insufficient options for proto=fd [ 436.949901] ? iov_iter_pipe+0xbb/0x2f0 [ 436.949925] default_file_splice_read+0x1db/0xb20 [ 436.949955] ? iter_file_splice_write+0x1050/0x1050 [ 436.949976] ? __put_page+0x136/0x190 [ 436.972691] ? __put_compound_page+0xe0/0xe0 07:25:36 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfd%o'}, 0x2c, {'wfdno'}}) [ 436.977123] ? kernel_sendpage+0x9a/0xf0 [ 436.981211] ? generic_pipe_buf_release+0x1de/0x2b0 [ 436.986247] ? anon_pipe_buf_release+0x530/0x530 [ 436.991014] ? pipe_to_sendpage+0x2d8/0x400 [ 436.995371] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 437.000925] ? fsnotify+0x50e/0xef0 [ 437.004572] ? generic_pipe_buf_nosteal+0x10/0x10 [ 437.009433] ? fsnotify_first_mark+0x350/0x350 [ 437.014035] ? __fsnotify_parent+0xcc/0x430 [ 437.018374] ? __might_sleep+0x95/0x190 [ 437.022365] ? fsnotify+0xef0/0xef0 07:25:36 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfd,o'}, 0x2c, {'wfdno'}}) [ 437.025551] 9pnet: Insufficient options for proto=fd [ 437.026015] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 437.026043] ? selinux_file_permission+0x90/0x540 [ 437.026067] ? security_file_permission+0x1c2/0x220 [ 437.026088] ? iter_file_splice_write+0x1050/0x1050 [ 437.051077] do_splice_to+0x12e/0x190 [ 437.054907] splice_direct_to_actor+0x31c/0x9d0 [ 437.059605] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 437.065159] ? pipe_to_sendpage+0x400/0x400 [ 437.069498] ? do_splice_to+0x190/0x190 [ 437.073489] ? security_file_permission+0x1c2/0x220 07:25:36 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdn%'}, 0x2c, {'wfdno'}}) [ 437.078522] ? rw_verify_area+0x118/0x360 [ 437.082687] do_splice_direct+0x2d4/0x420 [ 437.086848] ? splice_direct_to_actor+0x9d0/0x9d0 [ 437.090079] 9pnet: Insufficient options for proto=fd [ 437.091712] ? rw_verify_area+0x118/0x360 [ 437.091734] do_sendfile+0x62a/0xe20 [ 437.091762] ? do_compat_pwritev64+0x1c0/0x1c0 [ 437.091790] ? __sb_end_write+0xd9/0x110 [ 437.091812] ? fput+0x130/0x1a0 [ 437.091834] ? do_syscall_64+0x9a/0x820 [ 437.120720] ? do_syscall_64+0x9a/0x820 [ 437.124718] __x64_sys_sendfile64+0x1fd/0x250 [ 437.129231] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 437.133839] do_syscall_64+0x1b9/0x820 [ 437.137741] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 437.143130] ? syscall_return_slowpath+0x5e0/0x5e0 [ 437.148076] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 437.152937] ? trace_hardirqs_on_caller+0x310/0x310 [ 437.156551] 9pnet: Insufficient options for proto=fd [ 437.157966] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 437.157987] ? prepare_exit_to_usermode+0x291/0x3b0 [ 437.158010] ? trace_hardirqs_off_thunk+0x1a/0x1c 07:25:36 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdn,'}, 0x2c, {'wfdno'}}) [ 437.158045] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 437.183155] RIP: 0033:0x457669 [ 437.186355] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 437.205265] RSP: 002b:00007f3befc2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 437.212997] RAX: ffffffffffffffda RBX: 00007f3befc2fc90 RCX: 0000000000457669 [ 437.220283] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 07:25:36 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffffffffffff}}}) [ 437.224576] 9pnet: Insufficient options for proto=fd [ 437.227560] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 437.227570] R10: 000000000000a10a R11: 0000000000000246 R12: 00007f3befc306d4 [ 437.227580] R13: 00000000004c3e42 R14: 00000000004d6c90 R15: 0000000000000006 [ 437.307034] FAT-fs (loop4): bogus number of reserved sectors [ 437.337375] FAT-fs (loop4): Can't find a valid FAT filesystem 07:25:37 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat*', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:37 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:37 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x140, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f00000012c0)={{&(0x7f00000011c0)=""/139, 0x8b}, &(0x7f0000001280), 0x45}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001180)={r0, &(0x7f0000000080)="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", &(0x7f0000000180)=""/4096}, 0x18) socket$unix(0x1, 0x1, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)) ioctl$sock_proto_private(r0, 0x9e7, 0x0) 07:25:37 executing program 1 (fault-call:4 fault-nth:30): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) 07:25:37 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdn\n'}, 0x2c, {'wfdno'}}) 07:25:37 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe7}}}) [ 437.435080] FAULT_INJECTION: forcing a failure. [ 437.435080] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 437.460217] 9pnet: Insufficient options for proto=fd [ 437.467216] CPU: 0 PID: 22042 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #161 [ 437.474593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 437.483956] Call Trace: [ 437.486564] dump_stack+0x244/0x39d [ 437.490219] ? dump_stack_print_info.cold.1+0x20/0x20 [ 437.495432] should_fail.cold.4+0xa/0x17 [ 437.499509] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 437.504625] ? is_bpf_text_address+0xac/0x170 [ 437.509134] ? zap_class+0x640/0x640 [ 437.512860] ? lock_downgrade+0x900/0x900 [ 437.517020] ? check_preemption_disabled+0x48/0x280 [ 437.522069] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 437.527015] ? kasan_check_read+0x11/0x20 [ 437.531181] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 437.536469] ? rcu_softirq_qs+0x20/0x20 [ 437.540461] ? find_held_lock+0x36/0x1c0 [ 437.544546] ? uverbs_disassociate_api_pre+0x3f0/0x4f0 [ 437.549853] ? check_preemption_disabled+0x48/0x280 [ 437.554888] ? lock_release+0xa00/0xa00 [ 437.558873] ? perf_trace_sched_process_exec+0x860/0x860 [ 437.564336] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 437.569889] ? rcu_pm_notify+0xc0/0xc0 [ 437.573806] ? __might_sleep+0x95/0x190 [ 437.577812] __alloc_pages_nodemask+0x366/0xea0 [ 437.582491] ? iov_iter_get_pages_alloc+0x8ac/0x15a0 [ 437.587599] ? default_file_splice_read+0x1db/0xb20 [ 437.592622] ? do_splice_to+0x12e/0x190 [ 437.592644] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 437.592670] ? check_preemption_disabled+0x48/0x280 [ 437.601664] ? rcu_pm_notify+0xc0/0xc0 [ 437.601689] ? __kmalloc_node+0x3c/0x70 [ 437.601703] ? __kmalloc_node+0x3c/0x70 [ 437.601721] ? rcu_read_lock_sched_held+0x14f/0x180 [ 437.601744] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 437.629106] alloc_pages_current+0x173/0x350 07:25:37 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}}}) 07:25:37 executing program 3: r0 = socket$unix(0x1, 0xfffffffffffffff9, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setrlimit(0x408000000000007, &(0x7f0000000000)) ioctl$sock_proto_private(r0, 0x894c, 0x0) 07:25:37 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfd]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:37 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdn\"'}, 0x2c, {'wfdno'}}) [ 437.633535] push_pipe+0x3ff/0x7a0 [ 437.637084] ? __kmalloc_node+0x50/0x70 [ 437.637112] iov_iter_get_pages_alloc+0x938/0x15a0 [ 437.637134] ? free_unref_page+0x6e0/0x960 [ 437.637159] ? copyin+0x100/0x100 [ 437.653734] ? trace_hardirqs_on+0xbd/0x310 [ 437.658077] ? __put_page+0x122/0x190 [ 437.661903] ? trace_hardirqs_off_caller+0x310/0x310 [ 437.667024] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 437.667056] ? mark_free_pages+0x3c0/0x3c0 [ 437.676828] ? check_preemption_disabled+0x48/0x280 [ 437.681860] ? release_sock+0x1ec/0x2c0 [ 437.685856] ? __local_bh_enable_ip+0x160/0x260 [ 437.690540] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 437.695572] ? iov_iter_pipe+0xbb/0x2f0 [ 437.699564] default_file_splice_read+0x1db/0xb20 [ 437.704436] ? iter_file_splice_write+0x1050/0x1050 [ 437.709464] ? __put_page+0x136/0x190 [ 437.713283] ? __put_compound_page+0xe0/0xe0 [ 437.717710] ? kernel_sendpage+0x9a/0xf0 [ 437.721802] ? generic_pipe_buf_release+0x1de/0x2b0 [ 437.726839] ? anon_pipe_buf_release+0x530/0x530 [ 437.731612] ? pipe_to_sendpage+0x2d8/0x400 07:25:37 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}}) [ 437.735957] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 437.741510] ? fsnotify+0x50e/0xef0 [ 437.745163] ? generic_pipe_buf_nosteal+0x10/0x10 [ 437.750020] ? fsnotify_first_mark+0x350/0x350 [ 437.754622] ? __fsnotify_parent+0xcc/0x430 [ 437.758960] ? __might_sleep+0x95/0x190 [ 437.762947] ? fsnotify+0xef0/0xef0 [ 437.766598] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 437.771636] ? selinux_file_permission+0x90/0x540 [ 437.776506] ? security_file_permission+0x1c2/0x220 [ 437.780519] 9pnet: Insufficient options for proto=fd [ 437.781540] ? iter_file_splice_write+0x1050/0x1050 [ 437.781558] do_splice_to+0x12e/0x190 [ 437.781578] splice_direct_to_actor+0x31c/0x9d0 [ 437.781595] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 437.781615] ? pipe_to_sendpage+0x400/0x400 [ 437.781636] ? do_splice_to+0x190/0x190 [ 437.781652] ? security_file_permission+0x1c2/0x220 [ 437.781673] ? rw_verify_area+0x118/0x360 [ 437.810105] do_splice_direct+0x2d4/0x420 [ 437.827380] ? splice_direct_to_actor+0x9d0/0x9d0 [ 437.832240] ? rw_verify_area+0x118/0x360 07:25:37 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) pkey_alloc(0x0, 0x3) munlockall() setrlimit(0x408000000000007, &(0x7f0000000000)) pipe(&(0x7f0000000040)) ioctl$sock_proto_private(r0, 0x894c, 0x0) [ 437.832261] do_sendfile+0x62a/0xe20 [ 437.832288] ? do_compat_pwritev64+0x1c0/0x1c0 [ 437.832309] ? __sb_end_write+0xd9/0x110 [ 437.848795] ? fput+0x130/0x1a0 [ 437.852096] ? do_syscall_64+0x9a/0x820 [ 437.856084] ? do_syscall_64+0x9a/0x820 [ 437.860086] __x64_sys_sendfile64+0x1fd/0x250 [ 437.864607] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 437.869214] do_syscall_64+0x1b9/0x820 [ 437.873119] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 437.878509] ? syscall_return_slowpath+0x5e0/0x5e0 [ 437.883452] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 437.888302] ? trace_hardirqs_on_caller+0x310/0x310 [ 437.888321] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 437.888341] ? prepare_exit_to_usermode+0x291/0x3b0 [ 437.888363] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 437.888385] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 437.913437] RIP: 0033:0x457669 [ 437.916644] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 437.935558] RSP: 002b:00007f3befc2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 437.943298] RAX: ffffffffffffffda RBX: 00007f3befc2fc90 RCX: 0000000000457669 [ 437.950575] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 437.957855] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 437.965138] R10: 000000000000a10a R11: 0000000000000246 R12: 00007f3befc306d4 [ 437.972416] R13: 00000000004c3e42 R14: 00000000004d6c90 R15: 0000000000000006 07:25:37 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:37 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ff]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:37 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0xa}, 0x2c, {'wfdno'}}) 07:25:37 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7}}}) 07:25:37 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0xa00, 0x0) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000080)=0x15) fcntl$addseals(r0, 0x409, 0xc) ioctl$sock_proto_private(r0, 0x894c, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000100)=0x1) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000180)=0x4) 07:25:37 executing program 1 (fault-call:4 fault-nth:31): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) [ 438.255794] FAULT_INJECTION: forcing a failure. [ 438.255794] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 438.287752] CPU: 0 PID: 22093 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #161 [ 438.288182] 9pnet: Insufficient options for proto=fd 07:25:37 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 438.295181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 438.295188] Call Trace: [ 438.295217] dump_stack+0x244/0x39d [ 438.295242] ? dump_stack_print_info.cold.1+0x20/0x20 [ 438.295275] should_fail.cold.4+0xa/0x17 [ 438.295299] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 438.330269] ? is_bpf_text_address+0xac/0x170 [ 438.334801] ? zap_class+0x640/0x640 [ 438.338529] ? lock_downgrade+0x900/0x900 [ 438.342693] ? check_preemption_disabled+0x48/0x280 [ 438.347735] ? rcu_read_unlock_special+0x1c0/0x1c0 07:25:37 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}}}) [ 438.352683] ? kasan_check_read+0x11/0x20 [ 438.356850] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 438.362142] ? rcu_softirq_qs+0x20/0x20 [ 438.366137] ? find_held_lock+0x36/0x1c0 [ 438.370358] ? lock_release+0xa00/0xa00 [ 438.374351] ? perf_trace_sched_process_exec+0x860/0x860 [ 438.379826] ? __might_sleep+0x95/0x190 [ 438.383824] __alloc_pages_nodemask+0x366/0xea0 [ 438.388508] ? iov_iter_get_pages_alloc+0x8ac/0x15a0 [ 438.393620] ? default_file_splice_read+0x1db/0xb20 [ 438.393634] ? do_splice_to+0x12e/0x190 [ 438.393656] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 438.393682] ? check_preemption_disabled+0x48/0x280 [ 438.402670] ? rcu_pm_notify+0xc0/0xc0 [ 438.402694] ? __kmalloc_node+0x3c/0x70 [ 438.402709] ? __kmalloc_node+0x3c/0x70 [ 438.402727] ? rcu_read_lock_sched_held+0x14f/0x180 [ 438.402748] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 438.411926] 9pnet: Insufficient options for proto=fd [ 438.412798] alloc_pages_current+0x173/0x350 [ 438.412824] push_pipe+0x3ff/0x7a0 [ 438.412844] ? __kmalloc_node+0x50/0x70 07:25:38 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x22}, 0x2c, {'wfdno'}}) [ 438.444943] iov_iter_get_pages_alloc+0x938/0x15a0 [ 438.444967] ? free_unref_page+0x6e0/0x960 [ 438.444986] ? copyin+0x100/0x100 [ 438.461634] ? trace_hardirqs_on+0xbd/0x310 [ 438.461655] ? __put_page+0x122/0x190 [ 438.461673] ? trace_hardirqs_off_caller+0x310/0x310 [ 438.461695] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 438.461719] ? mark_free_pages+0x3c0/0x3c0 [ 438.461737] ? check_preemption_disabled+0x48/0x280 [ 438.461759] ? release_sock+0x1ec/0x2c0 [ 438.497209] ? __local_bh_enable_ip+0x160/0x260 [ 438.501901] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 438.506934] ? iov_iter_pipe+0xbb/0x2f0 [ 438.510933] default_file_splice_read+0x1db/0xb20 [ 438.515819] ? iter_file_splice_write+0x1050/0x1050 [ 438.520850] ? __put_page+0x136/0x190 [ 438.524668] ? __put_compound_page+0xe0/0xe0 [ 438.529094] ? kernel_sendpage+0x9a/0xf0 [ 438.533184] ? generic_pipe_buf_release+0x1de/0x2b0 [ 438.538217] ? anon_pipe_buf_release+0x530/0x530 [ 438.542993] ? pipe_to_sendpage+0x2d8/0x400 [ 438.546918] 9pnet: Insufficient options for proto=fd 07:25:38 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x25}, 0x2c, {'wfdno'}}) [ 438.547348] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 438.557984] ? fsnotify+0x50e/0xef0 [ 438.561664] ? generic_pipe_buf_nosteal+0x10/0x10 [ 438.566530] ? fsnotify_first_mark+0x350/0x350 [ 438.571125] ? __fsnotify_parent+0xcc/0x430 [ 438.575459] ? __might_sleep+0x95/0x190 [ 438.579451] ? fsnotify+0xef0/0xef0 [ 438.583141] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 438.588177] ? selinux_file_permission+0x90/0x540 [ 438.593043] ? security_file_permission+0x1c2/0x220 [ 438.598081] ? iter_file_splice_write+0x1050/0x1050 [ 438.598098] do_splice_to+0x12e/0x190 07:25:38 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}}}) [ 438.598123] splice_direct_to_actor+0x31c/0x9d0 [ 438.611603] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 438.611626] ? pipe_to_sendpage+0x400/0x400 [ 438.611648] ? do_splice_to+0x190/0x190 [ 438.611664] ? security_file_permission+0x1c2/0x220 [ 438.611684] ? rw_verify_area+0x118/0x360 [ 438.611704] do_splice_direct+0x2d4/0x420 [ 438.638818] ? splice_direct_to_actor+0x9d0/0x9d0 [ 438.643695] ? rw_verify_area+0x118/0x360 [ 438.647860] do_sendfile+0x62a/0xe20 [ 438.651597] ? do_compat_pwritev64+0x1c0/0x1c0 [ 438.656195] ? __sb_end_write+0xd9/0x110 [ 438.660299] ? fput+0x130/0x1a0 [ 438.663599] ? do_syscall_64+0x9a/0x820 [ 438.667589] ? do_syscall_64+0x9a/0x820 [ 438.671378] FAT-fs (loop4): bogus number of reserved sectors [ 438.671584] __x64_sys_sendfile64+0x1fd/0x250 [ 438.681870] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 438.683654] FAT-fs (loop4): Can't find a valid FAT filesystem [ 438.686476] do_syscall_64+0x1b9/0x820 [ 438.686494] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 438.686514] ? syscall_return_slowpath+0x5e0/0x5e0 [ 438.686529] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 438.686549] ? trace_hardirqs_on_caller+0x310/0x310 [ 438.686570] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 438.721467] ? prepare_exit_to_usermode+0x291/0x3b0 [ 438.726505] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 438.731367] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 438.736827] RIP: 0033:0x457669 07:25:38 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdfd]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 438.740042] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 438.758951] RSP: 002b:00007f3befc2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 438.766695] RAX: ffffffffffffffda RBX: 00007f3befc2fc90 RCX: 0000000000457669 [ 438.773970] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 438.773981] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 438.773991] R10: 000000000000a10a R11: 0000000000000246 R12: 00007f3befc306d4 [ 438.774001] R13: 00000000004c3e42 R14: 00000000004d6c90 R15: 0000000000000006 [ 438.808679] 9pnet: Insufficient options for proto=fd 07:25:38 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x04', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:38 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ffffffffffffff}}}) 07:25:38 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000005c0)=0xfffffffeffffffff, &(0x7f0000000600)=0x4) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f00000004c0)={0x0, 0x1}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000540)={r1, 0x1}, &(0x7f0000000580)=0x8) r2 = socket$unix(0x1, 0x0, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)) mkdir(&(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,worOdir=./file1']) fremovexattr(r2, &(0x7f0000000640)=@known='system.posix_acl_access\x00') creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r3 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000300)={0x1, 0xcae}) mount$overlay(0x0, &(0x7f0000000040)='./file1/file0\x00', &(0x7f00000001c0)='overlay\x00', 0x12060, &(0x7f00000003c0)={[{@nfs_export_off='nfs_export=off'}, {@index_off='index=off'}, {@index_on='index=on'}, {@nfs_export_on='nfs_export=on'}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@index_off='index=off'}, {@xino_auto='xino=auto'}, {@xino_on='xino=on'}, {@metacopy_off='metacopy=off'}, {@metacopy_off='metacopy=off'}], [{@smackfsdef={'smackfsdef', 0x3d, 'vboxnet0wlan1,(^'}}, {@uid_eq={'uid', 0x3d, r4}}, {@seclabel='seclabel'}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fstat(r3, &(0x7f0000000340)) ioctl$sock_proto_private(r2, 0x89eb, 0x0) recvfrom$inet(r3, &(0x7f0000000680)=""/79, 0x4f, 0x2060, &(0x7f0000000700)={0x2, 0x4e22, @local}, 0x10) 07:25:38 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x2c}, 0x2c, {'wfdno'}}) 07:25:38 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 438.869568] FAT-fs (loop4): bogus number of reserved sectors [ 438.890356] FAT-fs (loop4): Can't find a valid FAT filesystem 07:25:38 executing program 1 (fault-call:4 fault-nth:32): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) [ 439.037993] overlayfs: unrecognized mount option "worOdir=./file1" or missing value [ 439.045261] 9pnet: Insufficient options for proto=fd 07:25:38 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe7]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:38 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdfd}}}) 07:25:38 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x22, {'wfdno'}}) [ 439.089960] FAULT_INJECTION: forcing a failure. [ 439.089960] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 439.159759] CPU: 0 PID: 22154 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #161 [ 439.167198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 439.176560] Call Trace: [ 439.179166] dump_stack+0x244/0x39d [ 439.182826] ? dump_stack_print_info.cold.1+0x20/0x20 [ 439.188049] should_fail.cold.4+0xa/0x17 [ 439.192307] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 439.197429] ? is_bpf_text_address+0xac/0x170 [ 439.201946] ? zap_class+0x640/0x640 [ 439.205672] ? lock_downgrade+0x900/0x900 07:25:38 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ffffffffffffff]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 439.209840] ? check_preemption_disabled+0x48/0x280 [ 439.214873] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 439.219818] ? kasan_check_read+0x11/0x20 [ 439.223978] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 439.229269] ? rcu_softirq_qs+0x20/0x20 [ 439.232951] 9pnet: Insufficient options for proto=fd [ 439.233266] ? find_held_lock+0x36/0x1c0 [ 439.233301] ? check_preemption_disabled+0x48/0x280 [ 439.233324] ? lock_release+0xa00/0xa00 [ 439.251455] ? perf_trace_sched_process_exec+0x860/0x860 07:25:38 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x38, {'wfdno'}}) [ 439.256918] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 439.262472] ? rcu_pm_notify+0xc0/0xc0 [ 439.266376] ? __might_sleep+0x95/0x190 [ 439.270373] __alloc_pages_nodemask+0x366/0xea0 [ 439.275068] ? iov_iter_get_pages_alloc+0x8ac/0x15a0 [ 439.280185] ? default_file_splice_read+0x1db/0xb20 [ 439.285218] ? do_splice_to+0x12e/0x190 [ 439.289222] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 439.294260] ? check_preemption_disabled+0x48/0x280 [ 439.299297] ? rcu_pm_notify+0xc0/0xc0 [ 439.303228] ? __kmalloc_node+0x3c/0x70 07:25:38 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_proto_private(r0, 0x894c, 0x0) [ 439.307218] ? __kmalloc_node+0x3c/0x70 [ 439.311206] ? rcu_read_lock_sched_held+0x14f/0x180 [ 439.316250] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 439.321820] alloc_pages_current+0x173/0x350 [ 439.326272] push_pipe+0x3ff/0x7a0 [ 439.329824] ? __kmalloc_node+0x50/0x70 [ 439.333829] iov_iter_get_pages_alloc+0x938/0x15a0 [ 439.338788] ? free_unref_page+0x6e0/0x960 [ 439.343050] ? copyin+0x100/0x100 [ 439.346519] ? trace_hardirqs_on+0xbd/0x310 [ 439.350868] ? __put_page+0x122/0x190 [ 439.354688] ? trace_hardirqs_off_caller+0x310/0x310 [ 439.359841] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 439.365399] ? mark_free_pages+0x3c0/0x3c0 [ 439.369662] ? check_preemption_disabled+0x48/0x280 [ 439.374692] ? release_sock+0x1ec/0x2c0 [ 439.378696] ? __local_bh_enable_ip+0x160/0x260 [ 439.383378] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 439.388411] ? iov_iter_pipe+0xbb/0x2f0 [ 439.392405] default_file_splice_read+0x1db/0xb20 [ 439.397275] ? iter_file_splice_write+0x1050/0x1050 [ 439.402307] ? __put_page+0x136/0x190 [ 439.402326] ? __put_compound_page+0xe0/0xe0 [ 439.402344] ? kernel_sendpage+0x9a/0xf0 [ 439.402368] ? generic_pipe_buf_release+0x1de/0x2b0 [ 439.402385] ? anon_pipe_buf_release+0x530/0x530 [ 439.402407] ? pipe_to_sendpage+0x2d8/0x400 [ 439.424439] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 439.424456] ? fsnotify+0x50e/0xef0 [ 439.424483] ? generic_pipe_buf_nosteal+0x10/0x10 [ 439.424502] ? fsnotify_first_mark+0x350/0x350 [ 439.447386] ? __fsnotify_parent+0xcc/0x430 [ 439.451714] ? __might_sleep+0x95/0x190 [ 439.455703] ? fsnotify+0xef0/0xef0 [ 439.459350] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 439.464381] ? selinux_file_permission+0x90/0x540 [ 439.469244] ? security_file_permission+0x1c2/0x220 [ 439.474280] ? iter_file_splice_write+0x1050/0x1050 [ 439.479311] do_splice_to+0x12e/0x190 [ 439.483134] splice_direct_to_actor+0x31c/0x9d0 [ 439.487821] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 439.493377] ? pipe_to_sendpage+0x400/0x400 [ 439.497722] ? do_splice_to+0x190/0x190 [ 439.501713] ? security_file_permission+0x1c2/0x220 [ 439.502897] 9pnet: Insufficient options for proto=fd [ 439.506744] ? rw_verify_area+0x118/0x360 [ 439.506765] do_splice_direct+0x2d4/0x420 [ 439.506796] ? splice_direct_to_actor+0x9d0/0x9d0 [ 439.506822] ? rw_verify_area+0x118/0x360 [ 439.529196] do_sendfile+0x62a/0xe20 [ 439.532938] ? do_compat_pwritev64+0x1c0/0x1c0 [ 439.537535] ? __sb_end_write+0xd9/0x110 [ 439.541611] ? fput+0x130/0x1a0 [ 439.544902] ? do_syscall_64+0x9a/0x820 [ 439.548885] ? do_syscall_64+0x9a/0x820 [ 439.552883] __x64_sys_sendfile64+0x1fd/0x250 [ 439.557402] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 439.562007] do_syscall_64+0x1b9/0x820 [ 439.565917] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 439.571292] ? syscall_return_slowpath+0x5e0/0x5e0 [ 439.571308] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 439.571327] ? trace_hardirqs_on_caller+0x310/0x310 [ 439.571344] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 439.571364] ? prepare_exit_to_usermode+0x291/0x3b0 [ 439.596156] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 439.601027] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 439.606232] RIP: 0033:0x457669 [ 439.609437] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 439.628345] RSP: 002b:00007f3befc2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 439.636050] RAX: ffffffffffffffda RBX: 00007f3befc2fc90 RCX: 0000000000457669 [ 439.643320] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 439.650574] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 439.657850] R10: 000000000000a10a R11: 0000000000000246 R12: 00007f3befc306d4 [ 439.665106] R13: 00000000004c3e42 R14: 00000000004d6c90 R15: 0000000000000006 07:25:39 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfath', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:39 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}}}) 07:25:39 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:39 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'\"fdno'}}) 07:25:39 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_proto_private(r0, 0x894c, 0x0) 07:25:39 executing program 1 (fault-call:4 fault-nth:33): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) 07:25:39 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) setrlimit(0x11, &(0x7f0000000000)={0x0, 0x1}) ioctl$sock_proto_private(r0, 0x894c, 0x0) 07:25:39 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}}}) [ 439.845192] 9pnet: Insufficient options for proto=fd [ 439.862026] FAULT_INJECTION: forcing a failure. [ 439.862026] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 439.937002] CPU: 0 PID: 22200 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #161 [ 439.944426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 439.953808] Call Trace: [ 439.956416] dump_stack+0x244/0x39d [ 439.960074] ? dump_stack_print_info.cold.1+0x20/0x20 [ 439.965295] should_fail.cold.4+0xa/0x17 [ 439.969378] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 439.974499] ? is_bpf_text_address+0xac/0x170 [ 439.979015] ? zap_class+0x640/0x640 [ 439.982745] ? lock_downgrade+0x900/0x900 [ 439.986919] ? check_preemption_disabled+0x48/0x280 [ 439.991954] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 439.996896] ? kasan_check_read+0x11/0x20 [ 440.001061] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 440.006352] ? rcu_softirq_qs+0x20/0x20 [ 440.010347] ? find_held_lock+0x36/0x1c0 [ 440.014436] ? check_preemption_disabled+0x48/0x280 [ 440.019465] ? lock_release+0xa00/0xa00 [ 440.023449] ? perf_trace_sched_process_exec+0x860/0x860 [ 440.028927] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 440.034489] ? rcu_pm_notify+0xc0/0xc0 [ 440.038408] ? __might_sleep+0x95/0x190 [ 440.042413] __alloc_pages_nodemask+0x366/0xea0 [ 440.047092] ? iov_iter_get_pages_alloc+0x8ac/0x15a0 [ 440.052217] ? default_file_splice_read+0x1db/0xb20 [ 440.057239] ? do_splice_to+0x12e/0x190 [ 440.061249] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 440.066285] ? check_preemption_disabled+0x48/0x280 [ 440.071329] ? rcu_pm_notify+0xc0/0xc0 [ 440.075233] ? __kmalloc_node+0x3c/0x70 [ 440.079225] ? __kmalloc_node+0x3c/0x70 07:25:39 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 440.083213] ? rcu_read_lock_sched_held+0x14f/0x180 [ 440.088243] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 440.093812] alloc_pages_current+0x173/0x350 [ 440.098241] push_pipe+0x3ff/0x7a0 [ 440.101806] ? __kmalloc_node+0x50/0x70 [ 440.105832] iov_iter_get_pages_alloc+0x938/0x15a0 [ 440.110789] ? free_unref_page+0x6e0/0x960 [ 440.115056] ? copyin+0x100/0x100 [ 440.118520] ? trace_hardirqs_on+0xbd/0x310 [ 440.122853] ? __put_page+0x122/0x190 [ 440.126665] ? trace_hardirqs_off_caller+0x310/0x310 [ 440.131797] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 07:25:39 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {',fdno'}}) [ 440.137358] ? mark_free_pages+0x3c0/0x3c0 [ 440.141617] ? check_preemption_disabled+0x48/0x280 [ 440.146653] ? release_sock+0x1ec/0x2c0 [ 440.150648] ? __local_bh_enable_ip+0x160/0x260 [ 440.155332] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 440.160361] ? iov_iter_pipe+0xbb/0x2f0 [ 440.164355] default_file_splice_read+0x1db/0xb20 [ 440.169225] ? iter_file_splice_write+0x1050/0x1050 [ 440.174254] ? __put_page+0x136/0x190 [ 440.178102] ? __put_compound_page+0xe0/0xe0 [ 440.182544] ? kernel_sendpage+0x9a/0xf0 07:25:39 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffe7}}}) [ 440.186648] ? generic_pipe_buf_release+0x1de/0x2b0 [ 440.191696] ? anon_pipe_buf_release+0x530/0x530 [ 440.196474] ? pipe_to_sendpage+0x2d8/0x400 [ 440.200835] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 440.206385] ? fsnotify+0x50e/0xef0 [ 440.210050] ? generic_pipe_buf_nosteal+0x10/0x10 [ 440.214914] ? fsnotify_first_mark+0x350/0x350 [ 440.219507] ? __fsnotify_parent+0xcc/0x430 [ 440.223874] ? __might_sleep+0x95/0x190 [ 440.227865] ? fsnotify+0xef0/0xef0 [ 440.231511] ? __sanitizer_cov_trace_cmp4+0x16/0x20 07:25:39 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 440.236539] ? selinux_file_permission+0x90/0x540 [ 440.241660] ? security_file_permission+0x1c2/0x220 [ 440.246698] ? iter_file_splice_write+0x1050/0x1050 [ 440.251740] do_splice_to+0x12e/0x190 [ 440.255575] splice_direct_to_actor+0x31c/0x9d0 [ 440.260263] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 440.265825] ? pipe_to_sendpage+0x400/0x400 [ 440.270181] ? do_splice_to+0x190/0x190 [ 440.274165] ? security_file_permission+0x1c2/0x220 [ 440.275894] 9pnet: Insufficient options for proto=fd [ 440.279196] ? rw_verify_area+0x118/0x360 [ 440.279217] do_splice_direct+0x2d4/0x420 [ 440.279237] ? splice_direct_to_actor+0x9d0/0x9d0 [ 440.279259] ? rw_verify_area+0x118/0x360 [ 440.301661] do_sendfile+0x62a/0xe20 [ 440.305435] ? do_compat_pwritev64+0x1c0/0x1c0 [ 440.310038] ? __sb_end_write+0xd9/0x110 [ 440.310067] ? fput+0x130/0x1a0 [ 440.317402] ? do_syscall_64+0x9a/0x820 [ 440.321392] ? do_syscall_64+0x9a/0x820 [ 440.325485] __x64_sys_sendfile64+0x1fd/0x250 [ 440.330008] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 440.334616] do_syscall_64+0x1b9/0x820 [ 440.334649] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 440.334671] ? syscall_return_slowpath+0x5e0/0x5e0 [ 440.348878] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 440.353738] ? trace_hardirqs_on_caller+0x310/0x310 [ 440.358799] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 440.363830] ? prepare_exit_to_usermode+0x291/0x3b0 [ 440.368864] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 440.373926] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 440.379126] RIP: 0033:0x457669 [ 440.382331] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 440.401246] RSP: 002b:00007f3befc2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 440.408976] RAX: ffffffffffffffda RBX: 00007f3befc2fc90 RCX: 0000000000457669 [ 440.416253] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 440.423532] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 440.430809] R10: 000000000000a10a R11: 0000000000000246 R12: 00007f3befc306d4 [ 440.430819] R13: 00000000004c3e42 R14: 00000000004d6c90 R15: 0000000000000006 07:25:40 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:40 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'w,dno'}}) 07:25:40 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:40 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)) ioctl$sock_proto_private(r0, 0x894c, 0x0) vmsplice(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)="741ce5734f", 0x5}, {&(0x7f0000000080)="118a23776257ead7f1737943d9338fe06fa1b308da4faba7ba79dad8bc7abae786793ee3cee3f6220beb69b964ba7f1373ae191e451b5bccd256231c8661c7ec5d3cf029157460f4654414b5d613f10ab1841ea504a96601cf23ac0d394b691e18c673eb615e044d5e8037b453b8aca9eb35e2003aa5702543b69dcf3c53884beceadfe9d951672ae9f9eb4612812709e0d0604d34e9124e5fa68e5fb5be33a0cb9ca4a4d373f2da3966d75df97a5bb78d1d4e8f917eb9ad18484f3fe1c18287f73c3e04260d838bf6685abbb3db9638ee3cf73ec0d8ab4b4ea43ee3fc5d5df101930c377e73eff56f620aba86d3", 0xee}, {&(0x7f0000000180)="6023b39dae321ad35716290fa07f03659a70b9447c0638eca98cbbbd18b6a1a910b0f41c5c7aeed08e7a1f0312c2efc6b7", 0x31}, {&(0x7f00000001c0)="43a415d7b3002b34dd4e3a43279d476578f054218ea18a2ce2c93eac9cc8137081ceb8cc5dcd86539d540301c5bb7411b338d36273e4017d253ba6c34ac962aa0df33ec0fcb44e251b10365151627e1a632c28f4a69e14068c88f4c67fb5300c50e9bf5246e84c440720972278fd410b832b996d4e33dba3c3914f3f03a98103191f590f64ffb8dfc75de80557487724acd768e92a80fee8628e0d41c6fe6385a8420ed04ec6aa6cee7ebfba9653473fd651befb7305481bf49a189f4b7f18aa8d5655799ca31cbe31dbc949ad37", 0xce}], 0x4, 0x1) 07:25:40 executing program 1 (fault-call:4 fault-nth:34): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) 07:25:40 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ff}}}) [ 440.621717] FAULT_INJECTION: forcing a failure. [ 440.621717] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 440.647983] 9pnet: Insufficient options for proto=fd [ 440.668107] CPU: 0 PID: 22246 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #161 [ 440.675488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 440.675497] Call Trace: [ 440.675525] dump_stack+0x244/0x39d [ 440.675553] ? dump_stack_print_info.cold.1+0x20/0x20 [ 440.675586] should_fail.cold.4+0xa/0x17 [ 440.675610] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 440.675629] ? is_bpf_text_address+0xac/0x170 [ 440.675647] ? zap_class+0x640/0x640 [ 440.675663] ? lock_downgrade+0x900/0x900 07:25:40 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'w.dno'}}) [ 440.675681] ? check_preemption_disabled+0x48/0x280 [ 440.675702] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 440.705623] ? kasan_check_read+0x11/0x20 [ 440.705640] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 440.705655] ? rcu_softirq_qs+0x20/0x20 [ 440.705674] ? find_held_lock+0x36/0x1c0 [ 440.745432] ? check_preemption_disabled+0x48/0x280 [ 440.750473] ? lock_release+0xa00/0xa00 [ 440.754463] ? perf_trace_sched_process_exec+0x860/0x860 [ 440.759942] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 440.765492] ? rcu_pm_notify+0xc0/0xc0 [ 440.769396] ? __might_sleep+0x95/0x190 [ 440.773386] __alloc_pages_nodemask+0x366/0xea0 [ 440.778093] ? iov_iter_get_pages_alloc+0x8ac/0x15a0 [ 440.781925] FAT-fs (loop4): bogus number of reserved sectors [ 440.783220] ? default_file_splice_read+0x1db/0xb20 [ 440.783233] ? do_splice_to+0x12e/0x190 [ 440.783255] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 440.789041] FAT-fs (loop4): Can't find a valid FAT filesystem [ 440.808934] ? check_preemption_disabled+0x48/0x280 [ 440.813988] ? rcu_pm_notify+0xc0/0xc0 [ 440.817895] ? __kmalloc_node+0x3c/0x70 07:25:40 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'w/dno'}}) [ 440.821909] ? __kmalloc_node+0x3c/0x70 [ 440.822217] 9pnet: Insufficient options for proto=fd [ 440.825911] ? rcu_read_lock_sched_held+0x14f/0x180 [ 440.825930] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 440.825972] alloc_pages_current+0x173/0x350 [ 440.846062] push_pipe+0x3ff/0x7a0 [ 440.849612] ? __kmalloc_node+0x50/0x70 [ 440.853624] iov_iter_get_pages_alloc+0x938/0x15a0 [ 440.858591] ? free_unref_page+0x6e0/0x960 [ 440.862842] ? copyin+0x100/0x100 [ 440.866306] ? trace_hardirqs_on+0xbd/0x310 07:25:40 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'w\ndno'}}) [ 440.870639] ? __put_page+0x122/0x190 [ 440.874446] ? trace_hardirqs_off_caller+0x310/0x310 [ 440.879566] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 440.882702] 9pnet: Insufficient options for proto=fd [ 440.885126] ? mark_free_pages+0x3c0/0x3c0 [ 440.885147] ? check_preemption_disabled+0x48/0x280 [ 440.885166] ? release_sock+0x1ec/0x2c0 [ 440.903499] ? __local_bh_enable_ip+0x160/0x260 [ 440.908178] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 440.913208] ? iov_iter_pipe+0xbb/0x2f0 [ 440.917203] default_file_splice_read+0x1db/0xb20 07:25:40 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'w\"dno'}}) [ 440.922083] ? iter_file_splice_write+0x1050/0x1050 [ 440.927126] ? __put_page+0x136/0x190 [ 440.930939] ? __put_compound_page+0xe0/0xe0 [ 440.935368] ? kernel_sendpage+0x9a/0xf0 [ 440.939449] ? generic_pipe_buf_release+0x1de/0x2b0 [ 440.939900] 9pnet: Insufficient options for proto=fd [ 440.944474] ? anon_pipe_buf_release+0x530/0x530 [ 440.944492] ? pipe_to_sendpage+0x2d8/0x400 [ 440.944517] ? __x32_compat_sys_execveat+0x140/0x140 [ 440.944533] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 440.944547] ? fsnotify+0x50e/0xef0 [ 440.944571] ? generic_pipe_buf_nosteal+0x10/0x10 [ 440.944590] ? fsnotify_first_mark+0x350/0x350 [ 440.982449] ? __fsnotify_parent+0xcc/0x430 [ 440.986792] ? __might_sleep+0x95/0x190 [ 440.990791] ? fsnotify+0xef0/0xef0 [ 440.994459] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 440.999507] ? selinux_file_permission+0x90/0x540 [ 441.000927] 9pnet: Insufficient options for proto=fd [ 441.004369] ? security_file_permission+0x1c2/0x220 [ 441.004392] ? iter_file_splice_write+0x1050/0x1050 [ 441.004408] do_splice_to+0x12e/0x190 07:25:40 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'w%dno'}}) [ 441.004429] splice_direct_to_actor+0x31c/0x9d0 [ 441.004451] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 441.033562] ? pipe_to_sendpage+0x400/0x400 [ 441.037903] ? do_splice_to+0x190/0x190 [ 441.041890] ? security_file_permission+0x1c2/0x220 [ 441.046925] ? rw_verify_area+0x118/0x360 [ 441.051099] do_splice_direct+0x2d4/0x420 [ 441.055265] ? splice_direct_to_actor+0x9d0/0x9d0 [ 441.058624] 9pnet: Insufficient options for proto=fd [ 441.060121] ? rw_verify_area+0x118/0x360 [ 441.060140] do_sendfile+0x62a/0xe20 07:25:40 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wf\nno'}}) [ 441.060165] ? do_compat_pwritev64+0x1c0/0x1c0 [ 441.077686] ? __sb_end_write+0xd9/0x110 [ 441.081801] ? fput+0x130/0x1a0 [ 441.085095] ? do_syscall_64+0x9a/0x820 [ 441.089089] ? do_syscall_64+0x9a/0x820 [ 441.093096] __x64_sys_sendfile64+0x1fd/0x250 [ 441.097603] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 441.102204] do_syscall_64+0x1b9/0x820 [ 441.106094] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 441.111469] ? syscall_return_slowpath+0x5e0/0x5e0 [ 441.115220] 9pnet: Insufficient options for proto=fd [ 441.116401] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 441.116435] ? trace_hardirqs_on_caller+0x310/0x310 [ 441.116452] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 441.116471] ? prepare_exit_to_usermode+0x291/0x3b0 [ 441.141437] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 441.146332] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 441.151521] RIP: 0033:0x457669 [ 441.154702] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 441.173595] RSP: 002b:00007f3befc2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 441.181289] RAX: ffffffffffffffda RBX: 00007f3befc2fc90 RCX: 0000000000457669 [ 441.188545] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 441.195803] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 441.203059] R10: 000000000000a10a R11: 0000000000000246 R12: 00007f3befc306d4 [ 441.210311] R13: 00000000004c3e42 R14: 00000000004d6c90 R15: 0000000000000006 [ 441.292810] FAT-fs (loop4): bogus number of reserved sectors [ 441.298812] FAT-fs (loop4): Can't find a valid FAT filesystem 07:25:40 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}}}) 07:25:40 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wf\"no'}}) 07:25:40 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:40 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) ioctl$sock_proto_private(r0, 0x894c, 0x0) 07:25:40 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:40 executing program 1 (fault-call:4 fault-nth:35): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) 07:25:41 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 441.442441] 9pnet: Insufficient options for proto=fd [ 441.449921] FAULT_INJECTION: forcing a failure. [ 441.449921] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 441.475016] FAT-fs (loop4): bogus number of reserved sectors 07:25:41 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)={0x2}) socketpair$unix(0x1, 0x8000400000000001, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x8000000c, 0x1, &(0x7f0000000080)=[{&(0x7f00000001c0)="cefaad1b", 0x4}], 0x0, 0x0) ioctl$sock_proto_private(r0, 0x894c, 0x0) [ 441.492850] FAT-fs (loop4): Can't find a valid FAT filesystem [ 441.500494] CPU: 1 PID: 22293 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #161 [ 441.507890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 441.517247] Call Trace: [ 441.519871] dump_stack+0x244/0x39d [ 441.523517] ? dump_stack_print_info.cold.1+0x20/0x20 [ 441.528751] should_fail.cold.4+0xa/0x17 [ 441.532877] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 441.537997] ? is_bpf_text_address+0xac/0x170 [ 441.542505] ? zap_class+0x640/0x640 [ 441.546238] ? lock_downgrade+0x900/0x900 [ 441.550399] ? check_preemption_disabled+0x48/0x280 [ 441.555427] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 441.560642] ? kasan_check_read+0x11/0x20 [ 441.564808] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 441.570098] ? rcu_softirq_qs+0x20/0x20 [ 441.574093] ? find_held_lock+0x36/0x1c0 [ 441.578171] ? common_timer_create+0x20/0x50 [ 441.582599] ? check_preemption_disabled+0x48/0x280 [ 441.587628] ? lock_release+0xa00/0xa00 [ 441.591619] ? perf_trace_sched_process_exec+0x860/0x860 [ 441.597079] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 441.602628] ? rcu_pm_notify+0xc0/0xc0 [ 441.606531] ? __might_sleep+0x95/0x190 [ 441.610526] __alloc_pages_nodemask+0x366/0xea0 [ 441.615213] ? iov_iter_get_pages_alloc+0x8ac/0x15a0 [ 441.620330] ? default_file_splice_read+0x1db/0xb20 [ 441.625376] ? do_splice_to+0x12e/0x190 [ 441.629394] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 441.634457] ? check_preemption_disabled+0x48/0x280 [ 441.634482] ? rcu_pm_notify+0xc0/0xc0 [ 441.634502] ? __kmalloc_node+0x3c/0x70 [ 441.643433] ? __kmalloc_node+0x3c/0x70 [ 441.643450] ? rcu_read_lock_sched_held+0x14f/0x180 [ 441.643468] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 441.643490] alloc_pages_current+0x173/0x350 [ 441.643511] push_pipe+0x3ff/0x7a0 [ 441.643524] ? __kmalloc_node+0x50/0x70 [ 441.643553] iov_iter_get_pages_alloc+0x938/0x15a0 [ 441.651497] ? free_unref_page+0x6e0/0x960 [ 441.651519] ? copyin+0x100/0x100 [ 441.651541] ? trace_hardirqs_on+0xbd/0x310 [ 441.651559] ? __put_page+0x122/0x190 [ 441.651575] ? trace_hardirqs_off_caller+0x310/0x310 [ 441.651595] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 441.651618] ? mark_free_pages+0x3c0/0x3c0 [ 441.662149] ? check_preemption_disabled+0x48/0x280 [ 441.662166] ? release_sock+0x1ec/0x2c0 [ 441.662187] ? __local_bh_enable_ip+0x160/0x260 [ 441.662203] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 441.662219] ? iov_iter_pipe+0xbb/0x2f0 [ 441.662260] default_file_splice_read+0x1db/0xb20 [ 441.662288] ? iter_file_splice_write+0x1050/0x1050 [ 441.670205] ? __put_page+0x136/0x190 [ 441.670224] ? __put_compound_page+0xe0/0xe0 [ 441.670243] ? kernel_sendpage+0x9a/0xf0 [ 441.670269] ? generic_pipe_buf_release+0x1de/0x2b0 [ 441.670286] ? anon_pipe_buf_release+0x530/0x530 [ 441.670307] ? pipe_to_sendpage+0x2d8/0x400 [ 441.679211] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 441.679227] ? fsnotify+0x50e/0xef0 [ 441.679254] ? generic_pipe_buf_nosteal+0x10/0x10 [ 441.679272] ? fsnotify_first_mark+0x350/0x350 [ 441.679292] ? __fsnotify_parent+0xcc/0x430 [ 441.791570] ? __might_sleep+0x95/0x190 [ 441.795580] ? fsnotify+0xef0/0xef0 [ 441.799227] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 441.804254] ? selinux_file_permission+0x90/0x540 [ 441.809114] ? security_file_permission+0x1c2/0x220 [ 441.814159] ? iter_file_splice_write+0x1050/0x1050 [ 441.815993] 9pnet: Insufficient options for proto=fd [ 441.819228] do_splice_to+0x12e/0x190 [ 441.819248] splice_direct_to_actor+0x31c/0x9d0 [ 441.819263] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 441.819281] ? pipe_to_sendpage+0x400/0x400 [ 441.819302] ? do_splice_to+0x190/0x190 [ 441.819321] ? security_file_permission+0x1c2/0x220 [ 441.851674] ? rw_verify_area+0x118/0x360 [ 441.855877] do_splice_direct+0x2d4/0x420 [ 441.860028] ? splice_direct_to_actor+0x9d0/0x9d0 [ 441.860065] ? rw_verify_area+0x118/0x360 [ 441.860083] do_sendfile+0x62a/0xe20 [ 441.860105] ? do_compat_pwritev64+0x1c0/0x1c0 [ 441.877404] ? __sb_end_write+0xd9/0x110 [ 441.881483] ? fput+0x130/0x1a0 [ 441.884818] ? do_syscall_64+0x9a/0x820 [ 441.888819] ? do_syscall_64+0x9a/0x820 [ 441.892818] __x64_sys_sendfile64+0x1fd/0x250 [ 441.897323] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 441.901925] do_syscall_64+0x1b9/0x820 [ 441.905834] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 441.911208] ? syscall_return_slowpath+0x5e0/0x5e0 [ 441.916181] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 441.921036] ? trace_hardirqs_on_caller+0x310/0x310 [ 441.926066] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 441.931099] ? prepare_exit_to_usermode+0x291/0x3b0 [ 441.936131] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 441.940993] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 441.946210] RIP: 0033:0x457669 [ 441.949414] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 441.968336] RSP: 002b:00007f3befc2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 441.976064] RAX: ffffffffffffffda RBX: 00007f3befc2fc90 RCX: 0000000000457669 [ 441.983380] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 07:25:41 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wf%no'}}) 07:25:41 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffffffffffff}}}) 07:25:41 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:41 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ffffffffffffff}}}) 07:25:41 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wf,no'}}) 07:25:41 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffe7]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:41 executing program 1 (fault-call:4 fault-nth:36): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) 07:25:41 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfd\no'}}) [ 441.990656] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 441.997930] R10: 000000000000a10a R11: 0000000000000246 R12: 00007f3befc306d4 [ 442.005202] R13: 00000000004c3e42 R14: 00000000004d6c90 R15: 0000000000000006 [ 442.023013] 9pnet: Insufficient options for proto=fd [ 442.057867] FAT-fs (loop4): bogus number of reserved sectors [ 442.071344] FAT-fs (loop4): Can't find a valid FAT filesystem [ 442.077682] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 442.109234] BFS-fs: bfs_fill_super(): Superblock is corrupted [ 442.148067] 9pnet: Insufficient options for proto=fd [ 442.175589] FAULT_INJECTION: forcing a failure. [ 442.175589] name fail_page_alloc, interval 1, probability 0, space 0, times 0 07:25:41 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:41 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}}) [ 442.218935] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 442.241763] BFS-fs: bfs_fill_super(): Superblock is corrupted [ 442.267748] CPU: 0 PID: 22344 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #161 [ 442.275152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 442.284509] Call Trace: [ 442.287107] dump_stack+0x244/0x39d [ 442.290741] ? dump_stack_print_info.cold.1+0x20/0x20 [ 442.295955] should_fail.cold.4+0xa/0x17 [ 442.300018] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 442.305126] ? is_bpf_text_address+0xac/0x170 [ 442.309654] ? zap_class+0x640/0x640 [ 442.313371] ? lock_downgrade+0x900/0x900 [ 442.317527] ? check_preemption_disabled+0x48/0x280 [ 442.322549] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 442.327482] ? kasan_check_read+0x11/0x20 [ 442.331629] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 442.336905] ? rcu_softirq_qs+0x20/0x20 [ 442.340901] ? find_held_lock+0x36/0x1c0 [ 442.345008] ? check_preemption_disabled+0x48/0x280 [ 442.350032] ? lock_release+0xa00/0xa00 [ 442.354014] ? perf_trace_sched_process_exec+0x860/0x860 [ 442.359471] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 442.365011] ? rcu_pm_notify+0xc0/0xc0 [ 442.368925] ? __might_sleep+0x95/0x190 [ 442.373017] __alloc_pages_nodemask+0x366/0xea0 [ 442.377695] ? iov_iter_get_pages_alloc+0x8ac/0x15a0 [ 442.382816] ? default_file_splice_read+0x1db/0xb20 [ 442.387829] ? do_splice_to+0x12e/0x190 [ 442.391825] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 442.396848] ? check_preemption_disabled+0x48/0x280 [ 442.401874] ? rcu_pm_notify+0xc0/0xc0 [ 442.405769] ? __kmalloc_node+0x3c/0x70 [ 442.409748] ? __kmalloc_node+0x3c/0x70 [ 442.413739] ? rcu_read_lock_sched_held+0x14f/0x180 [ 442.418757] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 442.424312] alloc_pages_current+0x173/0x350 [ 442.428727] push_pipe+0x3ff/0x7a0 [ 442.432267] ? __kmalloc_node+0x50/0x70 [ 442.436249] iov_iter_get_pages_alloc+0x938/0x15a0 [ 442.441209] ? free_unref_page+0x6e0/0x960 [ 442.445453] ? copyin+0x100/0x100 [ 442.448911] ? trace_hardirqs_on+0xbd/0x310 [ 442.453233] ? __put_page+0x122/0x190 [ 442.457056] ? trace_hardirqs_off_caller+0x310/0x310 [ 442.462168] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 442.467716] ? mark_free_pages+0x3c0/0x3c0 [ 442.471958] ? check_preemption_disabled+0x48/0x280 [ 442.476978] ? release_sock+0x1ec/0x2c0 [ 442.480959] ? __local_bh_enable_ip+0x160/0x260 [ 442.485630] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 442.490649] ? iov_iter_pipe+0xbb/0x2f0 [ 442.494667] default_file_splice_read+0x1db/0xb20 [ 442.499521] ? iter_file_splice_write+0x1050/0x1050 [ 442.504538] ? __put_page+0x136/0x190 [ 442.508392] ? __put_compound_page+0xe0/0xe0 [ 442.512808] ? kernel_sendpage+0x9a/0xf0 [ 442.516876] ? generic_pipe_buf_release+0x1de/0x2b0 [ 442.521892] ? anon_pipe_buf_release+0x530/0x530 [ 442.526661] ? pipe_to_sendpage+0x2d8/0x400 [ 442.530992] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 442.536527] ? fsnotify+0x50e/0xef0 [ 442.540160] ? generic_pipe_buf_nosteal+0x10/0x10 [ 442.545018] ? fsnotify_first_mark+0x350/0x350 [ 442.549599] ? __fsnotify_parent+0xcc/0x430 [ 442.553926] ? __might_sleep+0x95/0x190 [ 442.557906] ? fsnotify+0xef0/0xef0 [ 442.561540] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 442.566573] ? selinux_file_permission+0x90/0x540 [ 442.571423] ? security_file_permission+0x1c2/0x220 [ 442.576449] ? iter_file_splice_write+0x1050/0x1050 [ 442.581466] do_splice_to+0x12e/0x190 [ 442.585272] splice_direct_to_actor+0x31c/0x9d0 [ 442.589941] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 442.595495] ? pipe_to_sendpage+0x400/0x400 [ 442.599823] ? do_splice_to+0x190/0x190 [ 442.603814] ? security_file_permission+0x1c2/0x220 [ 442.608839] ? rw_verify_area+0x118/0x360 [ 442.612999] do_splice_direct+0x2d4/0x420 [ 442.617159] ? splice_direct_to_actor+0x9d0/0x9d0 [ 442.622013] ? rw_verify_area+0x118/0x360 [ 442.626170] do_sendfile+0x62a/0xe20 [ 442.629911] ? do_compat_pwritev64+0x1c0/0x1c0 [ 442.634501] ? __sb_end_write+0xd9/0x110 [ 442.638573] ? fput+0x130/0x1a0 [ 442.641855] ? do_syscall_64+0x9a/0x820 [ 442.645831] ? do_syscall_64+0x9a/0x820 [ 442.649815] __x64_sys_sendfile64+0x1fd/0x250 [ 442.654328] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 442.658922] do_syscall_64+0x1b9/0x820 [ 442.662814] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 442.668180] ? syscall_return_slowpath+0x5e0/0x5e0 [ 442.673115] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 442.677963] ? trace_hardirqs_on_caller+0x310/0x310 [ 442.682981] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 442.687998] ? prepare_exit_to_usermode+0x291/0x3b0 [ 442.693046] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 442.697902] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 442.703092] RIP: 0033:0x457669 07:25:42 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfd\"o'}}) [ 442.706344] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 442.725244] RSP: 002b:00007f3befc2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 442.732953] RAX: ffffffffffffffda RBX: 00007f3befc2fc90 RCX: 0000000000457669 [ 442.740217] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 442.747499] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 442.754787] R10: 000000000000a10a R11: 0000000000000246 R12: 00007f3befc306d4 [ 442.762061] R13: 00000000004c3e42 R14: 00000000004d6c90 R15: 0000000000000006 [ 442.853900] FAT-fs (loop4): bogus number of reserved sectors [ 442.858260] 9pnet: Insufficient options for proto=fd [ 442.859721] FAT-fs (loop4): Can't find a valid FAT filesystem 07:25:42 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x40, 0x0) connect$llc(r1, &(0x7f0000000080)={0x1a, 0x18, 0xd98, 0x7, 0x2, 0xffffffff}, 0x10) setrlimit(0x408000000000007, &(0x7f0000000000)) ioctl$sock_proto_private(r0, 0x894c, 0x0) 07:25:42 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b6b6b00]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:42 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}) 07:25:42 executing program 1 (fault-call:4 fault-nth:37): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) 07:25:42 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfd%o'}}) [ 442.944650] FAT-fs (loop4): bogus number of reserved sectors [ 442.955856] FAT-fs (loop4): Can't find a valid FAT filesystem [ 443.009492] 9pnet: Insufficient options for proto=fd 07:25:42 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfd,o'}}) [ 443.054168] FAULT_INJECTION: forcing a failure. [ 443.054168] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 443.067168] CPU: 1 PID: 22381 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #161 [ 443.074545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 443.083904] Call Trace: [ 443.086527] dump_stack+0x244/0x39d [ 443.090180] ? dump_stack_print_info.cold.1+0x20/0x20 [ 443.095400] should_fail.cold.4+0xa/0x17 [ 443.099479] ? fault_create_debugfs_attr+0x1f0/0x1f0 07:25:42 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:42 executing program 3: r0 = socket$unix(0x1, 0x23, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000040)={'\x00', {0x2, 0x4e24, @multicast2}}) setrlimit(0x408000000000007, &(0x7f0000000000)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000140)={0x0, 0x80000}) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/mls\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000001c0)={r2, 0x80000, r3}) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000200)=0x4, 0x4) ioctl$sock_proto_private(r0, 0x894c, 0x0) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$EVIOCGBITKEY(r4, 0x80404521, &(0x7f00000000c0)=""/3) 07:25:42 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:42 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ffffff}}}) [ 443.104639] ? is_bpf_text_address+0xac/0x170 [ 443.109172] ? zap_class+0x640/0x640 [ 443.112914] ? lock_downgrade+0x900/0x900 [ 443.117100] ? check_preemption_disabled+0x48/0x280 [ 443.122121] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 443.127038] ? kasan_check_read+0x11/0x20 [ 443.131179] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 443.136453] ? rcu_softirq_qs+0x20/0x20 [ 443.140418] ? find_held_lock+0x36/0x1c0 [ 443.144517] ? check_preemption_disabled+0x48/0x280 [ 443.149554] ? lock_release+0xa00/0xa00 [ 443.153528] ? perf_trace_sched_process_exec+0x860/0x860 [ 443.158968] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 443.164509] ? rcu_pm_notify+0xc0/0xc0 [ 443.168408] ? __might_sleep+0x95/0x190 [ 443.172400] __alloc_pages_nodemask+0x366/0xea0 [ 443.177069] ? iov_iter_get_pages_alloc+0x8ac/0x15a0 [ 443.182156] ? default_file_splice_read+0x1db/0xb20 [ 443.187169] ? do_splice_to+0x12e/0x190 [ 443.191130] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 443.196139] ? check_preemption_disabled+0x48/0x280 [ 443.201142] ? rcu_pm_notify+0xc0/0xc0 [ 443.205027] ? __kmalloc_node+0x3c/0x70 [ 443.208988] ? __kmalloc_node+0x3c/0x70 [ 443.212947] ? rcu_read_lock_sched_held+0x14f/0x180 [ 443.217946] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 443.223581] alloc_pages_current+0x173/0x350 [ 443.227978] push_pipe+0x3ff/0x7a0 [ 443.231500] ? __kmalloc_node+0x50/0x70 [ 443.235476] iov_iter_get_pages_alloc+0x938/0x15a0 [ 443.240465] ? free_unref_page+0x6e0/0x960 [ 443.244687] ? copyin+0x100/0x100 [ 443.248128] ? trace_hardirqs_on+0xbd/0x310 [ 443.252443] ? __put_page+0x122/0x190 [ 443.256227] ? trace_hardirqs_off_caller+0x310/0x310 [ 443.261315] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 443.266845] ? mark_free_pages+0x3c0/0x3c0 [ 443.271078] ? check_preemption_disabled+0x48/0x280 [ 443.276087] ? release_sock+0x1ec/0x2c0 [ 443.280100] ? __local_bh_enable_ip+0x160/0x260 [ 443.284770] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 443.289791] ? iov_iter_pipe+0xbb/0x2f0 [ 443.293793] default_file_splice_read+0x1db/0xb20 [ 443.298629] ? iter_file_splice_write+0x1050/0x1050 [ 443.303643] ? __put_page+0x136/0x190 [ 443.307436] ? __put_compound_page+0xe0/0xe0 [ 443.311850] ? kernel_sendpage+0x9a/0xf0 [ 443.315903] ? generic_pipe_buf_release+0x1de/0x2b0 [ 443.320915] ? anon_pipe_buf_release+0x530/0x530 [ 443.325657] ? pipe_to_sendpage+0x2d8/0x400 [ 443.329972] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 443.335497] ? fsnotify+0x50e/0xef0 [ 443.339114] ? generic_pipe_buf_nosteal+0x10/0x10 [ 443.343943] ? fsnotify_first_mark+0x350/0x350 [ 443.348531] ? __fsnotify_parent+0xcc/0x430 [ 443.352855] ? __might_sleep+0x95/0x190 [ 443.356817] ? fsnotify+0xef0/0xef0 [ 443.360520] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 443.365529] ? selinux_file_permission+0x90/0x540 [ 443.370372] ? security_file_permission+0x1c2/0x220 [ 443.375380] ? iter_file_splice_write+0x1050/0x1050 [ 443.380386] do_splice_to+0x12e/0x190 [ 443.384180] splice_direct_to_actor+0x31c/0x9d0 [ 443.388838] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 443.394362] ? pipe_to_sendpage+0x400/0x400 [ 443.398688] ? do_splice_to+0x190/0x190 [ 443.402649] ? security_file_permission+0x1c2/0x220 [ 443.407651] ? rw_verify_area+0x118/0x360 [ 443.411794] do_splice_direct+0x2d4/0x420 [ 443.415939] ? splice_direct_to_actor+0x9d0/0x9d0 [ 443.420794] ? rw_verify_area+0x118/0x360 [ 443.424962] do_sendfile+0x62a/0xe20 [ 443.428696] ? do_compat_pwritev64+0x1c0/0x1c0 [ 443.433266] ? __sb_end_write+0xd9/0x110 [ 443.437324] ? fput+0x130/0x1a0 [ 443.440603] ? do_syscall_64+0x9a/0x820 [ 443.444579] ? do_syscall_64+0x9a/0x820 [ 443.448559] __x64_sys_sendfile64+0x1fd/0x250 [ 443.453065] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 443.457650] do_syscall_64+0x1b9/0x820 [ 443.461521] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 443.466874] ? syscall_return_slowpath+0x5e0/0x5e0 [ 443.471794] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 443.476620] ? trace_hardirqs_on_caller+0x310/0x310 [ 443.481618] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 443.486639] ? prepare_exit_to_usermode+0x291/0x3b0 [ 443.491642] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 443.496472] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 443.501646] RIP: 0033:0x457669 [ 443.504837] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 443.523736] RSP: 002b:00007f3befc2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 443.531428] RAX: ffffffffffffffda RBX: 00007f3befc2fc90 RCX: 0000000000457669 [ 443.538683] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 443.545942] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 07:25:43 executing program 1 (fault-call:4 fault-nth:38): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) [ 443.553201] R10: 000000000000a10a R11: 0000000000000246 R12: 00007f3befc306d4 [ 443.560466] R13: 00000000004c3e42 R14: 00000000004d6c90 R15: 0000000000000006 [ 443.586282] 9pnet: Insufficient options for proto=fd [ 443.593196] 9pnet: Insufficient options for proto=fd 07:25:43 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdn\"'}}) 07:25:43 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfd}}}) [ 443.717819] FAT-fs (loop4): bogus number of reserved sectors [ 443.718867] FAULT_INJECTION: forcing a failure. [ 443.718867] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 443.743305] FAT-fs (loop4): Can't find a valid FAT filesystem [ 443.771341] CPU: 0 PID: 22398 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #161 [ 443.778738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 443.788105] Call Trace: [ 443.790721] dump_stack+0x244/0x39d [ 443.794368] ? dump_stack_print_info.cold.1+0x20/0x20 [ 443.799579] should_fail.cold.4+0xa/0x17 [ 443.803664] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 443.808809] ? is_bpf_text_address+0xac/0x170 [ 443.810455] 9pnet: Insufficient options for proto=fd [ 443.813318] ? zap_class+0x640/0x640 [ 443.813335] ? lock_downgrade+0x900/0x900 [ 443.813353] ? check_preemption_disabled+0x48/0x280 [ 443.813373] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 443.813390] ? kasan_check_read+0x11/0x20 [ 443.813410] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 443.845690] ? rcu_softirq_qs+0x20/0x20 [ 443.849702] ? find_held_lock+0x36/0x1c0 [ 443.853803] ? check_preemption_disabled+0x48/0x280 [ 443.858835] ? lock_release+0xa00/0xa00 [ 443.862825] ? perf_trace_sched_process_exec+0x860/0x860 07:25:43 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdn%'}}) [ 443.868297] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 443.873859] ? rcu_pm_notify+0xc0/0xc0 [ 443.877791] ? __might_sleep+0x95/0x190 [ 443.878891] 9pnet: Insufficient options for proto=fd [ 443.881806] __alloc_pages_nodemask+0x366/0xea0 [ 443.881825] ? iov_iter_get_pages_alloc+0x8ac/0x15a0 [ 443.881839] ? default_file_splice_read+0x1db/0xb20 [ 443.881852] ? do_splice_to+0x12e/0x190 [ 443.881887] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 443.881911] ? check_preemption_disabled+0x48/0x280 [ 443.915758] ? rcu_pm_notify+0xc0/0xc0 07:25:43 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdn,'}}) [ 443.919666] ? __kmalloc_node+0x3c/0x70 [ 443.923652] ? __kmalloc_node+0x3c/0x70 [ 443.927674] ? rcu_read_lock_sched_held+0x14f/0x180 [ 443.932715] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 443.938273] alloc_pages_current+0x173/0x350 [ 443.942698] push_pipe+0x3ff/0x7a0 [ 443.946249] ? __kmalloc_node+0x50/0x70 [ 443.950244] iov_iter_get_pages_alloc+0x938/0x15a0 [ 443.955187] ? free_unref_page+0x6e0/0x960 [ 443.959438] ? copyin+0x100/0x100 [ 443.962904] ? trace_hardirqs_on+0xbd/0x310 [ 443.963812] 9pnet: Insufficient options for proto=fd 07:25:43 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdn\n'}}) [ 443.967232] ? __put_page+0x122/0x190 [ 443.967250] ? trace_hardirqs_off_caller+0x310/0x310 [ 443.967271] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 443.967299] ? mark_free_pages+0x3c0/0x3c0 [ 443.991055] ? check_preemption_disabled+0x48/0x280 [ 443.996081] ? release_sock+0x1ec/0x2c0 [ 444.000074] ? __local_bh_enable_ip+0x160/0x260 [ 444.004761] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 444.009824] ? iov_iter_pipe+0xbb/0x2f0 [ 444.013824] default_file_splice_read+0x1db/0xb20 07:25:43 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7}}}) [ 444.018710] ? iter_file_splice_write+0x1050/0x1050 [ 444.023759] ? __put_page+0x136/0x190 [ 444.027604] ? __put_compound_page+0xe0/0xe0 [ 444.032026] ? kernel_sendpage+0x9a/0xf0 [ 444.036115] ? generic_pipe_buf_release+0x1de/0x2b0 [ 444.041146] ? anon_pipe_buf_release+0x530/0x530 [ 444.045915] ? pipe_to_sendpage+0x2d8/0x400 [ 444.050256] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 444.055830] ? fsnotify+0x50e/0xef0 [ 444.059501] ? generic_pipe_buf_nosteal+0x10/0x10 [ 444.064400] ? fsnotify_first_mark+0x350/0x350 [ 444.069024] ? __fsnotify_parent+0xcc/0x430 [ 444.073434] ? __might_sleep+0x95/0x190 [ 444.077423] ? fsnotify+0xef0/0xef0 [ 444.081109] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 444.083298] 9pnet: Insufficient options for proto=fd [ 444.086153] ? selinux_file_permission+0x90/0x540 [ 444.086178] ? security_file_permission+0x1c2/0x220 [ 444.086199] ? iter_file_splice_write+0x1050/0x1050 [ 444.086217] do_splice_to+0x12e/0x190 [ 444.109953] splice_direct_to_actor+0x31c/0x9d0 [ 444.114632] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 07:25:43 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}}) [ 444.120179] ? pipe_to_sendpage+0x400/0x400 [ 444.124536] ? do_splice_to+0x190/0x190 [ 444.128546] ? security_file_permission+0x1c2/0x220 [ 444.133574] ? rw_verify_area+0x118/0x360 [ 444.137753] do_splice_direct+0x2d4/0x420 [ 444.141930] ? splice_direct_to_actor+0x9d0/0x9d0 [ 444.146804] ? rw_verify_area+0x118/0x360 [ 444.150967] do_sendfile+0x62a/0xe20 [ 444.154719] ? do_compat_pwritev64+0x1c0/0x1c0 [ 444.159337] ? __sb_end_write+0xd9/0x110 [ 444.163422] ? fput+0x130/0x1a0 [ 444.166735] ? do_syscall_64+0x9a/0x820 [ 444.170730] ? do_syscall_64+0x9a/0x820 [ 444.174728] __x64_sys_sendfile64+0x1fd/0x250 [ 444.179228] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 444.183831] do_syscall_64+0x1b9/0x820 [ 444.187726] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 444.193103] ? syscall_return_slowpath+0x5e0/0x5e0 [ 444.198054] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 444.202912] ? trace_hardirqs_on_caller+0x310/0x310 [ 444.207939] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 444.212969] ? prepare_exit_to_usermode+0x291/0x3b0 [ 444.218002] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 444.222889] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 444.228097] RIP: 0033:0x457669 [ 444.231296] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 444.250427] RSP: 002b:00007f3befc2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 444.258157] RAX: ffffffffffffffda RBX: 00007f3befc2fc90 RCX: 0000000000457669 [ 444.265440] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 444.272698] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 444.279953] R10: 000000000000a10a R11: 0000000000000246 R12: 00007f3befc306d4 [ 444.287206] R13: 00000000004c3e42 R14: 00000000004d6c90 R15: 0000000000000006 [ 444.330705] FAT-fs (loop4): bogus number of reserved sectors [ 444.347381] FAT-fs (loop4): Can't find a valid FAT filesystem 07:25:44 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:44 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x2c}}) 07:25:44 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe7}}}) 07:25:44 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe7]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:44 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)) ioctl$sock_proto_private(r0, 0x2000894c, 0x0) 07:25:44 executing program 1 (fault-call:4 fault-nth:39): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) [ 444.476874] FAULT_INJECTION: forcing a failure. [ 444.476874] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 444.500771] 9pnet: Insufficient options for proto=fd [ 444.515131] CPU: 1 PID: 22443 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #161 [ 444.522518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 444.522546] Call Trace: [ 444.522572] dump_stack+0x244/0x39d [ 444.522597] ? dump_stack_print_info.cold.1+0x20/0x20 [ 444.522627] should_fail.cold.4+0xa/0x17 [ 444.547399] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 444.552518] ? is_bpf_text_address+0xac/0x170 [ 444.557030] ? zap_class+0x640/0x640 [ 444.560756] ? lock_downgrade+0x900/0x900 [ 444.560783] ? check_preemption_disabled+0x48/0x280 [ 444.560803] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 444.574914] ? kasan_check_read+0x11/0x20 [ 444.579112] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 444.584396] ? rcu_softirq_qs+0x20/0x20 [ 444.588386] ? find_held_lock+0x36/0x1c0 [ 444.588421] ? check_preemption_disabled+0x48/0x280 [ 444.597482] ? lock_release+0xa00/0xa00 [ 444.601471] ? perf_trace_sched_process_exec+0x860/0x860 [ 444.606936] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 444.606955] ? rcu_pm_notify+0xc0/0xc0 [ 444.606976] ? __might_sleep+0x95/0x190 [ 444.620357] __alloc_pages_nodemask+0x366/0xea0 [ 444.625043] ? iov_iter_get_pages_alloc+0x8ac/0x15a0 [ 444.630162] ? default_file_splice_read+0x1db/0xb20 [ 444.635196] ? do_splice_to+0x12e/0x190 [ 444.639236] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 444.644278] ? check_preemption_disabled+0x48/0x280 [ 444.649324] ? rcu_pm_notify+0xc0/0xc0 [ 444.653231] ? __kmalloc_node+0x3c/0x70 [ 444.657221] ? __kmalloc_node+0x3c/0x70 [ 444.661208] ? rcu_read_lock_sched_held+0x14f/0x180 [ 444.666244] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 444.671814] alloc_pages_current+0x173/0x350 [ 444.676244] push_pipe+0x3ff/0x7a0 [ 444.679803] ? __kmalloc_node+0x50/0x70 [ 444.683825] iov_iter_get_pages_alloc+0x938/0x15a0 [ 444.688786] ? free_unref_page+0x6e0/0x960 [ 444.693048] ? copyin+0x100/0x100 [ 444.696518] ? trace_hardirqs_on+0xbd/0x310 [ 444.700865] ? __put_page+0x122/0x190 [ 444.704692] ? trace_hardirqs_off_caller+0x310/0x310 [ 444.709821] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 444.715397] ? mark_free_pages+0x3c0/0x3c0 [ 444.719675] ? check_preemption_disabled+0x48/0x280 [ 444.724723] ? release_sock+0x1ec/0x2c0 [ 444.728714] ? __local_bh_enable_ip+0x160/0x260 [ 444.733409] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 444.738442] ? iov_iter_pipe+0xbb/0x2f0 [ 444.742433] default_file_splice_read+0x1db/0xb20 [ 444.742462] ? iter_file_splice_write+0x1050/0x1050 [ 444.742476] ? __put_page+0x136/0x190 [ 444.742508] ? __put_compound_page+0xe0/0xe0 [ 444.742528] ? kernel_sendpage+0x9a/0xf0 [ 444.764640] ? generic_pipe_buf_release+0x1de/0x2b0 [ 444.769671] ? anon_pipe_buf_release+0x530/0x530 [ 444.774460] ? pipe_to_sendpage+0x2d8/0x400 [ 444.778829] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 444.784382] ? fsnotify+0x50e/0xef0 [ 444.788026] ? generic_pipe_buf_nosteal+0x10/0x10 [ 444.792909] ? fsnotify_first_mark+0x350/0x350 [ 444.797501] ? __fsnotify_parent+0xcc/0x430 [ 444.801853] ? __might_sleep+0x95/0x190 [ 444.805851] ? fsnotify+0xef0/0xef0 [ 444.809496] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 444.814548] ? selinux_file_permission+0x90/0x540 [ 444.819414] ? security_file_permission+0x1c2/0x220 [ 444.824452] ? iter_file_splice_write+0x1050/0x1050 [ 444.829478] do_splice_to+0x12e/0x190 [ 444.833297] splice_direct_to_actor+0x31c/0x9d0 [ 444.837992] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 444.843552] ? pipe_to_sendpage+0x400/0x400 [ 444.847889] ? do_splice_to+0x190/0x190 [ 444.847905] ? security_file_permission+0x1c2/0x220 [ 444.847925] ? rw_verify_area+0x118/0x360 [ 444.847948] do_splice_direct+0x2d4/0x420 [ 444.856933] ? splice_direct_to_actor+0x9d0/0x9d0 [ 444.856958] ? rw_verify_area+0x118/0x360 [ 444.856982] do_sendfile+0x62a/0xe20 [ 444.877960] ? do_compat_pwritev64+0x1c0/0x1c0 [ 444.882562] ? __sb_end_write+0xd9/0x110 [ 444.882585] ? fput+0x130/0x1a0 [ 444.882603] ? do_syscall_64+0x9a/0x820 [ 444.882618] ? do_syscall_64+0x9a/0x820 [ 444.882646] __x64_sys_sendfile64+0x1fd/0x250 [ 444.902450] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 444.902479] do_syscall_64+0x1b9/0x820 [ 444.902495] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 444.902513] ? syscall_return_slowpath+0x5e0/0x5e0 [ 444.902530] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 444.902553] ? trace_hardirqs_on_caller+0x310/0x310 [ 444.931135] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 444.936169] ? prepare_exit_to_usermode+0x291/0x3b0 [ 444.941209] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 444.946083] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 444.947817] FAT-fs (loop4): bogus number of reserved sectors [ 444.951281] RIP: 0033:0x457669 [ 444.951299] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 07:25:44 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:44 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}}}) 07:25:44 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/cgroup\x00') r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x1400000, 0x420000) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000080)=0x1) setrlimit(0x408000000000007, &(0x7f0000000000)) ioctl$sock_proto_private(r0, 0x894c, 0x0) 07:25:44 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000}}}) 07:25:44 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0xa}}) [ 444.951308] RSP: 002b:00007f3befc2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 444.951323] RAX: ffffffffffffffda RBX: 00007f3befc2fc90 RCX: 0000000000457669 [ 444.951333] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 444.951342] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 444.951352] R10: 000000000000a10a R11: 0000000000000246 R12: 00007f3befc306d4 [ 444.951377] R13: 00000000004c3e42 R14: 00000000004d6c90 R15: 0000000000000006 07:25:44 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}}}) [ 444.983264] FAT-fs (loop4): Can't find a valid FAT filesystem [ 445.119802] FAT-fs (loop4): bogus number of reserved sectors [ 445.167722] 9pnet: Insufficient options for proto=fd [ 445.171741] FAT-fs (loop4): Can't find a valid FAT filesystem 07:25:44 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\xf4', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:44 executing program 3: r0 = socket$unix(0x1, 0x0, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)) ioctl$sock_proto_private(r0, 0x894c, 0x0) 07:25:44 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:44 executing program 1 (fault-call:4 fault-nth:40): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) 07:25:44 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe7}}}) 07:25:44 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x22}}) [ 445.299720] 9pnet: Insufficient options for proto=fd [ 445.309185] FAULT_INJECTION: forcing a failure. [ 445.309185] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 445.321328] CPU: 1 PID: 22501 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #161 [ 445.328722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 445.338096] Call Trace: [ 445.340710] dump_stack+0x244/0x39d [ 445.344351] ? dump_stack_print_info.cold.1+0x20/0x20 [ 445.349565] should_fail.cold.4+0xa/0x17 [ 445.353644] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 445.358763] ? is_bpf_text_address+0xac/0x170 [ 445.363285] ? zap_class+0x640/0x640 [ 445.363301] ? lock_downgrade+0x900/0x900 [ 445.363317] ? check_preemption_disabled+0x48/0x280 [ 445.363340] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 445.381161] ? kasan_check_read+0x11/0x20 [ 445.385351] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 445.390653] ? rcu_softirq_qs+0x20/0x20 [ 445.394643] ? find_held_lock+0x36/0x1c0 [ 445.398729] ? check_preemption_disabled+0x48/0x280 [ 445.403761] ? lock_release+0xa00/0xa00 [ 445.407750] ? perf_trace_sched_process_exec+0x860/0x860 [ 445.413217] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 445.418768] ? rcu_pm_notify+0xc0/0xc0 [ 445.422701] ? __might_sleep+0x95/0x190 [ 445.426691] __alloc_pages_nodemask+0x366/0xea0 [ 445.426710] ? iov_iter_get_pages_alloc+0x8ac/0x15a0 [ 445.426729] ? default_file_splice_read+0x1db/0xb20 [ 445.436475] ? do_splice_to+0x12e/0x190 [ 445.436494] ? __alloc_pages_slowpath+0x2de0/0x2de0 07:25:44 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b6b6b00000000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:45 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:45 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 445.436516] ? check_preemption_disabled+0x48/0x280 [ 445.455509] ? rcu_pm_notify+0xc0/0xc0 [ 445.459417] ? __kmalloc_node+0x3c/0x70 [ 445.463393] ? __kmalloc_node+0x3c/0x70 [ 445.467398] ? rcu_read_lock_sched_held+0x14f/0x180 [ 445.472434] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 445.477998] alloc_pages_current+0x173/0x350 [ 445.482473] push_pipe+0x3ff/0x7a0 [ 445.486031] ? __kmalloc_node+0x50/0x70 [ 445.490034] iov_iter_get_pages_alloc+0x938/0x15a0 [ 445.494987] ? free_unref_page+0x6e0/0x960 [ 445.499247] ? copyin+0x100/0x100 [ 445.502709] ? trace_hardirqs_on+0xbd/0x310 [ 445.502726] ? __put_page+0x122/0x190 [ 445.502743] ? trace_hardirqs_off_caller+0x310/0x310 [ 445.502762] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 445.510900] ? mark_free_pages+0x3c0/0x3c0 [ 445.525730] ? check_preemption_disabled+0x48/0x280 [ 445.530787] ? release_sock+0x1ec/0x2c0 [ 445.534828] ? __local_bh_enable_ip+0x160/0x260 [ 445.539532] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 445.544592] ? iov_iter_pipe+0xbb/0x2f0 07:25:45 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 445.548601] default_file_splice_read+0x1db/0xb20 [ 445.553464] ? iter_file_splice_write+0x1050/0x1050 [ 445.558607] ? __put_page+0x136/0x190 [ 445.562424] ? __put_compound_page+0xe0/0xe0 [ 445.566845] ? kernel_sendpage+0x9a/0xf0 [ 445.570960] ? generic_pipe_buf_release+0x1de/0x2b0 [ 445.575991] ? anon_pipe_buf_release+0x530/0x530 [ 445.580760] ? pipe_to_sendpage+0x2d8/0x400 [ 445.585115] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 445.590663] ? fsnotify+0x50e/0xef0 [ 445.594313] ? generic_pipe_buf_nosteal+0x10/0x10 07:25:45 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 445.599174] ? fsnotify_first_mark+0x350/0x350 [ 445.603761] ? __fsnotify_parent+0xcc/0x430 [ 445.608103] ? __might_sleep+0x95/0x190 [ 445.612084] ? fsnotify+0xef0/0xef0 [ 445.615728] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 445.620772] ? selinux_file_permission+0x90/0x540 [ 445.625646] ? security_file_permission+0x1c2/0x220 [ 445.630682] ? iter_file_splice_write+0x1050/0x1050 [ 445.635720] do_splice_to+0x12e/0x190 [ 445.639543] splice_direct_to_actor+0x31c/0x9d0 [ 445.644240] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 07:25:45 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 445.649802] ? pipe_to_sendpage+0x400/0x400 [ 445.654144] ? do_splice_to+0x190/0x190 [ 445.658125] ? security_file_permission+0x1c2/0x220 [ 445.663162] ? rw_verify_area+0x118/0x360 [ 445.667331] do_splice_direct+0x2d4/0x420 [ 445.671493] ? splice_direct_to_actor+0x9d0/0x9d0 [ 445.676354] ? rw_verify_area+0x118/0x360 [ 445.680514] do_sendfile+0x62a/0xe20 [ 445.684253] ? do_compat_pwritev64+0x1c0/0x1c0 [ 445.688856] ? __sb_end_write+0xd9/0x110 [ 445.692937] ? fput+0x130/0x1a0 [ 445.696227] ? do_syscall_64+0x9a/0x820 [ 445.700244] ? do_syscall_64+0x9a/0x820 [ 445.704277] __x64_sys_sendfile64+0x1fd/0x250 [ 445.708813] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 445.713406] do_syscall_64+0x1b9/0x820 [ 445.717285] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 445.722634] ? syscall_return_slowpath+0x5e0/0x5e0 [ 445.727555] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 445.732400] ? trace_hardirqs_on_caller+0x310/0x310 [ 445.737422] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 445.742434] ? prepare_exit_to_usermode+0x291/0x3b0 [ 445.747471] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 445.752300] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 445.757472] RIP: 0033:0x457669 [ 445.760650] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 445.779542] RSP: 002b:00007f3befc2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 445.787244] RAX: ffffffffffffffda RBX: 00007f3befc2fc90 RCX: 0000000000457669 [ 445.794510] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 445.801784] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 445.809056] R10: 000000000000a10a R11: 0000000000000246 R12: 00007f3befc306d4 [ 445.816312] R13: 00000000004c3e42 R14: 00000000004d6c90 R15: 0000000000000006 07:25:45 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x05', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:45 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:45 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f00000000c0)={0x0, 0xfb, 0xc5, 0x1, 0x81, "3d6d97ee8b387462bcd4e713541a171f", "a95a912d1c68aa1378a28841c3c5e763ab86ab5b2fd244a10aacb8656cfdda167873eb616e8e3539dd35763e19587a45ea5bb9c0fbbacff8fccb6297aa21e7576b8c62b8c6094e161946be4cd79aa95265a8c6b5e88ce698c44c986bf40d7c1a20e919e3fcb60c020ff5438f87b3c5ee3eda03c183822f2a3b908d9ebf53bc1ea8dbea310a9653147f37c711f75c0d0251eedc8736e5603f89d3f9f855d289f2b520ccadba620a1f8c5ce2a7dc8ab0c4"}, 0xc5, 0x1) setrlimit(0x408000000000007, &(0x7f0000000000)) ioctl$sock_proto_private(r0, 0x894c, 0x0) 07:25:45 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x25}}) 07:25:45 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}}}) 07:25:45 executing program 1 (fault-call:4 fault-nth:41): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) [ 446.073150] 9pnet: Insufficient options for proto=fd [ 446.091465] FAULT_INJECTION: forcing a failure. [ 446.091465] name failslab, interval 1, probability 0, space 0, times 0 [ 446.111557] CPU: 0 PID: 22547 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #161 [ 446.118941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 446.128311] Call Trace: [ 446.130926] dump_stack+0x244/0x39d [ 446.134565] ? dump_stack_print_info.cold.1+0x20/0x20 [ 446.139764] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 446.144716] ? kasan_check_read+0x11/0x20 [ 446.148876] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 446.154169] should_fail.cold.4+0xa/0x17 [ 446.158245] ? find_held_lock+0x36/0x1c0 [ 446.162339] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 446.167460] ? check_preemption_disabled+0x48/0x280 [ 446.167487] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 446.167506] ? rcu_pm_notify+0xc0/0xc0 [ 446.178048] ? find_held_lock+0x36/0x1c0 [ 446.186015] ? perf_trace_sched_process_exec+0x860/0x860 [ 446.191506] ? check_preemption_disabled+0x48/0x280 [ 446.196541] __should_failslab+0x124/0x180 [ 446.200803] should_failslab+0x9/0x14 [ 446.204617] __kmalloc+0x2e0/0x760 [ 446.208168] ? __kmalloc_node+0x3c/0x70 [ 446.212156] ? __kmalloc_node+0x3c/0x70 [ 446.216144] ? rw_copy_check_uvector+0x364/0x3e0 [ 446.220917] rw_copy_check_uvector+0x364/0x3e0 [ 446.225516] ? alloc_pages_current+0x17b/0x350 [ 446.230141] import_iovec+0xcf/0x4b0 [ 446.233886] ? dup_iter+0x260/0x260 [ 446.237524] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 446.243321] ? iov_iter_get_pages_alloc+0x3f5/0x15a0 [ 446.248440] vfs_readv+0xf5/0x1c0 [ 446.251913] ? compat_rw_copy_check_uvector+0x440/0x440 [ 446.257297] ? __put_page+0x122/0x190 [ 446.261109] ? trace_hardirqs_off_caller+0x310/0x310 [ 446.264865] 9pnet: Insufficient options for proto=fd 07:25:45 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)) ioctl$sock_proto_private(r0, 0x894c, 0x0) syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) 07:25:45 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x22}) 07:25:45 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x38}) [ 446.266232] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 446.266260] ? mark_free_pages+0x3c0/0x3c0 [ 446.266280] ? check_preemption_disabled+0x48/0x280 [ 446.266300] ? release_sock+0x1ec/0x2c0 [ 446.290127] ? __local_bh_enable_ip+0x160/0x260 [ 446.294828] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 446.299864] ? iov_iter_pipe+0xbb/0x2f0 [ 446.303856] default_file_splice_read+0x539/0xb20 [ 446.308723] ? iter_file_splice_write+0x1050/0x1050 [ 446.313769] ? __put_page+0x136/0x190 [ 446.317595] ? __put_compound_page+0xe0/0xe0 07:25:45 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x105800, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e24, 0x8, @empty, 0x8}}, 0x3}, &(0x7f0000000140)=0x90) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000180)={r1, 0x6}, 0x8) r2 = socket$unix(0x1, 0x1, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)) ioctl$sock_proto_private(r2, 0x894c, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000001c0)={r1, 0x3}, &(0x7f0000000200)=0x8) [ 446.322016] ? kernel_sendpage+0x9a/0xf0 [ 446.326115] ? generic_pipe_buf_release+0x1de/0x2b0 [ 446.331151] ? anon_pipe_buf_release+0x530/0x530 [ 446.335921] ? pipe_to_sendpage+0x2d8/0x400 [ 446.340263] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 446.345831] ? fsnotify+0x50e/0xef0 [ 446.349499] ? generic_pipe_buf_nosteal+0x10/0x10 [ 446.354458] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 446.354477] ? selinux_file_permission+0x90/0x540 [ 446.354499] ? security_file_permission+0x1c2/0x220 [ 446.364356] ? iter_file_splice_write+0x1050/0x1050 [ 446.364374] do_splice_to+0x12e/0x190 [ 446.364395] splice_direct_to_actor+0x31c/0x9d0 [ 446.364411] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 446.364429] ? pipe_to_sendpage+0x400/0x400 [ 446.364452] ? do_splice_to+0x190/0x190 [ 446.364466] ? security_file_permission+0x1c2/0x220 [ 446.364489] ? rw_verify_area+0x118/0x360 [ 446.393309] 9pnet: Insufficient options for proto=fd [ 446.397254] do_splice_direct+0x2d4/0x420 [ 446.397276] ? splice_direct_to_actor+0x9d0/0x9d0 [ 446.397300] ? rw_verify_area+0x118/0x360 07:25:46 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x6b6b6b00000000}}) [ 446.397334] do_sendfile+0x62a/0xe20 [ 446.428432] ? do_compat_pwritev64+0x1c0/0x1c0 [ 446.433052] ? __sb_end_write+0xd9/0x110 [ 446.437178] ? fput+0x130/0x1a0 [ 446.440467] ? do_syscall_64+0x9a/0x820 [ 446.444446] ? do_syscall_64+0x9a/0x820 [ 446.448454] __x64_sys_sendfile64+0x1fd/0x250 [ 446.452980] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 446.457587] do_syscall_64+0x1b9/0x820 [ 446.461497] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 446.466918] ? syscall_return_slowpath+0x5e0/0x5e0 07:25:46 executing program 3: r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x7, 0x2800) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080), 0x2) r1 = socket$unix(0x1, 0x1, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$sock_proto_private(r1, 0x894c, 0x0) [ 446.471891] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 446.476794] ? trace_hardirqs_on_caller+0x310/0x310 [ 446.481843] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 446.486867] ? prepare_exit_to_usermode+0x291/0x3b0 [ 446.486890] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 446.486917] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 446.501962] RIP: 0033:0x457669 [ 446.501979] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 446.501988] RSP: 002b:00007f3befc2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 446.502003] RAX: ffffffffffffffda RBX: 00007f3befc2fc90 RCX: 0000000000457669 [ 446.502013] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 446.502023] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 446.502032] R10: 000000000000a10a R11: 0000000000000246 R12: 00007f3befc306d4 [ 446.502049] R13: 00000000004c3e42 R14: 00000000004d6c90 R15: 0000000000000006 [ 446.565258] 9pnet: Insufficient options for proto=fd 07:25:46 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x04', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:46 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:46 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}}}) 07:25:46 executing program 1 (fault-call:4 fault-nth:42): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) 07:25:46 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x6b6b6b}}) 07:25:46 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x143500, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'ip_vti0\x00', 0x100}) ioctl$sock_proto_private(r0, 0x89e9, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x400800, 0x0) 07:25:46 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}}) 07:25:46 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x8000, 0x140) linkat(r1, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x1000) setrlimit(0x408000000000007, &(0x7f0000000000)) ioctl$sock_proto_private(r0, 0x894c, 0x0) [ 446.823494] 9pnet: Insufficient options for proto=fd 07:25:46 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) 07:25:46 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:46 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x6000}}) 07:25:46 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7}}}) 07:25:46 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\xfd', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:46 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)) sendmsg(r0, &(0x7f0000000980)={&(0x7f0000000040)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80, &(0x7f0000000640)=[{&(0x7f00000000c0)="b1dcbd02038d0e94d3cff4671bd5d27c4c51c2c168727ec6823948e67288bc1105671a4a59121f22ed1d6c0d1eada7b7ad4ac01786882e26653f031e129745fb318fbb832a5e410ab23932f415a2d6e91ec86c04127e3c6a6c067481fdee0c303f3b953a412f98ab32bdf001963fe0493b08b91c6181dc4796f40d24c322cd1c7e2d17bb0bab38675c63c67918ab6c6cd6e35206dd5c9fac9dd96f1e6b4da3", 0x9f}, {&(0x7f0000000180)="4757097835b8d1cedfdc34d828989aadd145b2754fb18b00381ab10229c914fd2f183cc8f1ea909c6a7ba097ecacd43c001a34c8719e2f4cd399a7a46fbb5a8fc8af93e5286b7df3e0f0f8377e80340358df741024db2d382a055979fdcbadc2fbc3b22286d8a33e769b489d653ef1a0b84438e8ee4d1e", 0x77}, {&(0x7f0000000200)="bcee5fc5326c1d707cca7c9d52df1befc2fc39805173f1050cb6ed7ab52a9bff8eba7ac9cd9964bbd761a967013d3db184884eebd011b374db292597bcf58ed0be9c20a2e77213db84e4c60b09b8f9cfa468f33892a1db8f9021203c2e4044e9a79010740d4b92e970941474e5c7b4999a535d629fa9411235715de3fbec7792c61246382f069076f16938491944ab3050f726b3bbf0f37be64b3db82f4415da7f107d42c67e99f0652525306b95ac3c131dd7fb4fa3eb72a790acb229c8f25001a8c249527eea8a743f5b9e56e84b2462abf17317502ab2b013d8c2d41a0d5f9e4be6cf98b9ba135f2da059", 0xec}, {&(0x7f0000000300)="0a47cb226e980e38bb668698dc84d20673dea10cf97856ecf4d03e53ee884b5a5fdf5d290574fe034d8ce538793ab34f9fa854f262d56f6380fbbea995171cc4", 0x40}, {&(0x7f0000000340)="bf61d96041f0ee9a85af168b8e7e09c02800c88d14b602e9bdf866b05caaa590196cf3aa347c4d02ab4844519e6b58617af8a0aceb34a1b0440d", 0x3a}, {&(0x7f0000000380)="63974e47bebfcd6319729fba7ab4e9e5c730df4f8ef15b2d6c71777b101d2ee18d359cfb64009b0ba3f42dd3a4508dc6a91f5c2765ef512a34ab7ff76f761f45ab195f59b84a809afa71416dbc", 0x4d}, {&(0x7f0000000400)="6f5ee0395529675ef61edff80915ef410afb6d14992da485c8e613ebf977c506b67206c5b6ea5fa7342be6cba991b4f64138c6e4807c69ff6d89aedf2b59eacaf10d7094376cc727758457702978ee4ea60bca4ee035797021bd41dd823a5ce401034f1883943cae9732b551b56d1aa347d627d427652d4ed7912099d6ce42221d3b3d066d24d524f312747329ed8c26d61c6efe19a180d24c9ef037db9e2f9c199905564bd9111ab047c99ffe286041606892e2cb6c92b2f8", 0xb9}, {&(0x7f00000004c0)="f938f49adb1d1117155823883a7a1b06bcb7f29a694f7fcb1fa0a4d00895970e3705acfe9f2a563ee3d6", 0x2a}, {&(0x7f0000000500)="88ba39dc5d495c6a121295ba07cae1bb56cbbb25afba09ec3b2ad46704dd690a8f86b65283da1254c2bc43d9fe6a7a94677bc3f3f58c82071d41a5449fbe1a77311e5c043d23f657ad98ba81a6dedb8e80689efaeea68f7652b509aafe16596492afdf4bc10526de0fe46ce4db573ace06300999f16a3e4f4fce14a05f2003e46018df336a868047adf4c230d3bfef5e", 0x90}, {&(0x7f00000005c0)="26d07b7a4192bdf76ce12041ae0531794b870e4d69e85eac9e7c5d908a7aab51f7fbf40004782968776f8d75a28bf2dfc026f88e7c76c20aca4adc5ea6957f43dab178ffeab45bf4b73acf12adb693244216fcb6da16dd73f176991477d500cb1c474571a429778093acb45bd2f2528f75e86256a43043", 0x77}], 0xa, &(0x7f0000000700)=[{0xb0, 0x19f, 0x20, "d914c0fc1da03b83e8943467f6dbaa49006a3c69a14233114a35352cd7eb0ce38ce121d719b8a419a5a6e0ab610ea504c3ac9103cc15b3d5fdaad3d113860d77d8141a3452a8d6ab6d542a9911cba5ff6b05c47b7485bf4939954b394e58aefe3a1f89337539bc64674245e4e8eaf74b1256f9713cf34d72aaac8f7af41a4576b508dac7bdb208763d74d6e08dca5ce55cd23552005ada7d9518"}, {0x60, 0x1, 0xfffffffffffffff9, "9a0ccfc6099ef0dfaf32e368741a1c0afa91cb8f459e07f873915be635b1f454bfd61288825ae589a7a3cd506af3843819f1181d4a97c69a8d26ec4929b9a96d1c8e13289121147e01f9"}, {0x10, 0x3a, 0x41517dde}, {0x30, 0x88, 0xfff, "47ae5877c819ebe912969311095ad83ab2539940b8bda271f7b105b75dd6"}, {0x48, 0x88, 0x2, "6c821a1b918d1f76440ee2fc7cbb583be9c9dee120f6ee6ede28498f0475b48d6952c99d87ce23218dd2ab12723194a4a0515c52"}, {0x48, 0x111, 0x6, "00c5ceb6d471f230ab0b3b927b62a80700605c190954504f7af0c9ea8b08f4518a6a097483e371a3ae6a3d0f6711213c8b2f441f793c301e"}, {0x80, 0x111, 0x8, "a171d945ec84c633249ae9dae46768bef4c40f4bc39cdfa09d52a7868dbf185df6571e9dd20d052c6e96529309f5637a2737add5479cf101d2a2024fc4bbc6f4562507d23d4025adaa7195b77b9f00af8a208ceca2e954263201f2b1b351d979a24d5058d30ce3a4dd5a10793c669347"}], 0x260}, 0x40) ioctl$sock_proto_private(r0, 0x894c, 0x0) [ 447.044030] 9pnet: Insufficient options for proto=fd 07:25:46 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:46 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa112) 07:25:46 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x700}}) 07:25:46 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}) 07:25:46 executing program 3: r0 = socket$unix(0x1, 0x21, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)) ioctl$sock_proto_private(r0, 0x894c, 0x0) 07:25:46 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 447.290646] 9pnet: Insufficient options for proto=fd 07:25:46 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa11a) 07:25:46 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x4000000000000}}) 07:25:46 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)) ioctl$sock_proto_private(r0, 0x894c, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000002840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002880)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000028c0)={'team0\x00', r1}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x400000, 0x0) sendmmsg$nfc_llcp(r2, &(0x7f0000002700)=[{&(0x7f0000000100)={0x27, 0x0, 0x2, 0x3, 0x5, 0x1f, "375765d7b1da9960521407c5c3dfac210889b3616e011ecc01e15246057cc088b2c7239df116ec5bf88bd7001213bad5654cd59cfbea1fe541f4994de1ef58", 0xe}, 0x60, &(0x7f0000000400)=[{&(0x7f0000000180)="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", 0xfa}, {&(0x7f0000000280)="d421ca698522f27bb1dc737975ce91caafb719353bd9b9f649260da9c1e710abad94861ac71ba80f82c5b99dc6948005f5895209f888afeb0e09fb88286cd1c250f22d74116bc3e1554cc3dba1b0f4776e3a4a09319025c329d884a46e09c892405da3b1c94a5a410fb050290bd17b4493", 0x71}, {&(0x7f0000000300)="b748768e601172549c54db8fd92c308429ff11c829b162cf6fc55e02c028222baf1309c4fb14317c2e1a3e394267668a6284217ff1e8fb7f937c800d339d17da8844274f56f122d686db8068404ba6ee4c3e9bf5bad6c339f50b2ace3c07f2e028db1e9558174635c1034685b8e6c3f72491a4d632240fffbd68053b1009a474fb90614546859bb3a90a70bee867b37456a0a1fd1522c050c8269f0d002da2e46cceae2ad316b424540e2ee4dfb77ddd14e7fac17ffc877cabe0b4118dffdb8b9787a45ad6a663abb4b2f07891cd8a", 0xcf}], 0x3, &(0x7f0000000440)={0x100, 0x119, 0x400, "400e636ae3a08f000bbdfb7930008568e3a86080d24b7076806260c967e228913a3451e47b9490a30262c6a024562c5f99906d801af459a41964e92e86f5611d2e5d01a9e4eeeb9378ced7616c64293070d96c0bd42354db73ef81237bfb3fa2892a56e37b73d8c3d52f28cb0a040e6c02cc462140be9a73e0a16a7ac3aac72272573c59a15801643eb65ab7a5a646f6214f6e4dd6833cb4b875d011f187b94156966551a8122e636734acbeb7ff7590816e5fe4530c8d5669f9fd38a0aea5a2c4daea064b9df5199f59b8c816a932655915c06e49253b30b0f85949c321c4133486b0d690978561ebd2"}, 0x100, 0x40000}, {&(0x7f0000000540)={0x27, 0x1, 0x0, 0x7, 0xa4, 0x2, "358253c53156e6957d027a808b8c44e0b89f9d1e811a761c717d20424a70741477afac0150f9f3fe594940c8f646a61adf7e6991191d6b28fe552d41d0baf1"}, 0x60, &(0x7f0000001800)=[{&(0x7f00000005c0)="7fccd8da9f733aa26a91cffefcd980e1f849b6bb59e3545275", 0x19}, {&(0x7f0000000600)="2328ede101a3109db57d3bb914bdafa0cf0dc77cf5460a9dd6f7a79b564d21ca096434ad7cb8ba66cf6822d0637812d1976e31e68f0f4b33ef1fcbb81b86d099fb29e2fab12ccbeb9d8d6a09b38633a9fdaf2df0d57da1e1fa4c91111986fc0674b9539464e29652b0254681f0df03a13d826571fca0cf7c08870a591854acc2bc9560a83abac7f0aaadd1", 0x8b}, {&(0x7f00000006c0)="a31db71e0600746052253af2b51cb9ebd995c96d682609e2c7b9", 0x1a}, {&(0x7f0000000700)="c094df80b9ab3127ce8fba702397357db2067bdcf619f8facc22ff820114523b4388f454caa4bdf5f47be6be38e76ae387447733a30ca44ba08922cea8c1289ef5aaab661a3b466b6b93afcd5d42821c9b223ddc40747c3ce1aa5f2cde4d9317a636f145b42f258ab38225f93dfd4f0ea9392eb20945e972b1ab7b3b6bbb0554a9443b3c0c5e81330c0ee81ce39640428edb389b67ad0a5db20a0b0b8ad6784a229c97f9a95dd1590ac5bb31da579f59b12af345ce1cde51986a992868046ca3cd6abadefe6bb370ad4c0a88dc49d174b4cfc6624055f5f73683ed2788bd5e1e70aac167db2623c90c66f2b93d812b1c30a0e427307421180439150ff7c8fecc9f230489ceaf68c720ef1f8cfa1eadec262fdd05bcea5c2a811852db3436ccbc2d889713615804cbae5803a08c5ed553f5a15f27d71dfb27e589b8b9fe79ae832e62c51ee0bb6a878f5a4249032a14edcf4b9141e31db5c6f7f7d79085fce0a09eb599594ebd95be86511f74a48ef99467a02aef9ffe6fee81fa293fd9bb67e027c6a556b05e722a436c9c5223fa4d451c6fcf7677bbce9bb2d8e7c3bb57d0e2ac20aa3697402dec55fcc0c7646d2acbc0d3c1231dd14ab35aaed558e65893586d6eda9314dce45b46de7437ff60ac08fa1b8b85e7639f60ec65067057456ba2d72de198faae86dc8746ce2017a889173af67b5a6205091e7a3932de57caeb35cfb7d38e24dfa111ed81daf60943590fe526200bfe8802fd2b0285723c1f652fdd06337f423e50ce2621e7cfe3bc4125d481355acff7b8ac06691ff34b3a3091e40f447cdff524fb9b45dbdef3f12ecb3c1a3c5be74e2391907222fb9ddb91d581afcc4aed15458355b168fb27bb7993a71991907246b862e186d42088f6c93d1c5cf4f4945cf3646a68b96127439fee259efa486354aa13b4663a45134b9842f0c8d5eab1bd27392e61a644063e736b05e9fdeaab147c0e96b5299f15f785d002b1197552425cfe357fa8125635663c929c20e4d9fe4f9507c21adff204b4564d365798e36996ac6fd482e9069787fa7e10c94845050c39e6925158f68ff3abb3d2ef24b7345e14e3366a0c35f6249d60c3fca2ab0330397b87aa43fb76e72679a0041f76b1f8b049368b62bb0e9319fea46873d43835875113486f8d42dbb1d096e91180f3c1c513f9235d7477576031c83674f1000d2834b055d2a6f2bdceef41a30b0b4f154381affe1c1a4ac8b7045fb488354940c69ba88d9d32f377a71c3e2df2e8771266bae426607f5e49bede7b83cc129083d8ed2222b7dad5c6cd51ebbddb03cedb3a6ef6af3e6f2839688e8109b90867831e3106f12b41e6de12209f434ba840d30360b529cd2d0f8cec702ca1b874c231def85ebf82cebd168d0337f3d1434b289301a3143eda4049d1c51dacce53b105488456973e41d77a341b2946618873f16235a759b6c6215ab37e74f50cf602e7b9c2b98e5164c84f910c3a57117e8f5f7718f0bea9a3a77ee1410525eb831611e41550a7e3a826b06b47e03c63225b14bccd1f346018165a16a74bf04c168a113cfe45d77a2860ac271805575b549311fbaa0fa75e160001a3f4104ca2930e4c414607223b3c7f79a5bd37def7c6851766e78377715a73194c295198fdeaa12418cfdad8729aafef2ece23f862c1368b1f1ec90116a809a103e88d46a42927606cad90f24c1900fdbb175accf6ce4debd9d09a0219e7bb7a862cb12fb69260a3b48935d6b2c3f74ca8486521361567279b47b1bfe6c66eab3c2cfd805626ee5eddf93ce9288a73823a999b075e8c7aea34aa2b9b9d7cb542801d1813f175058188175f466fae4bf15c6597ea474f53001d396bcce587cb05e12e2d1f300fcd25663932d0b1ad58fdcc17999d095519c281b8983aae7b30212e7b102881682e94fb4e1f772bef0bc20ee89770a880759ef57268510c704cfd0cea14a7025f85cc8d825453a2d5fd267b44f82fc3538bbe9677d169dd49cf99784a26abb32ffb0c687a30f205b43625e9e2126319f0ab663711f2374de9f11020f60597ea62cf5ec0cf739ca80866d790448b9852f43e6ae11cacad0d97e1b8011acce301400e1487815e37340d5e6296c459a4182da4c75d99b09656100db62b24cc3133c6994014be69699abc8c3cfc28ead884250228ccd3a87a5950c3db11bba3540fc50f991c3a9c57dc845bc7631f6164bc324808e23e412c747e3a38618907505e098132f87bf8ed9ba29d59081921fe627b3860270a4e70aaf1f729c3e9c467f1ba5a6247d850d67b85f5643c57c171b1f45a91caa2a8d63e4c4abf4183dda467ab672e60ae01bab6d5bfde0a4741252592befce57d41fdf64a53df688169e4b2da656fd4e61eb41204fa3be0588689cd0e44b8da88ae900a1b0e4ccc34d35e79a302e7647ce86d5fad961829254e61ec7d74ca09d077d2b2a80a0acca0912e2c60417fb1e83ee7e98d11877639f9c3a9865875fb0af9cf92a826ab8ce85d568eb952bc973771223006003b844e1d2ef26a52b85fdebf7f11a35d90248a6e8e01ab856ed65dc5f593594d7ff26c889a235db1e96ab63db53e98fee1f3144f17f61dd5fd921815f4f06bcae381c7aa3d66c6301c79aa3bdfb3094eda86069a772450da155a63f376fb1d7431c35ef122f36ca58e0d7373ee5230c87582546bb3e6b776e2a929e817848a3da725d96d24f3baab8467cb7be64182daa10c37667135f2b72536184df2aa4e4820f7011f723acc9de6286c21cd2f422529b7f18108f2fca33f07fa00d98016de1c3464a57cdeee41f759cdcef5ddababa2033ecc50c1714a014d5d2319a7b0ce864ec5cf5581b71ed7f782521b31b92689d19de4acf2a593c1ef2cfdfe83c8cd0f8e9e4b7646391f89ce8a6fbe0b221721328ae60791c2c91388d27a6888787bedd4b023c0834016668a820bd38c75124f99be4f89db3271386ac8ee71c29dfb95a64cb967459ae5329642ae6b05fd21f6084df8de03ff0745dbe213d69b40454b0270de1e9c2679a7e802de4cc7bef886ed67b301e80306c2c9a9ca5073aef72b95e4b928e52fc05921ea565c96bfc29f302c2acc2e74eda4005fb91689dfdbe3ba2d35c9ed6d53df2f8589f8e3a1770b09bb68102d942ee5be79429c5225a76181796233fd4c8e6ee1afd03e25cad51f9f11080c27461ca2a65b8785cb9d89b5ea4464f2e3806e2f7f8e5a1a64fb903607b8aa822fe727f2be153764202cf507e25827b2bb365d6d499ebd071a92149a4361fdc51949218406b6f7ce6ca13b404681ebd284068cd2e3ffa52d109282478e66de4f21c4bfc74ec86af5609efd89889382f91033a76d426398801ae948877d03a2482097577c6a0864de710539a644267ceb4856b867249a622579f8d06ad571ffe0ca22945005aef872a6143eebf27502d75e99ec7078075f08e8728feb40e4fbaf46ba2d527136df46c860a34367da6a90935f91664f3b3e6c1fd7b961e954a55a1ac882ad4322fc841557d33b6afbdd5c7dd3233b58326795cd1a9b29b6ed2c49ea732f3798cac755c86371faf90d36fcc7d3ca846d2141c907a63e96ed51b699e59ba5a547cd800568ac1b8738262be44ecccd4f5fdfe367a64555acf863601aaf5e76646849783d1df8ae48fee9dedcb45a407b51d5acd47a18443f7e13d1ad44ce07d92f07194cdedf19d10c5ebb60063f9cb64aa0e39baf8727cf276d3f759ea3f4979a3f611c49e7f8d626c979e98240212506d9c6700189266c302b2d0dad1169403a9e03eb9df5e6a51af8328220e1881fd2108285e8b964d7aa42fedd0ad0d15738667822a5e4073637f94c414a2becc4941fa1e444ea57ab905fb96e8f9ba56c496311daac6522bbd1c873428194706bb0216ec3430edec0a21efcc5608395ede52282da44c545310d6f161178aacd5021ee275e158a03a22723d96571b478cae32738caa8e389f9c3221ba406387ad42ad0c564a6e0b72543a03658797db28cc8a27c358d4da7d7255b965d663dcd571438889d08f3184d5a07f50622d1fce6d6d95b777203ce2f83e206b52db3fe876889217e476e162089b6e0eb472d325acc820503c7a48f09274e20faacfb113d3557477bae5d823c38238e9332a3c428dcfda733123dc96dee1cfdb2133ae34c40dfcb137d203c750cf9485347e0a9d7e73c06e223e542ed6b2c3c0e10b23d14bbd1e6930bee6c8439da416cd9a2a856ccf9fe13ea7e909bd10d4b01c44702c907ab888bd37dd0f72cd1a93e6416e4751aa99315d881fad035a4f55b5f4df30ef4442b6b4cd4b08615091f5ccba6fd3e860134efbeb8ce6a7d91b36dc5021ac806229358a26144734d687d356c89e6bdf72654dabc7a1b222020fdb32c9cb90abf3038495029775dc551a481d196756521dc8e50017aee115b9103bddaec556a0818a2631db199bb813a7ceb50d2584554e98f892a63f64e46b49b2fb8147d923aafe9ab491d51876d8868cf59225f7987ad9565745da68125160043ee731e16fd88d2214c577c4881c0c942811b1413535a2ba9f396f149d3c7594e93e396f378cbd8b5694bb4695baaa1dab20549d7541ced307a03c4934eb3c4c3acfac7af2f936a009c11ebc1c6ff1af9132d883c670a962680b923eaf05f53c920ed35b6869c2e7bce3c59a4133481ff2b31a42c746d67d050540ae77f614b6a88b76a915e28e679da15645fca36ff43086a6f632b18fd40bdc41d163bc1abfec9dcf496df65e997e99a3abd401de65e37c28a9e2d410b7c0e965a84cddb621d2c9ee69653493aa3db041c153434f6747152b7399140e34a46a7aa5dde9cde8224caa78316194d366ae28839ef7d0d14ad6aa14634b6e577f9f0f576e204e6cf0d267973b20f4b9d588cab01881b1d2214ea5af5ef580045251a86002b8875f7f57fa37d9c75d8731809b77b00b4b3a07cc53e63767dcf9f5af855dcb87ba54dd5c3437f2f9c989c8efd40fdb7dd47f7677122a3add7c67c3e667fd9dec4b22e34f67ac91b331e1447bd2f2fe338b29aaac9c41cf38c7e52611129c4d14f4292b169455ffd5b0072bfbcd944c2c1ce240c310e368b5d3bd0f76ab1366c1537c38b0b34770fb4a4d0bd8dbb4ae7e4ff0f14ad520e40727bc119e36b6f62367946ab2ad07ee358ad5850be1c6f8eed382ec329dd6d988838f85caa6f99a6e8a2bb778c1bbd5b259885ac8b1af8c65bd14b0b0b879ea96bf40ab08504a95aed313ab1667561766c0035a0704ebac88785b765828b9b4f40604d17479e06928cd8f70f6955620d92bb1ef6bfd6083ba773c5c94dc5f7662bfe02d70e58fe2f9be46bb5fa5779135f2918bdab80c365214bfe70353dcb2dc4010df9347e6514b720356a8587202c80f913d4bbae0199a806334a4809ce2347dd11ab390702f73d87457e41bd3de8cb42e89e167a846e722af598fb419a7ceb8b7b76844f27f886847b1ed3e03ec9f55dd7e2e22c7836860f4af113479c81a6db248ae078aca93bae1ffc4a64d8ab6eee49fe72877fa3e436a577505645ec4b29fdac5aa69cd1d957c0e52dbb3c957e01120ec00939cfa62bab26e7f046d658655649c9a155b9715a9b2800a166039303dda4ea4345c7414b68fc3b05a2a281e80fccfaf51c952ba4b2564c19dfe489e43c52345cd23a8900494ac6a2e6a2f0dc02c5a11db4a41a29988f70d0db11b46169e46048477b3db091d657408c30f8d72209b22263c74bf05824e9a9f0da79615a99a436068131d9341fc47b76792cc51f2d5bbbd989", 0x1000}, {&(0x7f0000001700)="b3edc5a643fbbbf51b63b407b6aadd040bbca433bbb76b9de1f3f2330014c0ffb9dc7b703615871978b68106043f7decec41778d1690729b3d62bb0a3de8b543416bdc63cfa0bb22e2b9105ce45bd658e9c16757652ac1505a283659cee677e80ebdb054a0ecbde8ba859f685da0fd63f2f4644699d14ff87dc0f6754f076ab6b65a5efffa7a2923e40514893ab8806f487b0fe2d97e551cc01059a57b4087f793cdb9e9fa50d938cde86a8409cd5967db34bab1671d8240e6c1cd03badd4478d66584fe0c3b75898ddf99e310766535a3170e7a4605be12eee90aa235ad7761f74bb8b7f8302e7793586deaea4d0356dbb085f9313bc779a137aac8", 0xfc}], 0x5, 0x0, 0x0, 0x4000000}, {&(0x7f0000001880)={0x27, 0x1, 0x2, 0x3, 0xffffffff80000001, 0x3, "1692fe6236b793e4d0284862b658544b123035f7a7a8353823804ef61c95bd2474e8727461a40d0fa44656ec6354b2441b008c4b3900abadb2675be9bb0799", 0x20}, 0x60, &(0x7f0000001c80)=[{&(0x7f0000001900)="ada5cbf8db0fe350572d3f2c67346c0aad97efe21b1c37d3332e3cf6a932dbaa392cfc5e515bcafef7e0a6d59fb3045db1bdc5e8d87db9ad54ba50c8c8538e488ffd89b2e5fe48e912a534234e869374843b5d618e3f9496704f3069309101effb9da9e5886b5fc6ac5a577191bf532f3552546b118e36457e120e4ae263fc322fd1e48016749cfded5a38e13ffa71887402168eff59a3f48f6a82157719adfe0ae55293a373af415cc979e537105dfcb80711aa9562d91a54f6e034abe3f34dbbdc21532cece93fee66af6a06d9db6bc57ea345a4", 0xd5}, {&(0x7f0000001a00)="e782229693bd2585fd9dc7975994adedeadad0d32fd1a112c6ed635140cfed51f27dfb66a2ceca0ff172b17670ab113edaba068d45f4525908adb98cf895eb5fc18e43c646e0eaed11b1d76dce085eaf6049beae92e79496b47615b1a293c7a661c78162f8816c14b996199b41c13f2004b9e41118227cc5a15ee4009af4bcf83eb392f20c090b33dce2dc5bc58133f8dd09217f62ae51f8654aa4139c3ec6bec6a7d4809475c467b8700bd5da5a09452758916366a37356d8ab116b78a94156e6e8ab12190de3db0c7dd06ff5db8e5da6f78705565ddb7b01c5c2960c79", 0xde}, {&(0x7f0000001b00)="6805ef6fc4eff7e0c97e77e03879e8959bfc9e469accfdeff18a98b42337a1f6e797dee19a324855b0cba69b7fe7a0d718bde91035f5d04d8ff6f180f70ad4", 0x3f}, {&(0x7f0000001b40)="1b8f0ed5040a47ea36ba8a48d37ec4", 0xf}, {&(0x7f0000001b80)="a7422bf3940dc8096f0e47f56d9ed7b68e5609b15df8ccbd2d8c9208f6c7664794d70783cfd64c55407cbf536e5862f4e9d3f8eb66ba31b22ede00a60c7433c9536b281b5303baf0db683e6f2762f7717ef8296b6d56bf107e4414267ddffa267813b9cacbc4f777fc5466271900cab13d588a2561a9f66f663cbd9e6c7c733499d276247d59e35394075d00782059b7f5eb0353625df66ac09354fc1b0cf999ad8168176adf5faf8a72feadd661b896574dd619abaa4b026c3f858d97d996aec2f3254a34348f06167ef8fba3e5de0143ccfbced471a00c512125fc2fc8d6d95322a64b6c3fcb003e74760a5a2e3403be33ffb59f239a652f", 0xf9}], 0x5, &(0x7f0000001d00)={0xa8, 0x13d, 0x9, "94a59dca5ef96addecf4fe0814e839b4f2aefdaea5d7a5b092f91c8755a29c03d80c73142a8c5a236d19d4a54b6630e1032e679a2442873495fc99e54eb8fb009f80d07da273170193625c9acdca7366011942f976b5a8ebc4d801d724fa4f55fcde05a3694426da1166246aa2389300d5acb5b0e5c892b146d40c013a134b89360d9e841fce75f5a0ad8c0c3e199aa492b50c17e489397c"}, 0xa8, 0x559149611c82f0e4}, {&(0x7f0000001dc0)={0x27, 0x1, 0x1, 0x5, 0x9, 0x1, "89c92a052c62186e0c7329ac96550a0fea0f5ca5508c074c827599a4a7e03fea494ea7080da842e2e4bc2f2f241cdc34a78e9c1b6e92608492de3935c47836", 0x7}, 0x60, &(0x7f0000002000)=[{&(0x7f0000001e40)="8a93d2b8127c3a39c6fc4004a9eae4ef92ac9d5deb94a4e54583b93fe2da4fcd53fb3e1cea79e48bd2149d8f183d67649c3ce627ebd8a45baa3fd2960a9a06e0d08573854973fe953d9c6cbe43be56f0a895d3e374490e", 0x57}, {&(0x7f0000001ec0)="6b3642cd895ed0f1b77de18fe6fc6ad08cbab118eaf341ee8ed37c9500240848bc7b843ec073bb6bc5796837b4aaf85398c860c9c9df0ff809760dd125347adcfbb8745d25fab7f773762f3bdf", 0x4d}, {&(0x7f0000001f40)="3391165eac2a0feb3da13549aa6908980801be737513cbb42eadc686c972a9d64c07dfe94e2aef385da4f26d5c1d70e6be416d78ed0604d6aaaadda2a32319a1db906625469a037c8bbf198d49f2cf4af7dce0b553e06fc3399b52c4f010a83a8d0bff402f208c1a99e9360b77dd1fa5fe83d1a5b8b86033b9ee7e1090d4ad1b5c0d628926bb0c1f", 0x88}], 0x3, &(0x7f0000002040)={0xd8, 0x103, 0x9, "18f2078736a2166051779335f16ac0a199a622d2501e072ae63d5c8fa77959b341c66ad9e24ac69172f7b4873dfefd2f5f55de016df4908954a31189c4f4f9d485bd365a71cf9201e3302466907d52771e240f2cb66c65fa38b5561e10552b2bbc6497aa835e0b8f4fca9ce922c7bf9075354af4064c6f5435de49940e6345f83ac94e63a2eb134deaf990319b494ed6cb75af27173e65ba640be9411ecbedb56bf68c438addf05aff8541a7a963f3fbfbd92569fcc1d163afab323131a48071c5703a"}, 0xd8, 0x20000881}, {&(0x7f0000002140)={0x27, 0x0, 0x1, 0x6, 0x8, 0x2, "1d754c98f84b7d0796871e38169000193c92ad439741c68b19abcf169f3e99f695f8dd6b3eb749e078d8201b727efd85a58cf030b5a5093184651f0359cfac", 0xb}, 0x60, &(0x7f0000002580)=[{&(0x7f00000021c0)="37417de1d87f2ca9da4089df096ee0762526540d373cea5a734099bb6aa53fda64382788ec7efff5949f3cb5d8f8cef3f38ace99ea81ad0c2c7d66d3", 0x3c}, {&(0x7f0000002200)="62ea55590a8d1ad4053bac832efe3b31481a20c9155de22e0a3df27668a94e0e02d9ee17ce8d963f301bec90a69d6e0f043dd9e72bb67e4b06844d00eac27f33ff1da262d75021f5911ddd73f10c43fe93bb65c3bbdf1def7f269d4892b8eed39eaf50946f54a1a6a2c6ce6413898fcb9b28751e26ea84d6c6bd8841f716a2f9cceaa4ac95ed0a7c516fa2f55aaa3aaa37daf120663f832cb1bf2300e018629d9e60961a7aace8d84c2e78529ca568e8c8550089fdc6d4ac7d4a4e8e403cfb433ea957537ec9fc50928cd065be46eb0a0558944ee06bff3a38c8d6bd19408dad9a7d3d8117252a4471901556f90ce13974cccff8c82192a0d145b2a6669b", 0xfe}, {&(0x7f0000002300)="9b6ce482dbb1ec87ef7644f8454d52869fe8538969e2f8d672303d0d82a24cba0d0e1a9d9b1b19887c0c84774cd972749357408fecb1a66be787518bdf53c52d14920512e81a15f58ae3588f3a8c1c1d22e461f24d866bea986a4cc826", 0x5d}, {&(0x7f0000002380)="a11eaabbf6a86b532211b1967db17e0539f99f6a3bc951cdb905341e7795790dbaf363d391e01019509b799bf69ce3a0764d97a890c630e54e31735909556cdc687f72912cafbe8c591c914449ae7ae6311276460c83fa77037c7a19f596bb11de9c00bfa99e59d71a4ff8d41c970028aad0cc71f4169549dd09d8fc466524209559ae8a721842d2798e61d7c510a34dd817", 0x92}, {&(0x7f0000002440)="03958228daf6cfd22cfcacf2ca559e", 0xf}, {&(0x7f0000002480)="55774ee32bccbb1aad2d4890281a0c0a04fe2eac9e2e9d8989c71dca2c08958bd316fb0f477c631872e1621b51da85768cc915c8ee1d8bb4d7adbadf2c0deba63a0a233c2a83ae47b8b8e32bef9496274273f0b6ae2d38ef06737befef0c228ba7971c984b035833a7b36a34089e24b3a845987a5ae48bb458f351c72c017af96cba4aacd28d8699b6e6a11f1951dde6956751853b1b2a9c0043d825e8c985584dc2c122809d07e927412b3b51af1b2fe429a1af49321c4d2a37c682cae8b326c046", 0xc2}], 0x6, &(0x7f0000002600)={0x100, 0x11, 0x4, "437f6416605b460e761564eacc5665b97c706705ebd2638336f19cff12b6c0ed0e9eca01f57a6e7a3a62af04e3f391e0ffe850c4fa7b769b38bbf452ac7cc81c72018f0da4058e1f260ffac30581c659256a9e96d563edf38a39a3e21e16fd352b43ce54aad4154fd429fd96af627a417b1ef606a2200fd4d057ff81a6a68200bfadbdecedb18ad840d70be2259c6506a0811d16b8b7e9fbfb7fbf8feec60558d105f8fdd7d42a1bee501341b5cd08cf23b7ad2fb5c910c634570048af34e0b3dea8e6e1f30cd58c2653b3ae48ecb4083467d27078bfe0bfc83747bee5a5ca736e3570f1b80f8a496b2a"}, 0x100, 0x40000}], 0x5, 0x40000) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbff, 0x40000200}, 0xc) 07:25:47 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe7}}}) 07:25:47 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:47 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 447.452637] 9pnet: Insufficient options for proto=fd 07:25:47 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x700000000000000}}) 07:25:47 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)) ioctl$sock_proto_private(r0, 0x894c, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000d40)=0x0) getresuid(&(0x7f0000000d80)=0x0, &(0x7f0000000dc0), &(0x7f0000000e00)) fstat(r0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002340)={0x0}, &(0x7f0000002380)=0xc) r5 = getuid() r6 = getegid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003680)={0x0}, &(0x7f00000036c0)=0xc) r8 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000003a80)='/selinux/mls\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000003d00)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000003cc0)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r8, &(0x7f0000003d40)={0x5, 0x10, 0xfa00, {&(0x7f0000003ac0), r9}}, 0x18) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000003700)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f0000003800)=0xe8) stat(&(0x7f0000003840)='./file0\x00', &(0x7f0000003880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_setup(0x8fcc, &(0x7f0000003d80)=0x0) io_cancel(r12, &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000003dc0)="e1e48a6984ddc205a7294da918f1beff9dac3d44d2f13ab74824203cccd62ee5c0184e1f73bd87fdb677245a9555f09cf2659370f852a308f1341f2d7d7b3ce656766a09df0f610b6bb09cfa42c1be0b2c1c4b3d12d632c92c06290a9c35186644e687753480e2659978470c78d3729d23f0555ee6c90d7cafa2ab6e340eab87a1589ca2dafd449155dbb351d498753daae9e24520f86998ad1390a4b25a2787fdd130ed3cb406b67f8a1483a90507a225cae6b236b8fe6038024b3923e8dbb987f3346104b7021313747a66255a7d63a28790dd96c97a101f9f8ca6b894", 0xde, 0x0, 0x0, 0x1}, &(0x7f0000003f00)) sendmmsg$unix(r0, &(0x7f0000003940)=[{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000000c0)="057e8448ec9dcc2a231e87bfb829b449e1165a399e64f960534075946c32f3ccd3efac3b71bacbd8a95c9cd9aab72637a493d2f2ba6fbbb37ba0ad5f3358ae5a393bcda16f4e6d1647e30cacda607876d6ade3798a4411a11fe098f0e101cd03f24cfb44d7128203343bd0dc56945b85392ab5c57f12ab851b4565561899850987acb9f30ded5dd80ef9e61ca67f07c2f4a4d11fe254994476457db82d51e82eae028f61ed9f85e3f0043036593a6d0c6b9174db489e5ca945612f6e0ef8b73dba3ad494d795f9dc070d515b8e", 0xcd}, {&(0x7f00000001c0)="4df57af38556acc3b4e970351cb8b00915d8ea0333388da53b2b724d148e32d8b58df6042232b1e9000637151266475af9b35e4bc87bd9fa197759dfc975c2ca0e31b9d5f707cdb054c5cdd0f1d576de80a7982521518abaa6bbd0793d2d64d753d0b3977ef11ee23805a2ab50c01b1104fbf98b6e2ad7c09f4e03319624f4ad6ceffbbbaf0e186f0cc25286e63d0f7c5ac93ec3787294d59b9b5734289cf620b06e1417b6d8a28fa739c9f003668f1e8bbaf00eebeab1415a7f3359e0513c67289da9ee1e51bbb283e20f36f0d07c9d71", 0xd1}, {&(0x7f00000002c0)="9b014ba0e69754528985516ad454858f209b", 0x12}, {&(0x7f0000000300)="a28f097731464f3108f77a7ccabc7362fd4a2a698eb8462c813f2d65dc8df7b4dc376c49deb4e0871bfd49173d03dc797ef9366973b9f8b94ab89ee1db1e6f994701ff736841e020a141ff3889052262c0e7f7dd49ae05409e7ed1b9feebcab22802a24bf40f4d11f918ebcf12771ea62ffdfacca3f7fd0256d855b95bd26b812142d7125ffb50ae3ea10862d28ad49312fcdf56aa76f64a67faee0c1b818df6ff7a710a39f2fa2cf037e8587b393c8d93820baf9b86f092b503dd2872d2e816112fc3661c69ca105da986d182b14cec", 0xd0}, {&(0x7f0000000400)="a82a9e34b25dacab7ea69d2ce208df67b18fab75a3f53e193c8c6703958f8fe9966847534b55d0a857aca26b817f873654568944b6d0985ca2a29e90ada17fe69ed2b67f7ae6ce768d274fd7b8c85363c4ee983ff2e6744d1bc3b59cf19af8deeb50a1a984593be09eb1817a21f737278852a268", 0x74}, {&(0x7f0000000480)="a63d67be0f73ca7e5a39e074ad72957d8a9e95334b83912ef6f09587684015325567b3daf3d703839044eac65d428cec9d417cd62b08166519b37cac0dd6ec590b8e47000e96f46e57654538b0dea542c33a14bc8bdbcb270e469d056fa9a8b3c369e5169a054fde44e6cd04002be6c52eef262b8e015b6373e0267a06972bda252eb22d79a4e68a6df0cbf3bd9ac3f42877f065e9518fef6335c43ca22fabe91bd656673d7ae63a758ca6", 0xab}, {&(0x7f0000000540)="9fb0ed2855fb73c6e8167527a5e4a11c8a19491aeb813e06d8b3afd34a7739b2cbe74f35443246ca7791834c2df142396bf5ba603e69aa57ec2133b40156c0dd9cd4929ed675387f00d1e9ae68ed1300a36bd6e2ea516811764ac0add9bc76bc80d8cc429a", 0x65}, {&(0x7f00000005c0)="03d3f58b7f30a5b6690ff9545a089548cebc9884a8dbb4e97f429832f4ab8ed00f70cd6ff8ca4d7940d603da45584fa9024dce8d6d7466588e8a3be6acb69a5598f3e1bfa72559511fa47b4d3f361f4cc3c20458f4a3450e277a6dc155afc8c307f22a39f51a15f943d294416744d2bdfe553016d8247c5d70819480011eae9ae6bd9ccdec1ca1fb3ccb57fb02c5f9fb4d6e450eacba860a2a9af53757e45d3cf55744af7ea169089c8709696191890648f3", 0xb2}, {&(0x7f0000000680)="967757206741bcedd4984f369c19cc3c1487965c51b9d2e6901e8adeeb3aadea61a3a0e6167460fe6b4bb33653d3c26077fab61bb6111f05da0bc80eea6751f5bb3868d04bc3838455d2e798ac9e17361d734655dc7a6ee02a862f31e971c842feaa8c84e09d21a432c15e9b3181871de7ce9b5ecc5d5ce8909c29c9ed5c1d10a14fa6b42174b45cbf7a47e02ad5212fd56fae0335c8a2a5bb2a64d4f22cc2335498eeceaa4210808bbab07ab9b2", 0xae}, {&(0x7f0000000740)="e35b407de1219c4987cc47983614ff535da1e6e1131017924de8221809acc3e6fa68b77c0fdb810fb4a2093e22e1059cfa463dff066bb78ea0c4235bb4e3131c642fbded04db4df2e9ad1b3a3d12b37ecc50cecb772f94ef93e46abc", 0x5c}], 0xa, 0x0, 0x0, 0x40001}, {&(0x7f0000000880)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000900)="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", 0xfa}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0080000020000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0], 0x68, 0x40000}, {&(0x7f0000000ac0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000b40)="21707240f9a480eae7a494bfa4aeeff92ac3d654839d129147b414bcfd16072d91e778f94fc0b2d3e9fb6320005c251f2cf69f3f47d602c001529247f9d893e0218110710fdde91d8662049180438c723ed60e87b4d9ac699d30b80dcd51ede7cc013e588d01639f17aa91c1ab9d6590e29be9a3cfdb746eba", 0x79}, {&(0x7f0000000bc0)="42432fa42ffb3597666855e284993219d02ff481bfec9f1918e3af1d790a12d64b90d841bebb950877bc7f3940c2ad311ea04cbcc42dc9ced15c87551d39c194056ab36b098b4c4ba312e3fd89d65a72878a6b5ff236732470c24f", 0x5b}, {&(0x7f0000000c40)="4797920a70ca1a33a248a7c7390a9d5e587615fba834eb1e4e375a0ff5ef8cd1a463e91d9f54a9ed5b863798d39316c6450fdde7ba4e4598a0072f8c88eba6ba901f74", 0x43}, {&(0x7f0000000cc0)="3fc0b7bfbbfc1bed35d499d3b7ad6292b25a91afca326e2c150afa4dad91abaf21", 0x21}], 0x4, &(0x7f0000000ec0)=[@cred={0x20, 0x1, 0x2, r1, r2, r3}], 0x20, 0x4000}, {&(0x7f0000000f00)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000022c0)=[{&(0x7f0000000f80)="df7f82fe25544d494b46e3b3e7cf237774f25889f43da171783907af9f959a3007b876054f94205e3d3d7222060dc24ba5dee9d441be50baf07ddd7f5f11351e103ce5eab803be6ea00a2aa24a84c3cae2e5a4e5f5685c9437294ccd5144b9611877bca82012920539bf5428e249af8fdd8cad1185c151ba68c1d09363bc7dee35630c14cef59b2860d4031593ec3964f00e35727c17407a2bbb14a949805846e69ced8973d989f972d856f8dcb15276146edd1ec3867967a126877175e806", 0xbf}, {&(0x7f0000001040)="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", 0x1000}, {&(0x7f0000002040)="ded664845530a32dde7f0162d9975566f575b5b2104332af8a5ac4e9c0ecb7750dfaf788eaae9ff48000acdd79e872b070ee13e7cb1d15787c00fc9c095d6c1c6a8fba3c47af5bc73deb586291a30f8b6306b61c01727bf7bed4016942e78898c1fce28371e0a81f57e65d69685211591ad13f567889f64330e39e0fe07ada7cfb0909fe5a7e4bc5ec8230e7593b18219cea0cc1d227197b5925a377d6717e3acceceb826721a08a6e85a5858c2c6922d7a079479ec73862899a23a0d861ddd6ecb7ca584a245d8d198827c0830000ed0d829e30e9bcba6f9a4418c54a7e2004d60df782e469366f3b285c50c830983bbd6d9ca34a01e9", 0xf7}, {&(0x7f0000002140)="d5d35d8b0bc7da4bd458ec70ae718ddfb6a0a22365f0f30dd2a24465b26ecd7c7f85be48ac701e11e6b18a0a6b901d5b5eb5e9ec797c01", 0x37}, {&(0x7f0000002180)="99e520bebbe83c01110aaf", 0xb}, {&(0x7f00000021c0)="227db7a3af870e65bd0f2dbbcff6db22cf2b246307d9428b493b780243ff42b2f59b2f081c610c8619cfdad8e3862c825aaac7565de5ba8aa80689d247bf522e6a067f40a827a42ba496329d66779bc6d9a8e49032bb3173da57c11a087797eb1a1b706d3a3f70084bc97cab499e8776bdd34684ba520db067698ea6282b88c2d270bd70bebf1f5818771bf83c217fbaf169cc4f0660b5417f1ccbf69d8dddb741c0731941ca6911ee53338b3bbc56004c460b7082ec337fd1212c7276dc52b6d862cbe6fddcfaf19c191384ea2c1ac2a0f50ecb30885677ed5fead39129c441", 0xe0}], 0x6, &(0x7f00000023c0)=ANY=[@ANYBLOB="20000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="23000d0d000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0xc0, 0x4000000}, {&(0x7f0000002480)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000003640)=[{&(0x7f0000002500)="4df081240a4458674bdee6676721effc83b7ad6515352495b92527a1c7aef49eb9d00655022057405870a68ad66bfbd1a66b7d4d081c8dec65f91372718db105430b9b69fa2eb4efa411396a19cfbba00042fdc8184bfab3b4efa2bd68f8f1f574382a88b84be81815f3e3e528d857e3183a77ea7814e78c949aef0c88c5c4b1c508a94183b368acfaf171d8045d4e95954d", 0x92}, {&(0x7f00000025c0)="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", 0x1000}, {&(0x7f00000035c0)="2a50bfe4c4b585252fefaef54e3ed88f2148960ba6df9f04042f65f1053886019af0b228e485e05984dd794be66c807ee01e461089ccbf2c4ae00badddd07aeada3bac626339", 0x46}], 0x3, &(0x7f0000003900)=[@cred={0x20, 0x1, 0x2, r7, r10, r11}], 0x20, 0x48004}], 0x5, 0x1) 07:25:47 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10f) 07:25:47 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}}}) [ 447.540855] FAT-fs (loop4): bogus number of reserved sectors [ 447.574214] FAT-fs (loop4): Can't find a valid FAT filesystem 07:25:47 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b6b6b]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 447.654026] FAT-fs (loop4): bogus number of reserved sectors [ 447.678392] 9pnet: Insufficient options for proto=fd [ 447.686754] FAT-fs (loop4): Can't find a valid FAT filesystem 07:25:47 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ffffff}}}) 07:25:47 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa114) 07:25:47 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:47 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x2c000000}}) [ 447.846426] 9pnet: Insufficient options for proto=fd 07:25:47 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002100)={0x5, &(0x7f0000000000)=[{0xe, 0x7ff, 0x1000, 0x1}, {0x1f, 0xfffffffffffffff8, 0x6cd, 0x80000001}, {0x8000, 0x4, 0x5, 0x2}, {0x1, 0x6, 0x9, 0x200}, {0x2, 0xbd, 0x81, 0x12f}]}, 0x10) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f0000000080)={0x0, 0x0, 0x2080}) ioctl$sock_proto_private(r0, 0x894c, 0x0) 07:25:47 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:47 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffe7}}}) [ 447.904381] FAT-fs (loop4): bogus number of reserved sectors [ 447.936180] FAT-fs (loop4): Can't find a valid FAT filesystem 07:25:47 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x500}}) 07:25:47 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xfcf) 07:25:47 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}}}) 07:25:47 executing program 3: setrlimit(0x408000000000007, &(0x7f0000000000)) ioctl$sock_proto_private(0xffffffffffffffff, 0x894c, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000240)="3be603dac65f97beebc0bb2cb3fd5722e0c59c076da525ab2cdd6b0c81c0d7630572750b69c9beb05875af34ac537cece3b6c49b68aa6a2f7dc451700fdc50ff95f858c8199beb67242c229e607b954952535756c19379fb0ae5d9b7ff7b106e8652b5192a8942daf56aea7e75", 0x6d}], 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0xb}}, 0x20) connect$tipc(r0, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}, 0x1}}, 0x10) getsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000300), &(0x7f0000000340)=0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f00000001c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), r1, 0xdd}}, 0x18) 07:25:47 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 448.054104] FAT-fs (loop4): bogus number of reserved sectors [ 448.066533] 9pnet: Insufficient options for proto=fd [ 448.090691] FAT-fs (loop4): Can't find a valid FAT filesystem 07:25:47 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x6000000000000000}}) 07:25:47 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa11c) 07:25:47 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\xff', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:47 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdfd}}}) [ 448.208997] 9pnet: Insufficient options for proto=fd 07:25:47 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x101000, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000180)={0x29, @broadcast, 0x4e21, 0x0, 'nq\x00', 0x2, 0x1, 0x29}, 0x2c) sendto$unix(r1, &(0x7f00000001c0)="e15fb4db9acf9c552e26d41c55a7270358f4d24d8d329aa0f8c500704864005cd59a335431d9a3b06172ffcd8a8fcbaec339457b9e51f52d0e76c16c6b559c083f54a9e807605bcaefd1fba282ec80b4fae3e71eddced7322dc3e007b115420a3495f77330448d9137d6d689821835c405565840000000000000c9221b61757f8f7e5a7314f059de61c5d4e8e471afdb3229636bf819c82605b869976adc0c61ea", 0xa1, 0x20000084, 0x0, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)) write$P9_RSYMLINK(r1, &(0x7f0000000040)={0x14, 0x11, 0x2, {0xc2, 0xffffffff, 0x5}}, 0x14) ioctl$sock_proto_private(r0, 0x894c, 0x0) 07:25:47 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x60000000}}) 07:25:47 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffffffffffff]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:47 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa106) [ 448.392055] 9pnet: Insufficient options for proto=fd 07:25:48 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000}}}) 07:25:48 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x2}}) 07:25:48 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000100)='/dev/full\x00', 0xffffffffffffffff}, 0x30) r3 = dup3(r0, r1, 0x80000) ioctl$LOOP_CLR_FD(r3, 0x4c01) r4 = semget$private(0x0, 0x3, 0x80) semop(r4, &(0x7f00000001c0)=[{0x4, 0x9ae, 0x1800}, {0x3, 0xffffffff, 0x1000}, {0x4, 0x3, 0x1000}, {0x0, 0x3, 0x5190a28c8886c587}, {0x0, 0x100000000, 0x800}, {0x7, 0x5, 0x800}], 0x6) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)=r2, 0x4) setrlimit(0x408000000000007, &(0x7f0000000000)) ioctl$sock_proto_private(r0, 0x894c, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x80100, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 07:25:48 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:48 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffffffffffff}}}) [ 448.577665] 9pnet: Insufficient options for proto=fd 07:25:48 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:48 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa110) 07:25:48 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ffffff]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:48 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x200000000000000}}) 07:25:48 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) setrlimit(0x408000000000007, &(0x7f00000003c0)={0x2}) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000080)) get_robust_list(0x0, &(0x7f0000000180)=&(0x7f0000000140), &(0x7f00000001c0)=0x18) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000200), &(0x7f0000000240)=0x40) ioctl$sock_proto_private(r0, 0x894c, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x64, 0x101a00) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f00000000c0)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f00000002c0)=':\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)=r2, 0x4) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000280)={0x5, 0x100000001, 0x4, 0x0, 0x8, 0x80, 0x95, 0x1, 0xee, 0xffffffffffffffff}) 07:25:48 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ff}}}) 07:25:48 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa102) [ 448.779944] FAT-fs (loop4): bogus number of reserved sectors [ 448.793339] 9pnet: Insufficient options for proto=fd [ 448.810716] FAT-fs (loop4): Can't find a valid FAT filesystem 07:25:48 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:48 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x3f00000000000000}}) [ 448.893121] FAT-fs (loop4): bogus number of reserved sectors [ 448.898960] FAT-fs (loop4): Can't find a valid FAT filesystem 07:25:48 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000080)=""/131) r1 = socket$unix(0x1, 0x1, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)) ioctl$sock_proto_private(r1, 0x894c, 0x0) 07:25:48 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe7}}}) 07:25:48 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 449.005066] 9pnet: Insufficient options for proto=fd 07:25:48 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:48 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa109) 07:25:48 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x22000000}}) 07:25:48 executing program 3: r0 = socket$unix(0x1, 0x4, 0x0) setrlimit(0x408000000000007, &(0x7f0000000340)) r1 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x7, 0x42000) ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0285628, &(0x7f0000000180)={0x0, 0x5, 0xdf6, [], &(0x7f0000000100)=0x9}) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000000300)={0x0, 0x9, 0x347e98dd, &(0x7f00000002c0)}) sendmsg$nl_route(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@getrule={0x14, 0x22, 0x4, 0x70bd2c, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x10) ioctl$sock_proto_private(r0, 0x894c, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_vif\x00') setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080)={0xffffffffffffff34, 0x0, 0x1000}, 0x4) ioctl$VIDIOC_G_EDID(r2, 0xc0285628, &(0x7f0000000380)={0x0, 0x43, 0x7894, [], &(0x7f0000000140)}) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000200)={@in={0x2, 0x4e21, @multicast1}, {&(0x7f0000000000)=""/20, 0xffffffffffffff9e}, &(0x7f00000001c0), 0x2}, 0x1ac) 07:25:48 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}}}) [ 449.119215] 9pnet: Insufficient options for proto=fd 07:25:48 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe7]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:48 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10c) 07:25:48 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x3000000}}) 07:25:48 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ffffffffffffff}}}) 07:25:48 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)) ioctl$sock_proto_private(r0, 0x894c, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x400140, 0x0) sendmsg$nl_crypto(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@delrng={0x10, 0x14, 0x408, 0x70bd26, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4044000}, 0x40040) [ 449.255891] FAT-fs (loop4): bogus number of reserved sectors [ 449.291716] FAT-fs (loop4): Can't find a valid FAT filesystem 07:25:49 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffffffffffff]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:49 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}}) [ 449.372103] 9pnet: Insufficient options for proto=fd [ 449.379576] FAT-fs (loop4): bogus number of reserved sectors [ 449.394252] FAT-fs (loop4): Can't find a valid FAT filesystem 07:25:49 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa111) 07:25:49 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x6}}) 07:25:49 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\xfb', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:49 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)) ioctl$sock_proto_private(r0, 0x89e8, 0x0) 07:25:49 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfd}}}) 07:25:49 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfd]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 449.566112] 9pnet: Insufficient options for proto=fd 07:25:49 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x2088}}) 07:25:49 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x13a4, 0x80) sendmsg$nl_generic(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4002900}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x21, 0x1, 0x70bd29, 0x25dfdbfb, {0xc}, [@generic="5f31678d5345d2db2c9f722b8c2018178e1606159bdd44f83cb3f6ff", @nested={0xc, 0x26, [@typed={0x8, 0x83, @ipv4=@remote}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40005}, 0x40088c5) setrlimit(0x408000000000007, &(0x7f0000000000)) ioctl$sock_proto_private(r0, 0x894c, 0x0) 07:25:49 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa105) 07:25:49 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe7}}}) 07:25:49 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 449.823230] 9pnet: Insufficient options for proto=fd 07:25:49 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_proto_private(r0, 0x894c, 0x0) [ 449.847087] 9pnet: Insufficient options for proto=fd 07:25:49 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfatl', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:49 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa104) 07:25:49 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:49 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ffffff}}}) 07:25:49 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x7}}) 07:25:49 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) ioctl$VIDIOC_S_FBUF(r1, 0x4030560b, &(0x7f0000000180)={0x2, 0x0, &(0x7f0000000080)="c2c9d9cf60796510bd8249e993d57026e539bb8fdf0f6706246943c6662de34bc68942f689442292e1920f36c2e51c6ba1d263d17f5452c72dc79d79c280d7e729d5f6a8e50a60b760c54423134e12df0ca1643585e582765069c01ddba8eb296033c96dee1eaa7af4529f8044c01ab56eb731f5f0ef1ee68df3c765ef18e0e8e8c54b0f1896f07db071f7ad2f491a1569d5a420da157b238e617f228ca488c61426240ad41817c7fdd1b785e5ac0bec347ed869b33334aced1ec69f79f4dc536e82da3e34319ea508be6816b4d69ade863c4f0b824a5de0e28aecc59af53b0f3b9c859be5a0ed0fe3faaa8c", {0x9, 0x3, 0x4c314356, 0x0, 0x6, 0x4, 0x0, 0x1ff}}) setrlimit(0x408000000000007, &(0x7f0000000000)) ioctl$sock_proto_private(r0, 0x894c, 0x0) [ 450.041728] 9pnet: Insufficient options for proto=fd 07:25:49 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}}}) 07:25:49 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b6b6b00000000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:49 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa118) 07:25:49 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x400000000000000}}) 07:25:49 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) mlock2(&(0x7f0000fef000/0xe000)=nil, 0xe000, 0x1) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0x15}, 0x20, 0x1, 0x1, 0xe, 0x1, 0x7f}, &(0x7f0000000140)=0x20) setrlimit(0x408000000000007, &(0x7f0000000000)) ioctl$sock_proto_private(r0, 0x894c, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x40002, 0x0) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000080)={&(0x7f0000ff1000/0x1000)=nil, 0x1f, 0x0, 0x4, &(0x7f0000ff2000/0x1000)=nil, 0x47f7}) 07:25:49 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat&', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) [ 450.229449] 9pnet: Insufficient options for proto=fd 07:25:49 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}}) 07:25:49 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffe7}}}) 07:25:49 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x88200000}}) 07:25:49 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa117) 07:25:49 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:50 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/autofs\x00', 0x3f1e00, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1, &(0x7f0000000580)=0x1, 0x4) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000740)={&(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0], 0x6, 0x4000000000000224, 0x199, 0x2}) accept4$bt_l2cap(r1, 0x0, &(0x7f0000000780), 0x800) r2 = dup2(r1, r1) r3 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000004c0)={0x0, 0xc, 0xfa00, {0x0, &(0x7f0000000540)={0xffffffffffffffff}, 0x13f, 0x5}}, 0xfffffffffffffe24) r5 = getpgrp(0xffffffffffffffff) sched_setparam(r5, &(0x7f0000000900)=0x5) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f0000000500)={0xa, 0x4, 0xfa00, {r4}}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/video36\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f0000000200)={0x8, 0x120, 0xfa00, {0x4, {0x4, 0xff, "c0f93abdaec14b4970b1b8ac2bd82048b0682887737118e72084e5dddba3beb64918bc7d9972ad83381e8403f819fc7fcdd83193cc47b126be62fea4f9f29000a653b25b8d7c14ca0abb894640f917b251cbf52906f366828adcf1ecf3784cbcb2183b71103e7cd2befcd4a371df00cbf1cf3e10f342cf623162faf5d275376f82137717b890cc2411a9a5644673b51916c138bbc53ab90ba8108e091d0da181257fb7bf7d16119e9002d6da8a5df92ebbbe2eeaf6a13e0e52f1adc7fd87b779b1e1c43ecd69570a2f7aba6d2e2d67e98ba1fc480824a3baa77de0e09dbc82bffde1413ecacb3356412141ef38b8f08d9bac9765fcbcc0f95152b043eed10297", 0x1, 0x400, 0x100000000, 0x91f, 0x1c2172fa, 0x2, 0x6, 0x1}, r6}}, 0x128) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000340)={0x0, 0x3}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f00000003c0)={r7, 0xa220}, &(0x7f0000000400)=0x8) setrlimit(0x408000000000007, &(0x7f0000000000)) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xfff) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000800)={0x7, 0x8, 0xfa00, {r6, 0x81}}, 0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000440)={r8, 0x4, 0x0, 0x7}, 0x10) r10 = dup3(r1, r0, 0x80000) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r3, 0x0) accept$nfc_llcp(r1, &(0x7f0000000840), &(0x7f00000008c0)=0x60) write$RDMA_USER_CM_CMD_BIND(r10, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x7, 0x9, {"d27573c5a06bf7b1ff0d6120e7b37cbc"}, 0x20, 0xf9, 0x1}}}, 0x90) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f00000005c0)={0xb83c, 0x3, "b7de774388bd41932fcd10029776f152369e20bf58bb6859175de52a1b67cbce", 0x9, 0x2, 0x1, 0x5, 0x200}) ioctl$sock_proto_private(r0, 0x100000000000894c, 0x0) [ 450.445421] 9pnet: Insufficient options for proto=fd 07:25:50 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}}}) [ 450.487662] 9pnet: Insufficient options for proto=fd 07:25:50 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x0f', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:50 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0xffffff7f}}) 07:25:50 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa163) [ 450.556053] audit: type=1400 audit(1545377150.146:61): avc: denied { map } for pid=23062 comm="syz-executor3" path="socket:[72519]" dev="sockfs" ino=72519 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=unix_dgram_socket permissive=1 07:25:50 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = dup(r0) getsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000040)=""/59, &(0x7f0000000080)=0x3b) setrlimit(0x408000000000007, &(0x7f0000000000)) ioctl$sock_proto_private(r0, 0x894c, 0x0) [ 450.615550] 9pnet: Insufficient options for proto=fd 07:25:50 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ffffff]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:50 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa116) 07:25:50 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000}}}) 07:25:50 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x1000000}}) 07:25:50 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x0, 0xcd88}, 0x8) setrlimit(0x408000000000007, &(0x7f0000000000)) ioctl$sock_proto_private(r0, 0x894c, 0x0) 07:25:50 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:50 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) [ 450.880203] 9pnet: Insufficient options for proto=fd 07:25:50 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)) ioctl$sock_proto_private(r0, 0x894c, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x7fffffff) 07:25:50 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10e) 07:25:50 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffffffffffff}}}) 07:25:50 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x4000}}) [ 451.000255] FAT-fs (loop4): bogus number of reserved sectors 07:25:50 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:50 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}}}) [ 451.059460] FAT-fs (loop4): Can't find a valid FAT filesystem [ 451.114154] 9pnet: Insufficient options for proto=fd 07:25:50 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x305500, 0x0) poll(&(0x7f0000000100)=[{r1, 0x1000}], 0x1, 0xe395) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000140)={0xffff, 0x1}) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x1, 0x4) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x800, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x698) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000340)={0xa00000, 0x74dae441, 0x5, [], &(0x7f0000000300)={0x9b090f, 0x1, [], @p_u32=&(0x7f0000000180)=0x6}}) fsetxattr$security_evm(r0, &(0x7f0000000040)='security.evm\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xf, 0x3) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x4e23, 0xf07e, @mcast1}, {0xa, 0x4e24, 0x5, @loopback, 0x8000}, 0x1, [0x66e5, 0x1, 0x3f, 0x0, 0x2, 0xffffffffffff0001, 0x9, 0x10000]}, 0x5c) ioctl$sock_proto_private(r1, 0x894b, 0x0) 07:25:50 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa11b) 07:25:50 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0xedc000000000}}) [ 451.169234] FAT-fs (loop4): bogus number of reserved sectors [ 451.191318] FAT-fs (loop4): Can't find a valid FAT filesystem 07:25:50 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:50 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}}) 07:25:50 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:50 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10d) 07:25:50 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)) ioctl$sock_proto_private(r0, 0x894c, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x4e22, @empty}}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x10200, 0x0) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f00000000c0)=0x1) [ 451.361111] 9pnet: Insufficient options for proto=fd 07:25:51 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfd}}}) 07:25:51 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b6b6b]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 451.416819] 9pnet: Insufficient options for proto=fd 07:25:51 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x2000000}}) 07:25:51 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10b) [ 451.471359] FAT-fs (loop4): bogus number of reserved sectors [ 451.477452] FAT-fs (loop4): Can't find a valid FAT filesystem 07:25:51 executing program 3: r0 = open(&(0x7f0000000040)='./file0\x00', 0x20700, 0x50) finit_module(r0, &(0x7f0000000140)='procsystem.wlan1#vmnet0(selinuxmime_type\x00', 0x2) r1 = socket$unix(0x1, 0x1, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)) ioctl$sock_proto_private(r1, 0x894c, 0x0) 07:25:51 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ff}}}) 07:25:51 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:51 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa125) 07:25:51 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)) ioctl$sock_proto_private(r0, 0x894c, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1, 0x10000) accept4$packet(0xffffffffffffff9c, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@empty}}, &(0x7f0000000200)=0xe8) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000340)=0x1) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@dev={0xfe, 0x80, [], 0x13}, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x4e20, 0xa1, 0x7, 0x0, 0x2, 0x80, 0xa0, 0x3f, r2, r3}, {0x8000, 0x0, 0x0, 0x0, 0x20, 0x4, 0x6, 0x2b5}, {0x4, 0x8, 0x20, 0x3}, 0x400, 0x6e6bbe, 0x1, 0x0, 0x2, 0x3}, {{@in=@multicast1, 0x4d4, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x4, 0x2, 0x1000, 0x1, 0x5, 0x591}}, 0xe8) r4 = getpid() syz_open_procfs(r4, &(0x7f0000000380)='task\x00') [ 451.608138] FAT-fs (loop4): bogus number of reserved sectors [ 451.614883] FAT-fs (loop4): Can't find a valid FAT filesystem [ 451.645459] 9pnet: Insufficient options for proto=fd 07:25:51 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:51 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x4000000}}) 07:25:51 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7}}}) [ 451.742847] 9pnet: Insufficient options for proto=fd [ 451.749765] 9pnet: Insufficient options for proto=fd 07:25:51 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x3}}) 07:25:51 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}) [ 451.890005] FAT-fs (loop4): bogus number of reserved sectors 07:25:51 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffe7]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:51 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa113) 07:25:51 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x8000, 0x404000) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x9, @mcast1, 0x800}}}, &(0x7f0000000140)=0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0x400, 0x2, 0xb41, 0x1, r1}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)) ioctl$sock_proto_private(r2, 0x894c, 0x0) [ 451.932462] FAT-fs (loop4): Can't find a valid FAT filesystem [ 452.008414] 9pnet: Insufficient options for proto=fd [ 452.018483] FAT-fs (loop4): bogus number of reserved sectors [ 452.024537] FAT-fs (loop4): Can't find a valid FAT filesystem 07:25:51 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x2088ffffffff}}) 07:25:51 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdfd}}}) 07:25:51 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:51 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa11e) 07:25:51 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x20000, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x208008000) setrlimit(0x408000000000007, &(0x7f0000000000)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$sock_proto_private(r0, 0x894c, 0x0) 07:25:51 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b6b6b00]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 452.188948] 9pnet: Insufficient options for proto=fd 07:25:51 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe7}}}) 07:25:51 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x500000000000000}}) [ 452.290178] FAT-fs (loop4): bogus number of reserved sectors [ 452.321004] FAT-fs (loop4): Can't find a valid FAT filesystem 07:25:51 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}}}) 07:25:52 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x400200, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x50010, r1, 0x180000000) ioctl$sock_proto_private(r0, 0x894c, 0x0) 07:25:52 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa119) [ 452.373575] FAT-fs (loop4): bogus number of reserved sectors [ 452.380414] FAT-fs (loop4): Can't find a valid FAT filesystem 07:25:52 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 452.446568] 9pnet: Insufficient options for proto=fd [ 452.453554] 9pnet: Insufficient options for proto=fd 07:25:52 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x7f', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:52 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}}}) 07:25:52 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4000, 0x0) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f0000000100)) setrlimit(0x8, &(0x7f0000000040)={0x3}) ioctl$sock_proto_private(r0, 0x894c, 0x0) 07:25:52 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x2000}}) 07:25:52 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:52 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa107) 07:25:52 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa115) 07:25:52 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000080)=0x1, 0x4) r1 = dup2(r0, r0) r2 = socket$unix(0x1, 0x1, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)) ioctl$sock_proto_private(r2, 0x894c, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) [ 452.797211] 9pnet: Insufficient options for proto=fd 07:25:52 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\t', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:52 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0xfffffff6}}) 07:25:52 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ffffffffffffff]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:52 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa103) 07:25:52 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ffffffffffffff}}}) 07:25:52 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x80, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000001f80)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000380)=""/136, 0x88}, {&(0x7f0000000200)=""/93, 0x5d}, {&(0x7f0000000440)=""/220, 0xdc}], 0x3, &(0x7f0000000580)=""/197, 0xc5}, 0x5}, {{&(0x7f0000000680)=@sco, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000840)=""/118, 0x76}, {&(0x7f00000008c0)=""/39, 0x27}, {&(0x7f0000000900)=""/89, 0x59}, {&(0x7f0000000980)=""/241, 0xf1}, {&(0x7f0000000a80)=""/136, 0x88}, {&(0x7f0000000b40)=""/251, 0xfb}], 0x6}, 0x2}, {{&(0x7f0000000cc0)=@generic, 0x80, &(0x7f0000001e40)=[{&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/246, 0xf6}], 0x2, &(0x7f0000001e80)=""/61, 0x3d}, 0x3}], 0x3, 0x40000003, &(0x7f0000001fc0)={r2, r3+30000000}) r4 = open(&(0x7f0000000040)='./file0\x00', 0x2000, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000140), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'veth0_to_bond\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000800)={&(0x7f0000000740)={0x1d, r5}, 0x10, &(0x7f00000007c0)={&(0x7f0000000780)=@can={{0x3, 0x9, 0x0, 0x5}, 0x6, 0x3, 0x0, 0x0, "c2cb8982c121e6d2"}, 0x10}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) setrlimit(0xf, &(0x7f0000000100)={0x7, 0x4}) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000280)=""/135, &(0x7f0000000340)=0x87) getpeername$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000001c0)=0x10) ioctl$sock_proto_private(r1, 0x894c, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000000080)) [ 453.059817] 9pnet: Insufficient options for proto=fd 07:25:52 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat8', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:52 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0xffffff8c}}) 07:25:52 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0xe7ffffffffffffff]}) 07:25:52 executing program 3: syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x9, 0x200200) r0 = socket$unix(0x1, 0x5, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)) ioctl$sock_proto_private(r0, 0x894c, 0x0) [ 453.260885] 9pnet: Insufficient options for proto=fd 07:25:53 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0xffffff7f00000000}}) 07:25:53 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0xffe7]}) 07:25:53 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)) ioctl$sock_proto_private(r0, 0x894c, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x4000, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000080)=0x80000000) 07:25:53 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:53 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa108) 07:25:53 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:53 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0xe7]}) 07:25:53 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x7, 0x400100) clock_gettime(0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000440)=[{{0x0, 0x7530}, 0x12, 0x0, 0xf1ce}, {{0x0, 0x7530}, 0x1f, 0x6, 0x8}, {{r2, r3/1000+30000}, 0x3, 0xfffffffffffffffe, 0x4}, {{r4, r5/1000+10000}, 0x4, 0x100, 0xfffffffffffff800}, {{0x0, 0x7530}, 0x5, 0x6d, 0x3ff}, {{0x77359400}, 0x0, 0x9, 0x81}, {{r6, r7/1000+30000}, 0x14, 0x1, 0x200}, {{}, 0x0, 0xf64f, 0x3fe0000000000000}, {{r8, r9/1000+30000}, 0x14, 0x20, 0x3}, {{r10, r11/1000+30000}, 0x2, 0x7, 0x5}], 0xf0) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) ioctl$sock_proto_private(r0, 0x894c, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) syncfs(r0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f00000002c0)=[r12, 0xee00, 0xffffffffffffffff, 0xee00, 0x0]) setregid(r12, r13) ioctl$KVM_GET_TSC_KHZ(r1, 0xaea3) r14 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x101400) ioctl$NBD_DISCONNECT(r14, 0xab08) [ 453.497575] 9pnet: Insufficient options for proto=fd 07:25:53 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:53 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa11d) 07:25:53 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x2c00000000000000}}) [ 453.662387] block nbd3: NBD_DISCONNECT 07:25:53 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x200000000000000]}) 07:25:53 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 453.685078] block nbd3: NBD_DISCONNECT [ 453.693898] FAT-fs (loop4): bogus number of reserved sectors [ 453.711736] FAT-fs (loop4): Can't find a valid FAT filesystem 07:25:53 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha256-avx2)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 453.771620] FAT-fs (loop4): bogus number of reserved sectors [ 453.777714] FAT-fs (loop4): Can't find a valid FAT filesystem [ 453.806612] 9pnet: Insufficient options for proto=fd 07:25:53 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r1, r1, 0x0, 0xa10a) 07:25:53 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') io_setup(0x0, 0x0) r1 = eventfd(0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) dup3(r1, r0, 0x0) ftruncate(0xffffffffffffffff, 0x0) write$P9_RSTATFS(r0, &(0x7f0000000180)={0x43}, 0x43) fsync(0xffffffffffffffff) 07:25:53 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0xffffffffffffffe7]}) 07:25:53 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x4}}) 07:25:53 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:53 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdfd]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:53 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0xffffffe7]}) [ 454.010164] FAT-fs (loop4): bogus number of reserved sectors 07:25:53 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x40000, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r1, 0xc0385720, &(0x7f0000000080)={0x1, {r2, r3+30000000}, 0x0, 0x7b5c6bef}) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r5 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r5, r4, 0x0, 0xa10a) 07:25:53 executing program 3: seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_execute_func(&(0x7f0000000180)="0faef24029450ff3440f1157f1d1b4b4c16a3e5481bcbc85d04e92d9f4150f6323230ff7c6") [ 454.055595] FAT-fs (loop4): Can't find a valid FAT filesystem [ 454.077241] 9pnet: Insufficient options for proto=fd 07:25:53 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x8cffffff00000000}}) 07:25:53 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0xfdfdffff]}) [ 454.150865] FAT-fs (loop4): bogus number of reserved sectors [ 454.171318] FAT-fs (loop4): Can't find a valid FAT filesystem 07:25:53 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:53 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:53 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x482200, 0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x400080, 0x160) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0x8, 0x20, 0xfffffffffffffffe}) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r3, r2, 0x0, 0xa10a) ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f00000000c0)) [ 454.318800] 9pnet: Insufficient options for proto=fd 07:25:53 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0xfdfd]}) [ 454.360107] 9pnet: Insufficient options for proto=fd 07:25:54 executing program 3: seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_execute_func(&(0x7f0000000180)="0faef24029450ff3440f1157f1d1b4b4c16a3e5481bcbc85d04e92d9f4150f6323230ff7c6") 07:25:54 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x300000000000000}}) 07:25:54 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe7]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 454.441300] FAT-fs (loop4): bogus number of reserved sectors [ 454.461703] FAT-fs (loop4): Can't find a valid FAT filesystem 07:25:54 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0xfffffffffffffdfd]}) 07:25:54 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000000)={0x1, 0x0, 0x103, 0x4, {0x400, 0x8, 0x4, 0x7}}) sendfile(r2, r1, 0x0, 0xa10a) [ 454.569639] FAT-fs (loop4): bogus number of reserved sectors 07:25:54 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:54 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0xfdfdffff00000000]}) [ 454.610892] FAT-fs (loop4): Can't find a valid FAT filesystem [ 454.638552] 9pnet: Insufficient options for proto=fd 07:25:54 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0xf6ffffff00000000}}) 07:25:54 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) ioctl(r0, 0x6, &(0x7f0000000080)="be648b6df71f8d7a7a113a671b07ff7eaeddfeeb719135d8f9943cd4210cccc08e69b0f01241772e0edba5562de0a18f8366") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/sockcreate\x00') write$P9_RWALK(r1, &(0x7f0000000000)={0x71, 0x6f, 0x1, {0x8, [{0x0, 0x0, 0x6}, {0x0, 0x1, 0x1}, {0x38, 0x0, 0x1}, {0x1, 0x0, 0x4}, {0x0, 0x4, 0x6}, {0x5, 0x1, 0x8}, {0x8, 0x3, 0x8}, {0x50, 0x0, 0x3}]}}, 0x71) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f00000000c0)={0x1, 0x0, 0x102, 0x1, {0x9, 0x9, 0x909, 0x8}}) sendfile(r2, r1, 0x0, 0xa10a) 07:25:54 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:54 executing program 3: seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_execute_func(&(0x7f0000000180)="0faef24029450ff3440f1157f1d1b4b4c16a3e5481bcbc85d04e92d9f4150f6323230ff7c6") [ 454.792602] 9pnet: Insufficient options for proto=fd 07:25:54 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x7000000}}) 07:25:54 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0xfdfdffffffffffff]}) 07:25:54 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:54 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x30040, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x2, 0x8000, 0x5, 0x100000001, 0x0}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x9}, &(0x7f0000000180)=0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(aegis128l-generic)\x00'}, 0xd175b021057ee14) sendfile(r0, r1, 0x0, 0xde57) r4 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r4, r3, 0x0, 0xa10a) [ 454.954009] 9pnet: Insufficient options for proto=fd [ 454.962533] FAT-fs (loop4): bogus number of reserved sectors [ 454.979097] FAT-fs (loop4): Can't find a valid FAT filesystem 07:25:54 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0xffffffff88200000}}) 07:25:54 executing program 3: seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_execute_func(&(0x7f0000000180)="0faef24029450ff3440f1157f1d1b4b4c16a3e5481bcbc85d04e92d9f4150f6323230ff7c6") [ 455.063376] FAT-fs (loop4): bogus number of reserved sectors 07:25:54 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0xe7ffffff]}) 07:25:54 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 455.120252] FAT-fs (loop4): Can't find a valid FAT filesystem 07:25:54 executing program 1: r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) write$binfmt_misc(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="73797a302a5a0711b8b3ee8dbefa6c98c91d27c7cac4a2d9b23e00800000b7202d7ebd7fba5ee04f8daa16bef0fb6a681867d23ecc5cc995c5e08fbc16ba2ec4f9346e06cff39ee0002b651ce97efae6de69deaf01dfe60fdde5ddc25daafb2d25927a4ef9a81c1624f8bc2f13eee7cb7d8bc24f9e30529098814dbb52e001919650d910e613cf9bb28a4f155102c0dd691d1b840000000000000000"], 0x71) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r3 = accept4$alg(r1, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xfc, r4, 0x16, 0x80000000, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe0}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1b}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1e}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x64, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf53}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4}, 0x4) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000240)={&(0x7f0000000440)=""/152, 0x8000, 0x800, 0x6}, 0x18) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000140)={0xce7, 0x7e, 0x4, 0xffffffff}) sendfile(r3, r2, 0x0, 0xa10a) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000300)) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000006c0)={0x0, 0x80000000}, &(0x7f0000000700)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000740)={r5, 0x81}, 0x8) sendto(r1, &(0x7f0000000000)="7bdaa7726dd91b6b74fbc6663bdb4d4e6101ad48a0467e61d6b9ee30921544b6fbbbdeafdd93ce99a60e8e6c357117cd08cff8244fc5fe48f27b05e700393f8ebeb3a6a99767cc8e1e0592ad8c3e709fa2d27d281bfcf44d83b9f9", 0x5b, 0x4000040, &(0x7f0000000080)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x80) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000340), 0x8) [ 455.187399] 9pnet: Insufficient options for proto=fd 07:25:54 executing program 3: syz_execute_func(&(0x7f0000000180)="0faef24029450ff3440f1157f1d1b4b4c16a3e5481bcbc85d04e92d9f4150f6323230ff7c6") 07:25:54 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat9', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:54 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x4000000000000000}}) 07:25:54 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0xe7ff]}) 07:25:54 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 455.370619] 9pnet: Insufficient options for proto=fd 07:25:55 executing program 3: syz_execute_func(&(0x7f0000000180)="0faef24029450ff3440f1157f1d1b4b4c16a3e5481bcbc85d04e92d9f4150f6323230ff7c6") 07:25:55 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) io_setup(0x446, &(0x7f0000000000)) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x10042) sendfile(r2, r1, 0x0, 0xa10a) 07:25:55 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0xf6ffffff}}) 07:25:55 executing program 3: syz_execute_func(&(0x7f0000000180)="0faef24029450ff3440f1157f1d1b4b4c16a3e5481bcbc85d04e92d9f4150f6323230ff7c6") 07:25:55 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0xfffffdfd]}) 07:25:55 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\xfd', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:55 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 455.626537] 9pnet: Insufficient options for proto=fd 07:25:55 executing program 3: seccomp(0x0, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_execute_func(&(0x7f0000000180)="0faef24029450ff3440f1157f1d1b4b4c16a3e5481bcbc85d04e92d9f4150f6323230ff7c6") 07:25:55 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x300}}) 07:25:55 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') dup3(r1, r1, 0x80000) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x80800) sendfile(r2, r1, 0x0, 0xa10a) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x8000, &(0x7f0000000040)=0x2) 07:25:55 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x100000000000000]}) 07:25:55 executing program 3: seccomp(0x0, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_execute_func(&(0x7f0000000180)="0faef24029450ff3440f1157f1d1b4b4c16a3e5481bcbc85d04e92d9f4150f6323230ff7c6") 07:25:55 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 455.863088] 9pnet: Insufficient options for proto=fd 07:25:55 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0xc0ed0000}}) 07:25:55 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0xffffffff00000000]}) 07:25:55 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:55 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) sendfile(0xffffffffffffffff, r1, 0x0, 0xa10a) [ 455.982709] 9pnet: Insufficient options for proto=fd 07:25:55 executing program 3: seccomp(0x0, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_execute_func(&(0x7f0000000180)="0faef24029450ff3440f1157f1d1b4b4c16a3e5481bcbc85d04e92d9f4150f6323230ff7c6") 07:25:55 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x2c}}) 07:25:55 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x1000000]}) 07:25:55 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x5) 07:25:55 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 456.150324] FAT-fs (loop4): bogus number of reserved sectors [ 456.179183] FAT-fs (loop4): Can't find a valid FAT filesystem 07:25:55 executing program 3: seccomp(0x1, 0x0, 0x0) syz_execute_func(&(0x7f0000000180)="0faef24029450ff3440f1157f1d1b4b4c16a3e5481bcbc85d04e92d9f4150f6323230ff7c6") [ 456.280172] 9pnet: Insufficient options for proto=fd [ 456.293652] FAT-fs (loop4): bogus number of reserved sectors [ 456.309107] FAT-fs (loop4): Can't find a valid FAT filesystem 07:25:55 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x5000000}}) 07:25:55 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x2000000]}) 07:25:55 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000040)=0x1e) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) sendfile(r2, r1, 0x0, 0xa10a) 07:25:56 executing program 3: seccomp(0x1, 0x0, 0x0) syz_execute_func(&(0x7f0000000180)="0faef24029450ff3440f1157f1d1b4b4c16a3e5481bcbc85d04e92d9f4150f6323230ff7c6") 07:25:56 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x81', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:56 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ff]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 456.535761] 9pnet: Insufficient options for proto=fd [ 456.570423] 9pnet: Insufficient options for proto=fd 07:25:56 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x2]}) 07:25:56 executing program 3: seccomp(0x1, 0x0, 0x0) syz_execute_func(&(0x7f0000000180)="0faef24029450ff3440f1157f1d1b4b4c16a3e5481bcbc85d04e92d9f4150f6323230ff7c6") 07:25:56 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:56 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r3}}, 0xc) sendfile(r2, r1, 0x0, 0xa10a) 07:25:56 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x8cffffff}}) 07:25:56 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:56 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0xe7]}) 07:25:56 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:56 executing program 3: seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x0, 0x0}) syz_execute_func(&(0x7f0000000180)="0faef24029450ff3440f1157f1d1b4b4c16a3e5481bcbc85d04e92d9f4150f6323230ff7c6") [ 456.843414] 9pnet: Insufficient options for proto=fd 07:25:56 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000000)={r1, 0x20, 0x0, "76566fcb2d79ca45ee089c5503f23d5d71493e1e2674b6a70d1fe45185fac7210bd8b7c10de453d600099a30216ea4d786f34aa875888a41c6bd8957e8779f5973604d837af89d45a52fd78647"}) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) 07:25:56 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x2200}}) [ 456.942133] FAT-fs (loop4): bogus number of reserved sectors [ 456.947999] FAT-fs (loop4): Can't find a valid FAT filesystem 07:25:56 executing program 3: seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x0, 0x0}) syz_execute_func(&(0x7f0000000180)="0faef24029450ff3440f1157f1d1b4b4c16a3e5481bcbc85d04e92d9f4150f6323230ff7c6") 07:25:56 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0xffffffffffffffe7]}) [ 457.050271] FAT-fs (loop4): bogus number of reserved sectors [ 457.073813] 9pnet: Insufficient options for proto=fd 07:25:56 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 457.097634] FAT-fs (loop4): Can't find a valid FAT filesystem 07:25:56 executing program 3: seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x0, 0x0}) syz_execute_func(&(0x7f0000000180)="0faef24029450ff3440f1157f1d1b4b4c16a3e5481bcbc85d04e92d9f4150f6323230ff7c6") 07:25:56 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\xc0', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:56 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) write$P9_RREADDIR(r1, &(0x7f0000000000)={0x87, 0x29, 0x1, {0x5, [{{0x2, 0x2, 0x4}, 0x7fffffff, 0x21, 0x7, './file0'}, {{0x2, 0x0, 0x6}, 0x5, 0xae, 0x7, './file0'}, {{0x2, 0x0, 0x6}, 0x4, 0x9, 0x7, './file0'}, {{0x1, 0x2, 0x2}, 0x100000000000, 0x5e683582, 0x7, './file0'}]}}, 0x87) 07:25:56 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x60}}) 07:25:56 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x200000000000000]}) 07:25:56 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) readahead(r0, 0x7f, 0x400) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r1 = getpgid(0xffffffffffffffff) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x7) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r0, 0x0, 0xa10a) 07:25:57 executing program 3: seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x0, &(0x7f0000000040)}) syz_execute_func(&(0x7f0000000180)="0faef24029450ff3440f1157f1d1b4b4c16a3e5481bcbc85d04e92d9f4150f6323230ff7c6") [ 457.396527] 9pnet: Insufficient options for proto=fd 07:25:57 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:25:57 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x2200000000000000}}) 07:25:57 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0xfdfdffffffffffff]}) 07:25:57 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:57 executing program 3: seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x0, &(0x7f0000000040)}) syz_execute_func(&(0x7f0000000180)="0faef24029450ff3440f1157f1d1b4b4c16a3e5481bcbc85d04e92d9f4150f6323230ff7c6") 07:25:57 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0xe7ffffffffffffff]}) 07:25:57 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x80800) geteuid() sendfile(r2, r1, 0x0, 0xa10a) 07:25:57 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 457.643462] 9pnet: Insufficient options for proto=fd [ 457.714750] FAT-fs (loop4): bogus number of reserved sectors 07:25:57 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0xffffffff00000000}}) 07:25:57 executing program 3: seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x0, &(0x7f0000000040)}) syz_execute_func(&(0x7f0000000180)="0faef24029450ff3440f1157f1d1b4b4c16a3e5481bcbc85d04e92d9f4150f6323230ff7c6") [ 457.759955] FAT-fs (loop4): Can't find a valid FAT filesystem 07:25:57 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x100000000000000]}) 07:25:57 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mlockall(0xfc) r1 = dup(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x2}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000004c0)=ANY=[@ANYBLOB="77000000da933eeef487f0aa6f216b3585d0f1e8d93d15c7664e2faf400506145b185a5d89c3ecedae98df0a331d11bde55d9fa24def6132f984da5e9038e6f484aeb760dccdcf08b6dc50b9e49a3946716c364da4b910a0c007c95a77572a04f6fc82f5f713c70b39bc70db9eb5c2d78a42f5acf6b24f333ea70a"], &(0x7f0000000400)=0x1) unshare(0x40000000) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000300)) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000180)={{0x9}, 'port0\x00', 0x0, 0x50, 0x6, 0x0, 0x0, 0x1, 0x101, 0x0, 0x4, 0x3ff}) socketpair(0x0, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x208000}, 0xc, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB="01002cbd7000fedbdf250a00000008000400010100004b34975cd9b861c814ba2b06e891298dac15b927f600937eb675464c5ccd423f7c97503d8e520cf9c832fc5d4aad7cbe5becddcab3b44cb1326ca527cba8989727bf3445be7e28ec17297ddab4e124e7acc4da5a98db77c6342ff58fb6a76e9a01a7f733fbd5951fe87cb921a3df32cc3097e63b511234c7d7657678e591bab628d1ffb1ecd02398eba5128be9574d8e5346e025fa5f9e75bbc3507eda63ddd36510c90cfb6b4b848e890edf36d73e1aee5171cf2e3676171e"], 0x1}, 0x1, 0x0, 0x0, 0x40000c0}, 0x40000) tkill(0x0, 0x8) accept$inet6(r3, 0x0, &(0x7f0000000480)=0x330) ptrace$getenv(0x4201, 0x0, 0x8000, &(0x7f00000003c0)) wait4(0x0, &(0x7f0000000200), 0x0, &(0x7f0000000000)) ioctl$int_in(r3, 0x5473, &(0x7f0000000100)=0xed4) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000240)=0x1ff) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r5 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r5, r4, 0x0, 0xa10a) [ 457.838150] FAT-fs (loop4): bogus number of reserved sectors [ 457.877251] FAT-fs (loop4): Can't find a valid FAT filesystem 07:25:57 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x6) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0x50, &(0x7f0000000100)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)=r2, 0x4) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) lseek(r3, 0x0, 0x3) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)=r2, 0x4) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000200)={0x3, [0x0, 0x84e6, 0x80]}, &(0x7f0000000340)=0xa) [ 457.893662] 9pnet: Insufficient options for proto=fd 07:25:57 executing program 3: seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x50000}]}) syz_execute_func(&(0x7f0000000180)="0faef24029450ff3440f1157f1d1b4b4c16a3e5481bcbc85d04e92d9f4150f6323230ff7c6") 07:25:57 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\xff', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:57 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x20000000}}) [ 458.000337] sched: DL replenish lagged too much 07:25:57 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0xffffffff00000000]}) 07:25:57 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000140)={0x0, 0x8, 0x3, [], &(0x7f0000000100)={0x990a90, 0x10001, [], @ptr=0xfffffffffffffffe}}) r1 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x0, 0x2) getpeername$inet6(r0, &(0x7f0000000080), &(0x7f0000000200)=0x1c) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000540)={0x2, 0x9, 0x1, {0x3, @sliced={0x40c, [0x80000001, 0x800, 0x0, 0x0, 0x4c, 0x8000, 0x2, 0x0, 0x601, 0x8c, 0x3ff, 0x2, 0xfffffffffffffff7, 0x7, 0xfff, 0x4, 0x7fffffff, 0x401, 0x7f28, 0x1, 0x7fff, 0x20, 0x6, 0xfff, 0x0, 0x6, 0x81, 0x1, 0x7, 0x40, 0x0, 0x7, 0x4, 0x400, 0x6, 0x0, 0x3f, 0x3, 0x1, 0x3d9, 0x0, 0x3, 0x5, 0x9, 0x6, 0x9, 0x6, 0x2], 0x6a}}}) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000002c0)={r3, 0x81}, 0x8) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) lseek(r4, 0x0, 0x3) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e23, 0x1, @ipv4={[], [], @loopback}, 0x8}, 0x1c) 07:25:57 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x40000}}) [ 458.075183] IPVS: ftp: loaded support on port[0] = 21 [ 458.078210] 9pnet: Insufficient options for proto=fd [ 458.239945] 9pnet: Insufficient options for proto=fd 07:25:57 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x600}}) 07:25:58 executing program 3: seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x50000}]}) syz_execute_func(&(0x7f0000000180)="0faef24029450ff3440f1157f1d1b4b4c16a3e5481bcbc85d04e92d9f4150f6323230ff7c6") 07:25:58 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0xfdfdffff]}) [ 458.550976] IPVS: ftp: loaded support on port[0] = 21 07:25:58 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) lseek(r1, 0x0, 0x3) 07:25:58 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x7f, 0x280300) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x40, 0x0) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000240)=0xffffffff00000001, 0x4) ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f0000000140)={0x1d01, 0xffffffffffffff00, 0x0, 0x3, 0x2, 0x9, 0xffffffffffffffc1}) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @rand_addr=0x10001}, 0x10) fcntl$setstatus(r0, 0x4, 0x400) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa10a) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000000)={0x5, 0x9, 0x100, 0x9, 0x81}) 07:25:58 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0xfffffdfd]}) [ 458.679430] 9pnet: Insufficient options for proto=fd 07:25:58 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x6b6b6b00}}) 07:25:58 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:58 executing program 3: seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x50000}]}) syz_execute_func(&(0x7f0000000180)="0faef24029450ff3440f1157f1d1b4b4c16a3e5481bcbc85d04e92d9f4150f6323230ff7c6") 07:25:58 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0xe7ffffff]}) 07:25:58 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb}) socket$l2tp(0x18, 0x1, 0x1) lseek(r1, 0x0, 0x400000000000001) 07:25:58 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) [ 458.840725] 9pnet: Insufficient options for proto=fd 07:25:58 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x5}}) 07:25:58 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x4, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0xf, @sliced={0x3, [0x9, 0x9, 0x1000, 0x3, 0x4, 0x4, 0x0, 0x200, 0x7, 0x8, 0x7, 0x40, 0x7f, 0x6, 0x5, 0x9, 0x110, 0x5, 0x3, 0x1, 0x7, 0x6, 0x0, 0x7ff, 0x3, 0x7, 0x3, 0x3f, 0x800, 0x7, 0x8, 0x6, 0x1, 0x9, 0x7ff, 0x1, 0x80000000, 0x8, 0x5, 0x6, 0x5, 0x1, 0x3, 0x6, 0x1f, 0xff, 0x6d0a0a21, 0x1f], 0x3}}) epoll_create(0xea) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @empty, 'yam0\x00'}}, 0x1e) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f00000001c0)={0x0, 0x80000, 0x84cf, &(0x7f0000000180)=0x9}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) getpeername$tipc(r0, &(0x7f0000000100)=@id, &(0x7f0000000140)=0x10) lseek(r2, 0x0, 0x3) [ 459.020102] FAT-fs (loop4): bogus number of reserved sectors 07:25:58 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f00000000c0)={{0x3, 0x6, 0x0, 0x1, 'syz0\x00', 0x400}, 0x6, 0x2, 0x7f, r2, 0x0, 0xad, 'syz0\x00', &(0x7f0000000040), 0x0, [], [0x2, 0x7, 0x8, 0xc6d]}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x5, 0x10, 0x5d, 0x8000}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000200)={r3, 0x0, 0x4}, &(0x7f0000000240)=0x8) bind$unix(r1, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) r4 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r4, r1, 0x0, 0xa10a) 07:25:58 executing program 3: seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000000040)=[{0x6}]}) syz_execute_func(&(0x7f0000000180)="0faef24029450ff3440f1157f1d1b4b4c16a3e5481bcbc85d04e92d9f4150f6323230ff7c6") [ 459.065587] FAT-fs (loop4): Can't find a valid FAT filesystem 07:25:58 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x1000000]}) [ 459.114162] FAT-fs (loop4): bogus number of reserved sectors [ 459.138054] 9pnet: Insufficient options for proto=fd 07:25:58 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x600000000000000}}) [ 459.166846] FAT-fs (loop4): Can't find a valid FAT filesystem 07:25:58 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x3, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) lseek(r1, 0x0, 0x3) 07:25:58 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x02', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:58 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x0, r2}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$rds(r1, &(0x7f0000000a80)={&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/157, 0x9d}, {&(0x7f0000000200)}, {&(0x7f0000000240)=""/3, 0x3}, {&(0x7f0000000300)=""/14, 0xe}, {&(0x7f0000000340)=""/20, 0x14}, {&(0x7f0000000380)=""/59, 0x3b}, {&(0x7f00000003c0)=""/201, 0xc9}, {&(0x7f00000004c0)=""/98, 0x62}], 0x8, &(0x7f0000000940)=[@cswp={0x58, 0x114, 0x7, {{0x8, 0x6}, &(0x7f00000005c0)=0x200, &(0x7f0000000600)=0x370, 0x5, 0x0, 0x5c56, 0x13, 0x0, 0x3}}, @fadd={0x58, 0x114, 0x6, {{0x2, 0x2}, &(0x7f0000000640)=0x3, &(0x7f0000000680)=0x7fffffff, 0xbd, 0x3, 0x9, 0x3, 0x0, 0x8}}, @rdma_args={0x48, 0x114, 0x1, {{0x7f, 0x7f}, {&(0x7f00000006c0)=""/158, 0x9e}, &(0x7f0000000900)=[{&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/129, 0x81}], 0x2, 0x0, 0x2}}, @rdma_dest={0x18, 0x114, 0x2, {0x4, 0x5}}], 0x110, 0x4044055}, 0x4) sendfile(r3, r1, 0x0, 0xa10a) 07:25:58 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0xfdfd]}) 07:25:59 executing program 3: seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000000040)=[{0x6}]}) syz_execute_func(&(0x7f0000000180)="0faef24029450ff3440f1157f1d1b4b4c16a3e5481bcbc85d04e92d9f4150f6323230ff7c6") [ 459.525486] 9pnet: Insufficient options for proto=fd 07:25:59 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) accept4$alg(r0, 0x0, 0x0, 0x0) 07:25:59 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x18, &(0x7f0000000040)=0x1ff, 0x4) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb}) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000140)={0x0, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x14}}, 0x40, 0x0, 0x0, 0x0, 0x800, &(0x7f0000000100)='yam0\x00', 0x8000, 0x5, 0x3ff}) socket$l2tp(0x18, 0x1, 0x1) lseek(r1, 0x100000000000000, 0x1) 07:25:59 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x2000000]}) [ 459.718384] audit: type=1326 audit(1545377159.306:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=24028 comm="syz-executor3" exe="/root/syz-executor3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a4ca code=0x0 07:25:59 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x2000000000000000}}) 07:25:59 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:25:59 executing program 3: seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000000040)=[{0x6}]}) syz_execute_func(&(0x7f0000000180)="0faef24029450ff3440f1157f1d1b4b4c16a3e5481bcbc85d04e92d9f4150f6323230ff7c6") 07:25:59 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000000)={0x4, 0x9, 0xf849, @empty, 'ip6tnl0\x00'}) [ 460.085915] 9pnet: Insufficient options for proto=fd 07:25:59 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000040)={0x5957db82, 0x0, 0x1015, 0x2f3f, 0x3, 0x9, 0x0, 0x1}) lseek(r2, 0x0, 0x3) [ 460.138666] FAT-fs (loop4): bogus number of reserved sectors 07:25:59 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0xffe7]}) [ 460.193726] audit: type=1326 audit(1545377159.786:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=24050 comm="syz-executor3" exe="/root/syz-executor3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a4ca code=0x0 [ 460.256165] FAT-fs (loop4): Can't find a valid FAT filesystem 07:25:59 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x40000000}}) 07:26:00 executing program 3: seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_execute_func(0x0) [ 460.372244] FAT-fs (loop4): bogus number of reserved sectors 07:26:00 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) r3 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100), 0x0, 0x0) keyctl$get_keyring_id(0x0, r3, 0x1) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 460.428007] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:00 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0xe7ff]}) 07:26:00 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000180)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:26:00 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) [ 460.619951] 9pnet: Insufficient options for proto=fd 07:26:00 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0xedc0}}) 07:26:00 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0xfffffffffffffdfd]}) 07:26:00 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000100)={0xbbb, "014f1d6719e35825937ac0c85156649f66f72e5f440b6b483aac6e6b2800eeb9", 0x3, 0x1, 0x7, 0x8, 0x5010800, 0x2}) ioctl(r1, 0x1000008912, &(0x7f0000000180)="0a5c2d023c12629f718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:26:00 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000080)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000000)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r3 = accept4$alg(r0, 0x0, 0x0, 0x80800) sendfile(r3, r2, 0x0, 0x37a3) [ 460.869953] FAT-fs (loop4): bogus number of reserved sectors [ 460.875993] 9pnet: Insufficient options for proto=fd [ 460.899890] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:00 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x2c00}}) 07:26:00 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$KVM_S390_UCAS_UNMAP(r2, 0x4018ae51, &(0x7f0000000040)={0x9, 0x8, 0x80000001}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:26:00 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x2]}) [ 461.003144] FAT-fs (loop4): bogus number of reserved sectors [ 461.029012] FAT-fs (loop4): Can't find a valid FAT filesystem [ 461.121357] 9pnet: Insufficient options for proto=fd 07:26:00 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:26:00 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) ioctl$TIOCNOTTY(r1, 0x5422) 07:26:00 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x3f00}}) 07:26:00 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0xfdfdffff00000000]}) 07:26:00 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000100)={0x4, &(0x7f0000000040)=[{}, {}, {}, {}]}) 07:26:00 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha256-avx2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) [ 461.422211] 9pnet: Insufficient options for proto=fd [ 461.442322] FAT-fs (loop4): bogus number of reserved sectors [ 461.453263] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000210001000000000000000000020000000000000000000000040000000c001400974f5a8223b72c871bef7840cbbb206f873e80a431fef57d9f3a31720558c37e0487f3e27a0cc62794e3619ef3fdbfb3648832e831bba54af6a14c8a5e49313a81bbfc57f9ea2325a21adcc88b3b784825a1a3317d875b66acce07f5d571e697a77e855d7370ae5278b4ace61a513c", @ANYRES32=0x0, @ANYRES32=0x0], 0x3}}, 0x0) 07:26:01 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x805, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000100)={0xb, 0x10005, 0x0, 0x100000001, r0}) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000000)={0xff, 0x0, 0x7}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:26:01 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0xffffffe7]}) 07:26:01 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x4a0202, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000006c0)='te\x00?\x00') r1 = socket$alg(0x26, 0x5, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000480)=0xf8) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') unlinkat(r2, &(0x7f0000000240)='./file0\x00', 0x200) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) getsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000300)={@local, @multicast2, @remote}, &(0x7f0000000340)=0xc) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f00000003c0), &(0x7f0000000440)=0x68) accept4$alg(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000380)={0x200, 0xa, 0x9, 0x3, 0x7, 0x81, 0x55, 0x10000, 0x6af1985d, 0x7, 0x101}, 0xb) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000040)) sendfile(r2, r2, 0x0, 0x804) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x81, 0x0, 0x80000000, 0x16e, 0x4, 0x5, 0xf056, {0x0, @in={{0x2, 0x4e23, @rand_addr=0xffffffff}}, 0xca6, 0x3, 0x2, 0x100000000}}, &(0x7f0000000140)=0xb0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800104}, 0xc, &(0x7f0000000600)={&(0x7f0000000780)=ANY=[@ANYBLOB="88000000", @ANYRES16=r4, @ANYBLOB="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"], 0x88}, 0x1, 0x0, 0x0, 0x4010}, 0x4000) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x80000000, 0x7f, 0x1, 0x1000, 0x3ff}, 0x14) 07:26:01 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x22}}) [ 461.539639] FAT-fs (loop4): bogus number of reserved sectors [ 461.545760] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:01 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:26:01 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0xffffffe7]}) [ 461.721392] 9pnet: Insufficient options for proto=fd 07:26:01 executing program 1: r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x60, 0x20000) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)='\x00') r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384-generic\x00'}, 0x373a0149) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000080)={0x3e6, 0x0, 0x8, 0x7fff}, 0x8) r3 = accept4$alg(r1, 0x0, 0x0, 0x0) sendfile(r3, r2, 0x0, 0xa10a) 07:26:01 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000140)=[{r1}], 0x1, 0xb7) close(r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) 07:26:01 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x100000000000000}}) 07:26:01 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000640)={{{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000740)=0xe8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}}, 0x4, 0x100000000, 0xf8f5, 0x9, 0x3ff}, &(0x7f0000000040)=0x98) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYBLOB="dc0000003251ef211dda4ee0854515ebec5ca325c5b88a365c0a3a19c25fdce3d5ba70162baab901abfcdb1021259aa20bf9e6390567358f2f7e70e8ddf864e00ccb4139b12866cbea15d86a0fa80b381473c0ffd5eeafb1989e680558d19ada3a0d3c0e143898ac08f6e4d65aef8dbd35c7b8a0942e2fa47691f2e27a1f281528e342bc90ca02d245f281ba4b02e916b2a9bc084a87d3e6e578f1ec183ea9bc0e80b38d90c6da2d3d716c9983cbf8520fc6f26598760e623178ad583c42ac035ec046e98cc942f2e2318c044e511aa20c"], &(0x7f00000000c0)=0xe4) sendto$packet(r0, &(0x7f0000000100)="f86e5a84456b0d91fa4e078ca150257f6d1c277545f340bfdf78b111ba2f81ede0e87f69057bf704ef55b61c5bf12bd9002bab3153729dfda421ebef24eb85bd9998732cac3ebeadf62ab403f01234611c5250591da226f133a61cf70eb372d240fc763948f7b3205cae05ac9be0821a60ddc61a36712c523a49dba33198cc696f87f9ec485697f667995fcc660d271b39db9d331261524b6de6500e0bcabd69b60873edb056bf5ab9685bd9911c37d046253185595232d98e4dc2663e13ecc6a4a545e788c8f5f149a7492ee3ba32e7421a400bc0f922beb1a7ab1c434d69be62c3", 0xe2, 0x0, &(0x7f0000000780)={0x11, 0xf6, r1, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r4 = socket$inet6(0xa, 0x80000, 0x3) ioctl(r4, 0x1000008912, &(0x7f0000000340)="0a5c050000006285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@remote, @in6=@local, 0x4e24, 0x0, 0x6, 0x8, 0x2, 0x80, 0x20, 0xbf, 0x0, r2}, {0x0, 0x6, 0x8, 0xffffffffffff0000, 0xf8a, 0x9, 0x8000, 0x8}, {0xfffffffffffffffd, 0x100000001, 0x8, 0x82f}, 0x9, 0x6e6bb1, 0x1, 0x1, 0x2, 0x3}, {{@in=@empty, 0x4d4}, 0xa, @in6=@dev={0xfe, 0x80, [], 0x1b}, 0x3503, 0x6, 0x0, 0x6, 0x0, 0x8001, 0xffffffff}}, 0xe8) ioctl$KDENABIO(r0, 0x4b36) r6 = socket$l2tp(0x18, 0x1, 0x1) lseek(r5, 0x0, 0x3) r7 = getpid() fcntl$setownex(r6, 0xf, &(0x7f0000000200)={0x0, r7}) [ 461.929538] FAT-fs (loop4): bogus number of reserved sectors [ 461.966875] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:01 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0xe7ffffff]}) 07:26:01 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000040)={{0x100000001, 0x5}, 0x1, 0x0, 0xb6ec, {0x3bd7}, 0x9, 0x8}) r1 = socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendfile(r2, r2, 0x0, 0xa10a) [ 462.018338] 9pnet: Insufficient options for proto=fd [ 462.051124] FAT-fs (loop4): bogus number of reserved sectors [ 462.071381] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:01 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x6000000}}) 07:26:01 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat`', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:26:01 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) ioctl(r0, 0x5, &(0x7f0000000100)="81e7fa28febef421e318b330fb9ebaec2d1ebe67ab92cfe1688262b30adaab6169cb6de95bd29a6f3cd3e0ac07837a7dd269dd9ef51c4b4276d8789242efb26d1753d2219efcb1b853cd35babf8a3f8d61f384bd113b6f3bb884e9828093850372b769c15b992c82286631836a43077aad30fd829653a867e4939b607c67e8d93cb98ba85e8cf567f0ce5ec5c769adb56fae4a930e585751bb25175d63e740133874da9788fb798b6505a3354beac1bc95081ad019516da7071ac85d794e8af4b5a5e1") write(r0, &(0x7f00000003c0)="1fafd7931c29e0427bea42587bdd0ef105f153b0666a11dcb65801f0e3f569acc721b7173497d2ba3bdb1a7df5ee9fe0c85a130169d6efb4a4344977e11dbb1bbb1329da5fc174500cd800ab9f3133d61ee1128de4c404191cd9ce7bb178774f544160a7e505772129dedde7c6fd98693f503d681cbd0d5d824234d1233acef117ed602522ea9bd5fd1401685e94b38c2eda3ed52f990b9004a2bf2d110ac8252af39ffb778d85f189e356097631ff707f", 0xb1) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000480)="0a5c2d023c700000160000") ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000340)={0x5, &(0x7f0000000200)=[{}, {}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000380)={r1, 0x3}) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @rand_addr=0x5}, 0x4, 0x1, 0x0, 0x4}}, 0x2e) lseek(r2, 0x0, 0x3) ioctl$KDDISABIO(r0, 0x4b37) 07:26:01 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0xc01, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000240)={r0, r2}) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r4 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r4, r3, 0x0, 0xa10a) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000100)={0x2, r3}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x22b8}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000080)={r5, 0x3}, &(0x7f00000000c0)=0x8) setns(r0, 0x0) 07:26:01 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000140)=[{r1}], 0x1, 0xb7) close(r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) 07:26:01 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x1000000]}) 07:26:02 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x3f000000}}) 07:26:02 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x2000000]}) 07:26:02 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) write$binfmt_misc(r1, &(0x7f00000001c0)={'syz1', "0a92f37cde18ec59a23fbb238b9d1fe29a5d6deba8802e7481460221df7f6631d33c6859f6571db37a39bcd443c1393d8fa83aec0b3a3b962349c8b4f502d4e576efa53690f6a4c0a68ff3c61cfeb3cfc0c5a6962677dfbca56c9bb86692b1f2a23277aa8018c4f0595af77f8ccfee9a9fc90cb6e383f83afff282ac"}, 0x80) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000100)=""/135) lseek(r2, 0x0, 0x3) 07:26:02 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0xa10a) 07:26:02 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) [ 462.553700] 9pnet: Insufficient options for proto=fd 07:26:02 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001780)=0x0) r3 = getuid() stat(&(0x7f00000017c0)='./file0\x00', &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001880)={0x0}, &(0x7f00000018c0)=0xc) getresuid(&(0x7f0000001900), &(0x7f0000001940)=0x0, &(0x7f0000001980)) r7 = getgid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001a00)={0x0, 0x0}, &(0x7f0000001a40)=0xc) r10 = getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001e40)={0x0}, &(0x7f0000001e80)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000001fc0)=0xe8) stat(&(0x7f0000002000)='./file0\x00', &(0x7f0000002040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f0000002180)=[{&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001700)=[{&(0x7f0000000180)="07e61845089a670d536aed5f1d5022840eb72d869a942415e4ecd0015e9d79d90776767b5310b021c5adde67b071f9b47524ebb2e0644bf80d021d1497fdd31a09838c71fc73ae51d2babcdcfc8cc0d13d5fdb924a30f41cc5dd29d10995cd91586e157f6b98b4903e1cefcdbaa01a214d4a36ae892156d84d5ac71c4629cb8a7b111e8fa04af4978c6115378f43c006ee84894fdfc9", 0x96}, {&(0x7f0000000240)="68b783fa9d5438376cd6ffa2816279bf7cef54713d633aff0b6f5aa2a7ffa8662d15c987b8fce192a0a4ddec65be698553257f46a8e7739ec2dbb816346c0862601fae3788d6bb009dfa21ade728e224cd76e924ee4b8497211e02b32d4b8f85a569193d2d543a70460f25ffb7b19c91292891bdde013618a01a045e8ffa8cec63932cb427ab51383325ec45e90cbb4ec0703082a52de2526bfc96c1fdb008dea955230278476e48d3e3e422026f92384d1af7f1caf6c816cf6d9878e0e7467215ce1a15a1b59407c08e159b99c920b9e686a6efe854f914fb6c", 0xda}, {&(0x7f0000000440)="3c9a58311fb24cb25460ac6da21591944d0ead42240a3e02785de5c4eadf15f56af4328fb66859de82747517ae699941612266ceed7d46016e3ec83097992c6c7af24dd5c34c0a9bedc5d917577d62d99c27cf91f40e37bf205c157d0e76f76a04c4f2b7dec58d3326ee236f69dd5f26218a718a8ce894bee81a4307a0e24356d033c68749938424de8e9dc41f850dfb41f20f3f77680ea4360e05df9c7408a3d77a16c4659a799f5ec34bebdb285942849eee9fdd7d716fe2f4a3be2c8c813a106ca9510dfb29765ec2be22540d43593d", 0xd1}, {&(0x7f0000000340)="8b61561f83149a4ae58ced27c4764d7b8f7c9be660feae2f157533e0ed3bb06074ec6a3825c44c344728a9c0afad0c89e7e44469c25b708a76c03497f302483698d0244666c984981f8279dc8c5a11cb57bc07121c81e07135e753c3473cafef6cb2f419b0bfd4", 0x67}, {&(0x7f0000000540)="9a8e5d26ff90a0f7131393c6adddb00332e1fdb80f3da37ded25bc3a0f10c5e09eb8b1e98297ad3a3803499b6d330caec0eb02912607ef6e084e3a1573adbe49a7e1f9fcf2290d8686e8f61f8719074364a6cf8fafb6dcbbd1e75fde9a0c1ec12d0ca4a7202509fe210b85c8aeaabd89d9c60c5dcd3c43ac426013fd8626a3f25cc54ae7fe0d4d1506482ae2929edfda74a91d3539203b32e975fbf6e4dd24073a8fe9c34c6280c98eab5af35ba96fe4449fc356a0750c4d5a9c1c799fc83474042d6cda9e448c291416895ef772208c12b67cfd6d7db96a89714b14c76c2138bee5a0d1ac9d599b486bb4af9c687d4284e96fc4a72bc24886", 0xf9}, {&(0x7f00000000c0)="504e0aaec73a0aba517e098153aaadb77f6267459363af160d85368fdf670da7c11a0298d46f7c55ea2feff030418569a7b126", 0x33}, {&(0x7f0000000700)="c75f2ba6a1eb3db0602f5f581321a42bdf3421dc6f484c8ac2b02d2217588a080360cae0a75388f427bf501fb334afde991c657303e656beac39f5f189809ac9347338143441be41679b45bd21b4f3de8bff15ab01d0e0694f366cf00302197e50bc718af6e2d3ee636de93281233145dde4bc83b4bf56c80498ba036232037b81f903c3cb8f6dc4b960d3f71d78871b19d91a060f85ecb96067647af08db689cb5b797bc2fd98f60b2d1d24fea1c72222264f7b78e3e1e83409371b7a6492fb8c993837ffb0bbcc7f4ff981f56b69495fbc3f37a85d2ee7fc886366c33d8eb575bb1ac66a74ba796efaecc68b11064211bba0f56a7bf8a2c37d3238da362fc871c48b83ff1336960b0a01c734a0330146d82a8363a8fd5a3141a0943f67e5ec678f248d8e6462fd4a9701d61cb1e6e72e03f06bd7ba671bbad59c0122e615ac97a85a08f0f00b13f9bb4abbd227394bb2b60ae54f6c4408dcd5cf526ce2a0f570b10704190a1f1b7ec3e42b39aae4137b42e57e117ccbca0dea86f076e5c900d58d9a993f85a6b5a69ea4d9c48f3fa823a11e0cc2ec9af28d680b9180f73f9479e7165db252e6ffb7e68d076d4d530070ca69c791c846c2d89dccfdff734be4575c468aad6159ddde18e75c23b4f37bbed8fcb9018d5b16bfdaf86966390a2ca0ff324c8402fa4b609b5097dac86bfb8f13ffa7ef7e8a44d8666c0c539dc882407f395a5ff3ed43b78ae95371981bd0991d62e51e487feb45a7737f09b889a2c6ee04eccbeaa6d88e828fab4307a1efa7b90d2e0fe20e0fb4c9f9691caf1596fe3c8927fab72274c37cef9e99f755920281d849f92032917ca16c7012471300aade5dabd18c1da4373b2ee373110d802a918e774d6695e2cbabe5fc84c4b3e87345228dd29971f2895e093a2425c3621d3a009e7f964453ef9c8f2d5a5e59731b5bb6534d802d028ed3262c4674d5ca938e92172e93bb363623d6910a87cca3bde1545faa64b6a92fc2d04d2030b929c914e0fa49042a5d75991b498e26307575c29cc7486e52157693d216e2ed552406ba0542d271bc5bb3c516412590523656088fc1a487749572f58b6bae1ac0eba88ffab13e41dc214deea564b80394a769d2556195da14fe3a3f2968ea7202e85f0625ac49fad1a360f1e953e8d1bc16abc17f77a2c95c7d0aa190847b23f226519f31f3a2f359e5f2f6b5c9d5c9bfc7578d05d85d2fb73d9c7e68a01046485ad8d461c154cfe74fe6d8d06e4a59fd750f4f1e1cdbaf63df79cd8201ad6bace2eb63b1fa4839b42bc8265f2c203ad25a0b7743f18e8ba93e0e3957615593aa0b2a264106c092890ad75d25920fe669457c9b93ac214dae3af91b4f103cee9a47e6a26066dc752fc494b6b24632ea318eb664ad1f80f0bad0fc1a73e0d9cdce541793ce5fb3e361e07e8124520d2182ce0b1c18b794b871734141cc848f7891c300bfcf208aeb494d333ef28adffaff1848ef19a813971ebb39344bc818ac7f5380658b56eff1f0d4d932a98fa2f59fa2e79253aaaf4446323fb189c41c53cc4b2aaa686ff62d0d34e476ade32243a532a58bfa90e78f371170dc492662f19959e4b9732420dc1afde50ffd725999e90f48ddc02dabfaa775d276831375eb49a52e1c7d2dffeabf18a872369fb1c201aa1e758bacb16aae78a8b7c5f82375cdd4dce4c13c12c01c25df7ba96aa8699455ea88d11392dd37c046064099a41c6694d70a12e112b72f79e5de17d3d4efd70d8d083032ff4d68b8229ef0d76cf64d4fc8b6022db5c543a96c8b48cd3f3341eaafcee71ce0e1e5efb4a4ae6ac6e3ec165d9e34464a50efa89718d2d60b5c1c4ea5551f79854095790f038b12bb9823c82d28ea62ad3df59454557ed9ef4922f4151d2dd4c542076668ab488b7df71aa65decd4251b6b9ff9f755f2af556e8a2354ba6c0df76bc37f2970e15cfee22f4ec1a03c38d1c3b085001640022af699032b3a1b09fe35db553d0e78e8e55c8149166e890a287d9e0867bbca6ce53202f466ae931ff65b68c9b939f7b2c2a3e9534a4f682d9f0b50a06e5d819bc1e23c2462e2bc1f6cc9feb8a3481cb9b1f1c36d2a4b4925e27a2d1d9917748af3a19276e3f527ee907596a94668e0c53e81d1c3713e03786cb47930df82ca10123e5159c70ca790b85f0351e2c4ed9e61e93e6c10f0d4a7ae69ebbd4dd937bd51302968b1f04a5694f98ae8c3e6290fc5a5a302f105bbfcefb404292fc24abefded26d92cda486b53670ef1aec83558a7be9d3a88e47de0b7262385e88cfe56acffc626c275a469de8cdfe13ac4da8227e7318be324daf6f941b8f6be1bfac156fdfa773eda4950d0ef7eeaba4bdf59aeaa4a1a69b7910bfaef0ab588e69e1bdd84ff69db6918384f6eb0ddb9f180e6c0b17d2d9fcf1d8a4c048f4d40671c1af668d58fde44e04fbdd71cc17cb884e38c5b3c21ded506ddfc86c7e3c8a1ba75539a010b4aea78f4208aefff931c2ae9763c47c092602227d8508e3f1c7d0791883f2cf038fcebb4e21a2c22e7a47aee86df132e3d8948ba51d484e3cd8c2f9607f53f28f4e2046784e52a31c38e73dbdab7c50073c3d25d0dc47270c7dbb9fefe9cb3310b2138bb4a576d26c8209ab6b44a3cef902f08fe3096117a7df795758be9a84d086f005dc29d16d72a97f7c539991524c4f6bcefbacd3476f90d9ae5de4336d6e1029e60368ebac8f94a2eb65979c627a0283df68ec684d3403824cea2d19f5f37968c564d01557261d0711b13f72a5c56b08e33a4ee68a732aca0d5554ad4d2e70bdd15f50f84b9bd22c31afd25b697301b7db1126e5c1cd7bcbaafda255e685cf9df0513d8dc04f241899fd2d5e41779d3f5a072be9357bb5e88101b7930ad6e26801982411a4778142fc9357192763fa02a8bc033bb9b80683f3cd0c3047610faa8b4844f8d282be946e088cb6269743e08e6e1b202c3483719667d6c2da9f59bb162d2a36db9d8a7a1f87fd06024700e9aa56fc3884ca99230acf506a304fb38bfc05d34e8f33f6b96f65fca55b93edd16aec7ad5b64b1625448f66201c6140f4c50e845b5f85c221d608b824627dc9dff8d143bb8ea8a44082ba47f52f302e993905e9cb7339b7691cc8c400b2743b577447d70873eff60271e1bd91eedd2fb1a6cc083cfa36b0c2fc8bc87d5b7f6c202d656ad0642d4b8e31918f79df572796b4ea190591667b615695a243fc820ed05d9f41e8d64ea905c6724d23ec080910c440f229c4c483b4549c299a6d07d8cb0cd1e128e5aae952e25320a0170bb1ff0e862dcf43753054ccc980de4e24b16d7a43b4b3355cae65f997b8ad6ac53ed332971d1b196e073218fa3c42dc00918c28ab361e38936e0392937abc098215bc27dbf9be670f12380b78c0834e18d44f21195e217b5806f029deb9ef34a9b42449b94f1df1ff2243d2f00bb62758ae66c5a145bb57cd416201cfc3eb35149155849e58162810b24fabd76e06ee2220be7c4276f17352a31eb1cb5358e1397441239e29448b1d5f72560b830fde2e38eead539f4f9c9b006f20d0bf25eb7ba942239651175008c036f3c93df1f3e1eaf70fa142564994f8c85b83af984775eac4453db4a91ef355cac6f5f4f2e95700fc5b03377cacef9e9119a93976b8ddb5ba2a5dda2cb4c7c72b02b4be9a2318b39d10256bff9ccf40eb426f1f77540dc2a1ceb7d174f25975386316f60a15080498ea5e704296df569843d09d4729be68a3244cccda85b9d66a96e9bc92200394ce683b07b3766d93160517a907e44db35f87661230b439ec64f8a694e076788a429264d97b528560b8bbb9b2e6458103c493ffd81148e24750ea0ec5d63245fe3bac70d6ece0b133cd1efc41ae46a1ae2cc45f80f6357a0c0274ae70befcdf1adf3dae73df8f9132a3f1bc2baf712f230ded31aefed56ecce667d8f511a3b54b92136741efc0044952e13bce5d32227b240cf97cc59ff0fe05812f94620c72cd5f0c1c46388904f5c7bc7497d3c01908b7b8533031a35db28b1cd22694f6150de31f953e3e5a004608bc823e8de14abf7877393b0d6608209780f4b30bf952ee10410090a7b3ab6f3baab03ae2022e28c8e9dc7835171a93ab246d7afa4f028975750575b2857f0cb8cdc799c3add1f2934495fa5b28a6b25fdf85f5f73ca5bb3da34c19479d52afe60cb153ffa5b54bccd9bf8ff2e959c789b2e7fc8ee6e70d2c7fda0e00a4a6e5d9f454badf5857f22607a63f3debf2f94f35df8f8fb71ae0cf4612810c5e3c6a25e13e8da568b0f354987cbc65cea1d515940d7252f81f95e8af32ecf6bc16c0dea63bc43a36350ac0307b8d79f07243f53a5f32bc8f52d0f76673eae018330fafd0e47875ab70c3f0ed3550c145e8874bc33f84660208f7b60b57a2dcccb3cce36bdbf812009f67217970ac9e371a3739c1ea84326fcc41bf19c99f74925ed07c2b308cfa81d427235e05a9af9b197636219fa32439031a83dc11591524b5abad545dd423d804bca3c35f322a7a4c9a1f7d7c51bcec616f12c8b085871a799204cefefd4a050f5779f574c11ba1029b030cf2bb6907ba4e361b59f216d23fe20b5a402f264d5f9a31793cb493ca8b118cb3a0f6dad2ed166a511f59a5ab7f18fe66dee773dd7a7a7835585345364aa162dc762f041df2f395c971f81efb3f6a90cf56e3c7d3fbd439e8874425d8f377aadd6c01f6702470a74107586e2b343f62e17bfd895e3d8f9556f77a206a2445844e41a37554b65ff19f6104e052888c8907fedef5952506e4e7aa46883b999a24bc50fdabc75c318a98cb507c92707d28658047b654eae05eb8868f2f758064619bbf92897d4f33334f943e32b480d132aab963633d41cad2d71c42fc72e740b87f7af2ca48d5e7dc39018d8c3ac04556a1ac0a33079bd9e64bf3bdeb9f4b0122f9720ae6ace31fa88a862c84c7103e35c347d4cd9730833802939f193165db1678c53a7e28d6c51f36eeef3a02d733df444d74a4bcd5806af04b6a825c5dcef8845cd6241998b82dc44eafe097d620ae242075d4b969bfcd454974d168c2c91d88cbe5dabee1284413f697f8dccedd6c0f984b6a4e624a885d704534611483754270fbb4a43f0cc5b7d7f3d86cc45a26c2dbf70c26481af87e5bc6d39237ae20867a41d7053b1db627d4a0f2aefc783060808b23e0c22c61f6263540eee675a777a84cd71935d256d2a376a7527530454614353e0a31402068a055841b3bdc94623f2f757c34f7c62a89e91fb04fcaac94778d0369b007614ce59fc4a661fa174125de7a0f595af3afdb78504a6fc73c53766c8ccac4167dae2435c79e4d466fd5666c1dd0b1b45f495ba8c3ceed132f744cf91272d58a886e691969869ce6b15b960a61062be8492b85d284fbfe628de781a6db237112ada2856a50f322e92d90df998d8f079fcb27476047015ace236da7f2332a49129180c88a5283fe4b811d06731e4764dcaba7a725e0b38a12fa5429e4d93f2eb7321e1b1d2a130e2726ace1d0050f19edd47a666ac212fcc87d777a4225c2e974f64d7c0a89f616a755ac6276fb4851796d795e9460852e49571375319b0498db394e4cc3d0dba8098e96e98989f46a32ef817d80b81ca7b4d4934124c49a8329ef70610224a94a7486fd8213545f9b3a902cad622245139a6fa788dc3354efa8038a3efaede0bec162ebf60fe9dbfdf76601ec56ea586f7ff11948d9a95f9b949b6b8c582bab0fa592aa671741e85aa1c389ebf54429cbe3886d65d901fce", 0x1000}, {&(0x7f0000000640)="ce97161d00d116c0fe26843ce43299d33cf1a21613168bc65759d20be023fa26eb65091bcec7136f8a8161b09ef5849806ff28d39b7dd8fde91ab2ff3d7dfdcf71239723", 0x44}], 0x8, &(0x7f0000001a80)=[@rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @cred={0x20, 0x1, 0x2, r2, r3, r4}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}], 0x100, 0x800}, {&(0x7f0000001b80)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001c00)="700e65d531104178721241a1b1c2e6016676072262503e22048be45ee5751bf15549c086b75bc3a0a377a70f1efcbfeb929b09bb613e324be4bdfd85b57d3b20fb539cbd1973964d26c6f3317d4b0c7b16996a86ea7913e12d1836de26261790e077a2f7ec00be583e1ba98f08477c6b299c9791a10792925d8f2a14bdc10fb52c9972560a1005a28fdf5718f7484eef0eb1efed7f9614d2ae0a035a11e8a0e6a9e26493e52ff77f92b9", 0xaa}, {&(0x7f0000001cc0)="98cbe417737e8d58454afbd6106143a4a3e817e039f468f97f2e7b5bce8690481337cae2e6c382ecc4c7bbe3a9304c9bfe3dd07a61a641fb8384fb5a10aeb2374ae76bdce9b69c7c87727478e83ee559fe9868f5ac2737f5211de87498f648e446084c77ad1b1f56c9f9b0100ab18844dfbafdda71f8d19db09a723450d58c90836c22027794552d00ca9bc2d8bda1c2c8fe89c1b4bf5af40839abd9a7f34c8035", 0xa1}, {&(0x7f0000001d80)="a931a8aa2fa256ae2564b311f4ac2b", 0xf}, {&(0x7f0000001dc0)="f17ee98ba86fc8ae30976fdcd055633252f1452b65c9b33a2f3925801b2a7ede3450da8d68efeeaff915e006dd4d43b7732720d003c9141b3c4a901b8be1", 0x3e}], 0x4, &(0x7f00000020c0)=[@rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r11, r12, r13}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}], 0xa0, 0x4000000}], 0x2, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 07:26:02 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000140)=[{r1}], 0x1, 0xb7) close(r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) 07:26:02 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0xe7]}) 07:26:02 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb}) socket$l2tp(0x18, 0x1, 0x1) lseek(r0, 0x0, 0x3) 07:26:02 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='attr/sockcreate\x00') bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0xfffffd2f) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r3) sendfile(r2, r1, 0x0, 0xa10a) [ 462.776633] FAT-fs (loop4): bogus number of reserved sectors [ 462.808677] FAT-fs (loop4): Can't find a valid FAT filesystem [ 462.836309] 9pnet: Insufficient options for proto=fd 07:26:02 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x9, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 462.880149] FAT-fs (loop4): bogus number of reserved sectors [ 462.903753] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:02 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfatt', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:26:02 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0xffffffffffffffe7]}) 07:26:02 executing program 1: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000000280)='fdinfo\x00') bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) [ 463.016159] 9pnet: Insufficient options for proto=fd 07:26:02 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) 07:26:02 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000140)=[{r1}], 0x1, 0xb7) close(r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) 07:26:02 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in=@multicast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000000080)=0xe8) getresuid(&(0x7f00000000c0), &(0x7f0000000280), &(0x7f00000002c0)=0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@loopback}}, &(0x7f00000005c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000700)={{{@in6, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@empty}}, &(0x7f0000000600)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000800)={{{@in, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000640)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000900)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000680)=0xe8) getresgid(&(0x7f0000000a00)=0x0, &(0x7f0000000a40), &(0x7f0000000a80)) fstat(r0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000b40)={{}, {}, [{0x2, 0x5, r1}, {0x2, 0x2, r2}, {0x2, 0x1, r3}, {0x2, 0x2, r4}, {0x2, 0x2, r5}, {0x2, 0x4, r6}, {0x2, 0x4, r7}, {0x2, 0x3, r8}], {}, [{0x8, 0x4, r9}, {0x8, 0x0, r10}], {0x10, 0x5}, {0x20, 0x1}}, 0x74, 0x2) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 07:26:02 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r1, r1, 0x0, 0xa10a) 07:26:02 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x100000000000000]}) 07:26:02 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x04', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) [ 463.339997] 9pnet: Insufficient options for proto=fd 07:26:02 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000000)=0x7) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) 07:26:02 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000180)={0x2b, 0x4, 0x0, {0x5, 0xab57, 0x3, 0x0, [0x0, 0x0, 0x0]}}, 0x2b) r1 = socket$inet6(0xa, 0x803, 0x3) get_mempolicy(&(0x7f0000000100), &(0x7f0000000140), 0x4, &(0x7f0000ffe000/0x1000)=nil, 0x2) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) ioctl$VIDIOC_DBG_S_REGISTER(r0, 0x4038564f, &(0x7f0000000040)={{0x7, @name="e71873ec7afaa18465fa462d10f7ce95bc495770f5e7d19407b38ce723b889c8"}, 0x8, 0x8, 0xfffffffffffffff9}) lseek(r2, 0x0, 0x3) 07:26:03 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x200000000000000]}) [ 463.412155] 9pnet: Insufficient options for proto=fd 07:26:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000140)=[{r1}], 0x1, 0xb7) close(r1) 07:26:03 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0xfe, &(0x7f0000000180)="0a5c2d023c126285718070") r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x40, 0x0) accept$unix(r1, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 07:26:03 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x800) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000)=0x8, 0x4) sendfile(r2, r1, 0x0, 0xa10a) 07:26:03 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x8000000000000800, 0x8) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x80300, 0x0) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000440)={&(0x7f0000ffd000/0x1000)=nil, 0x7, 0x1, 0x82, &(0x7f0000ffc000/0x1000)=nil, 0x80000001}) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000000040)=0xe8) getgroups(0x4, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff]) write$P9_RGETATTR(r0, &(0x7f0000000340)={0xa0, 0x19, 0x1, {0x104, {0x1, 0x3, 0x4}, 0x20, r3, r4, 0x10001, 0x9, 0xfffffffffffff000, 0x401, 0x2, 0x0, 0x2, 0x9, 0x8, 0x10000, 0x5, 0x100000000, 0x1f, 0x2, 0xcd4}}, 0xa0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) lseek(r5, 0x0, 0x3) 07:26:03 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0xffffffff00000000]}) 07:26:03 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:26:03 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x5, 0x80000001) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 07:26:03 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0xfdfdffffffffffff]}) 07:26:03 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000000)={{0xd4f, 0xffffffffffffffff}, 'port1\x00', 0x2, 0x10000, 0x20000, 0x4, 0x5, 0x7f, 0x7ff, 0x0, 0x2, 0xfff}) sendfile(r2, r1, 0x0, 0xa10a) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000140)={@multicast1, @dev={0xac, 0x14, 0x14, 0x15}}, 0x8) [ 463.835850] QAT: Invalid ioctl 07:26:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000140)=[{r1}], 0x1, 0xb7) close(r1) [ 463.947776] QAT: Invalid ioctl [ 464.005474] FAT-fs (loop4): bogus number of reserved sectors [ 464.032988] 9pnet: Insufficient options for proto=fd [ 464.045890] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:03 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0xfdfdffff]}) 07:26:03 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) accept4$alg(r2, 0x0, 0x0, 0x800) sendfile(r2, r1, 0x0, 0xa10a) 07:26:03 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x48000, 0x0) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000040)={0x0, 0x0, {0x24, 0x2, 0x14, 0x1e, 0xa, 0x7, 0x2, 0x6d, 0xffffffffffffffff}}) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) [ 464.146721] FAT-fs (loop4): bogus number of reserved sectors [ 464.190857] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:03 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0xfdfd]}) 07:26:03 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) [ 464.302171] 9pnet: Insufficient options for proto=fd 07:26:03 executing program 0: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x400401, 0x0) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000340)) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000040)={0x5, 0x9, 0x800, 0x9, 0x7ee}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) r3 = socket$inet6(0xa, 0x2803, 0x3) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) lseek(r4, 0x0, 0x3) 07:26:03 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000000)={0x5, 0x0, 0xffffffffffffff00, 0x20, 0x3ff, 0x0, 0x8}) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) 07:26:04 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000140)=[{r1}], 0x1, 0xb7) close(r1) 07:26:04 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c009c2f5e7e1a91d8e1bd970182bbd94db022c2aff9b38f7239b3ad67ada4e2"]) 07:26:04 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0xe7ff]}) [ 464.455254] FAT-fs (loop4): bogus number of reserved sectors [ 464.490896] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:04 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, @dev}]}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0xf0, r3, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x100000000}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc00000}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) lseek(r2, 0x0, 0x3) setsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000140)=0x7, 0x4) [ 464.582530] FAT-fs (loop4): bogus number of reserved sectors [ 464.591158] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:04 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x2]}) [ 464.627440] 9pnet: Insufficient options for proto=fd 07:26:04 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) accept$inet6(r1, &(0x7f0000000000), &(0x7f0000000040)=0x1c) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e20, @remote}}}, &(0x7f0000000140)=0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000200)={r2}, &(0x7f0000000240)=0x8) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r3, r1, 0x0, 0xa10a) 07:26:04 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:26:04 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) getpgrp(r0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x78c, 0x40080) getpeername$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) r2 = socket$inet6(0xa, 0x803, 0x7) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000180)={0xf, {0x200, 0x401, 0x9, 0x20000000000}}) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 07:26:04 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000140)=[{r1}], 0x1, 0xb7) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) 07:26:04 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket(0xa, 0x3, 0x7f) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0xe}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000280)={{&(0x7f000090c000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f000090c000/0xf000)=nil, 0xf000, 0x4) r6 = dup3(r3, r4, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) socket$l2tp(0x18, 0x1, 0x1) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000917000/0x2000)=nil, &(0x7f0000918000/0x4000)=nil, 0x2000, 0x1}) ioctl$RTC_PIE_OFF(r5, 0x7006) lseek(r2, 0x0, 0x3) 07:26:04 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0xfffffdfd]}) [ 464.853767] 9pnet: Insufficient options for proto=fd [ 464.869970] FAT-fs (loop4): bogus number of reserved sectors [ 464.899739] FAT-fs (loop4): Can't find a valid FAT filesystem [ 464.907418] 9pnet: Insufficient options for proto=fd 07:26:04 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000240)={0x0, 0x1, 0x20, 0x8, 0x8}, &(0x7f0000000300)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={r2, 0x5}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000080)={r3, 0xbf, "29ebd22bb2dc763c4211ce9bd899298215918bc27e53e0c11c6e66a9e96fed5b2e4d9f68fa32e8c64dc36fd45d05af039cd61928f8a561b73fecc1a498fc617e63df2d34582b4cca10601b6114259dc6563d3bced8d2958e83640bdd8694a01e640e4d173bb57077516e7bb614d5b65695a8b86051a642844e1cee2fbe8fbeb70affcad7e91a316485116f4ead6b549090597c9ef104ca6890e163e959eaacfb4d89522aeddd2ffdd84263812d15990c37802226c47dfa58d35859d0667760"}, &(0x7f0000000200)=0xc7) sendfile(0xffffffffffffffff, r1, 0x0, 0xa10a) 07:26:04 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) socket$inet6(0xa, 0x803, 0x7) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x10001, 0x600481) write$P9_RLOCK(r0, &(0x7f0000000040)={0x8, 0x35, 0x1, 0x2}, 0x8) 07:26:04 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0xe7ffffffffffffff]}) [ 465.019157] FAT-fs (loop4): bogus number of reserved sectors [ 465.056613] FAT-fs (loop4): Can't find a valid FAT filesystem [ 465.150677] 9pnet: Insufficient options for proto=fd 07:26:04 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x10', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) [ 465.175232] 9pnet: Insufficient options for proto=fd 07:26:04 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000140)=[{r1}], 0x1, 0xb7) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) 07:26:04 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x2006) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="24975e040e87"]) 07:26:04 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0xfffffffffffffdfd]}) 07:26:04 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000040)) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:26:05 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000000)={0xa, 0x5, 0xff, 0x6, '\x00', 0x1}) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) 07:26:05 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:26:05 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000040)={0xe, {0x7, 0x7, 0x101, 0x9}, {0x19, 0x3, 0x1f, 0xb3}, {0x8, 0x400}}) lseek(r2, 0x0, 0x3) [ 465.512698] 9pnet: Insufficient options for proto=fd 07:26:05 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r3 = accept4$alg(r1, 0x0, 0x0, 0x0) sendfile(r3, r2, 0x0, 0xa10a) 07:26:05 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0xfdfdffff00000000]}) 07:26:05 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="1e00"]) [ 465.577608] FAT-fs (loop4): bogus number of reserved sectors [ 465.605157] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:05 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000140)=[{r1}], 0x1, 0xb7) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) 07:26:05 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/hash_stats\x00', 0x0, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x800) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000100)={'nat\x00', 0x0, 0x3, 0xa2, [], 0x2, &(0x7f0000000000)=[{}, {}], &(0x7f0000000040)=""/162}, &(0x7f0000000200)=0x78) sendfile(r2, r1, 0x0, 0xa10a) [ 465.742251] FAT-fs (loop4): bogus number of reserved sectors [ 465.748350] FAT-fs (loop4): Can't find a valid FAT filesystem [ 465.768732] 9pnet: Insufficient options for proto=fd 07:26:05 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f0000000340)={"f9abaa8d1ef1e52c9751fc0092409051b592465ea15f11962763e250063ce723a9949bcc928c79feb0b5070b5876dfee4c20c062bde807d5cb73d99b86175ab0f93cb0d647e88d7e847ed372e77cb1f30483d1ae63ae16cb0de4516f37bdd66a51856b464fc4e9a1c482b37393706a90e729675762ef8d3c13f92c8b9f536cd95249b8d146de162d46b375a546dd4fa0e3310c756c2f4a108f9caec6e8862d129eca15cd4d3c507bc8a136288d2f48b2d14ceee52cc30f6440fbf044c5e2039109dd4946289447e184875843e1d780999cffd1bbb21ab1a9f1c82919e03fa27210f990baf321e1f877bb46dbaf575173276083de2b997e905d6456f0d8777fecf96d6cc138f1e6ed77c0fde834de23aaa170ba927ca40c7bf352b68429cf7b41540cf0e163452b8b8166b824e9d66094a9b60e4ede67ffa6eb31166b909a22d81035f90913ac47ccc0048e68acf54e71ac53aacbe6e600099b97c0e48b727209e826355a48e37d9a5c6a50faa17a1b97e20009a09114c4fd09f030a4d1408f577533b0582cfd7389b916bb8ee617e495c9107214b397ebf1b9acc7de803efa20db7ac1991fd91b4519eba09e74222dc2a8d9efab79caa1ce5889d9ff36e197a83f6a92843434433086aee4ca8f958f97db74cebd052e702d1a5fcee756056c79885ee7e59fc200d54f2d30927b51cf895a72556052179c3bf12f2530096b1ba100c1eb688d892820fc8dc65b17797d5ace430502c3412953d649f1fca457ad9271d44c716e9545f3e0eadc8199fd94fff9fc34732fcc3f30669be44ffe63dbf5dabb7486a160717a9b2ba68d09881f754adec44eb223acbe430c06de475dee481d57e0c8bdcc12985a979853241bc3289c2e85d6b95a79a4fe3eba5636889dc52c7ecc9b2d0b1275b311fb891bb12fdc7736956e4134d33efd92b142a540c8ded27ae6b9fc41166f708d1eae5a3231fea4ac29244735a429296b5ad85c4a8c7e48141f3f6f636b65500bfd6d6fa1727ed2a7c1f474c270562ab33a831efc6fe2e09446149b1c5bb7e08f0414c5a5a550aa95d35414ead29071fef41819a9646d537040a39ca39365dc2757b360511eededeea6182c9ced691bedd18b3d1a0a8638178a2e970a23aedb2e8dd3d324f04a92428ffe8b1f3f36bb0904bdc03b6fa5f88ab6289511c4b7ebac7693a650d703565e9a9f1f20f1cfdff11b7e04887419e2b69ffd409811247e41f53bbd6b0790b9d8ea5d6dc94706ea101cc1239f5d18348c10e81ce5e5fa0bb663a32c961c477b3acdab032db2fea6ca7d8b233e8a3f117140a91b890193428bfb5d37f3b275327c45cc9ffd4bb1073171a921cd3b1a25da067208c4d000937965fb5277e26f7e51b5b1533461755681b0cfadfff8e8b28300eef2e74b296de541219b039239f252a9f9ac860d1563a76e8452bfc681"}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) getpeername$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x1c) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:26:05 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:26:05 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0xffe7]}) 07:26:05 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rndno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/raw\x00') write$P9_RLOPEN(r1, &(0x7f0000000080)={0x18, 0xd, 0x2, {{0x4, 0x0, 0x2}, 0xfffffffffffff001}}, 0x18) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000180)=@buf={0x7e, &(0x7f00000000c0)="5eac6d15f8f33e5318dbcc4af693720db1e96f1142cbcff3fb4d52cedd84f056dbdad2c2d067dee1d1a6dbd72bf1ea3f2b5938efc3097b48002be6d5955eabbccd4ff19494984c371979de1a937b163e8e918331ca528329154a9fe5d56e30a756172ea1eadecbbdb4b957709ee9bd069a8479fd6763f7f4e86e3458007a"}) 07:26:05 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-twofish-avx\x00'}, 0xfffffd01) recvmmsg(r0, &(0x7f0000004840)=[{{&(0x7f0000000000)=@can, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)=""/91, 0x5b}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/163, 0xa3}, {&(0x7f0000000100)}, {&(0x7f00000013c0)=""/143, 0x8f}, {&(0x7f0000000140)=""/47, 0x2f}, {&(0x7f0000001480)=""/4096, 0xffbc}], 0x7, &(0x7f0000002480)=""/101, 0x65}, 0x200}, {{&(0x7f0000002500)=@in6, 0x80, &(0x7f0000002580), 0x0, &(0x7f00000025c0)=""/88, 0x58}, 0x3}, {{&(0x7f0000002640)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000002d00)=[{&(0x7f00000026c0)=""/239, 0xef}, {&(0x7f0000004980)=""/173, 0xad}, {&(0x7f0000002880)=""/136, 0x88}, {&(0x7f0000002940)=""/46, 0x2e}, {&(0x7f0000002980)=""/244, 0xf4}, {&(0x7f0000002a80)=""/199, 0xc7}, {&(0x7f0000002b80)=""/56, 0x38}, {&(0x7f0000002bc0)=""/50, 0x32}, {&(0x7f0000002c00)=""/130, 0x82}, {&(0x7f0000002cc0)}], 0xa, &(0x7f0000002dc0)=""/170, 0xaa}, 0x1}, {{&(0x7f0000002e80)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000004200)=[{&(0x7f0000002f00)=""/4096, 0x1000}, {&(0x7f0000003f00)=""/64, 0x40}, {&(0x7f0000003f40)=""/231, 0xe7}, {&(0x7f0000004040)=""/169, 0xa9}, {&(0x7f0000004100)=""/230, 0xe6}], 0x5, &(0x7f0000004280)=""/230, 0xe6}, 0x1000}, {{&(0x7f0000004a40)=@l2, 0x80, &(0x7f0000004740)=[{&(0x7f0000004400)=""/157, 0x9d}, {&(0x7f00000044c0)=""/196, 0xc4}, {&(0x7f00000045c0)=""/168, 0xa8}, {&(0x7f0000004680)=""/190, 0xbe}], 0x4, &(0x7f0000004780)=""/145, 0x91}}], 0x5, 0x40, 0x0) r2 = accept4$alg(r0, 0x0, 0x0, 0x80000) sendfile(r2, r1, 0x0, 0xa10a) [ 465.985577] FAT-fs (loop4): bogus number of reserved sectors [ 465.999904] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:05 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0xfffffdfd]}) [ 466.052420] 9pnet: Insufficient options for proto=fd 07:26:05 executing program 0: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) lsetxattr$security_ima(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)='security.ima\x00', &(0x7f0000000580)=@v2={0x5, 0x0, 0xa, 0x1f, 0x18, "c715fb4410bd83b590bbf304d57831e97831f48452f02e5d"}, 0x22, 0x3) syncfs(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000380)=@assoc_id=0x0, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000480)=ANY=[@ANYRES32=r2, @ANYBLOB="6b000000c2f7ec23962f0776ccfd7964054958f2b2bc27f0c792b5beb79e561468ff40b55c154c95ef066206088cf702efc06e0b75a74d2a4d57871443b3d51dd6bff2ccc847459f496a42bb263bd0cc12450298b295a5499f8595c5d849aab1c0cc8169ce3fbdc6f7275284d65d4dd09b84f03c0eed4bede2bc65a914871e48f14223c52648bc1e28e76264e265b3d90ca53bc2f67ea2"], &(0x7f0000000440)=0x73) socket$l2tp(0x18, 0x1, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000200)=0xe8) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@multicast2, @remote, r3}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000340)={@remote, 0x9, r3}) lseek(r1, 0x0, 0x3) timerfd_create(0x2, 0x800) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f00000003c0)={0x524d, 0x6}) 07:26:05 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) poll(&(0x7f0000000140)=[{}], 0x1, 0xb7) close(0xffffffffffffffff) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) [ 466.093697] FAT-fs (loop4): bogus number of reserved sectors [ 466.099578] FAT-fs (loop4): Can't find a valid FAT filesystem [ 466.133603] 9pnet: Insufficient options for proto=fd 07:26:05 executing program 5: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40) ioctl$TIOCEXCL(r0, 0x540c) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r1 = socket$inet6(0xa, 0x803, 0x7) ioctl(r1, 0x401000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 07:26:05 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) sigaltstack(&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x6, 0x0, [{0x2, 0x1, 0x0, 0x0, @sint={0xfff, 0xe36}}, {0xda, 0x0, 0x0, 0x0, @irqchip={0x9, 0x5}}, {0x53, 0x2, 0x0, 0x0, @adapter={0x7, 0x100, 0x8, 0x3, 0x8}}, {0x4, 0x4, 0x0, 0x0, @msi={0x8, 0x3f, 0x5886}}, {0x0, 0x5, 0x0, 0x0, @sint={0x60000000000, 0x1}}, {0x8, 0x4, 0x0, 0x0, @sint={0x9, 0x200}}]}) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000300)={0x7, 0x0, [{0xe, 0x6b8, 0x0, 0x6, 0x5, 0x8, 0x1}, {0x4000000d, 0x6, 0x2, 0x3, 0x1620, 0x2, 0x1}, {0x6, 0x80, 0x4, 0x1f, 0x8, 0x1, 0xfffffffffffffffb}, {0x0, 0x5, 0x0, 0x3, 0x80000000, 0x6, 0x3}, {0xc000000d, 0x10000, 0x7, 0x7f, 0x9, 0x3ff, 0x1}, {0x40000000, 0x18, 0x2, 0xff, 0x8001, 0x7fff, 0x10001}, {0x80000007, 0x4, 0x1, 0x2, 0x1, 0x9, 0x8001}]}) 07:26:05 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0xe7ffffffffffffff]}) 07:26:05 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:26:05 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg(r1, &(0x7f00000016c0)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000001540)=[{&(0x7f0000000340)=""/221, 0xdd}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000040)=""/39, 0x27}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000000180)=""/183, 0xb7}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000001440)=""/127, 0x7f}, {&(0x7f00000014c0)=""/96, 0x60}], 0x8, &(0x7f00000015c0)=""/253, 0xfd}, 0x3) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) clock_gettime(0x0, &(0x7f0000001700)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000001740)={0x7fff, 0xb, 0x4, 0x1, {r3, r4/1000+30000}, {0x7, 0x0, 0x200, 0x0, 0x8000, 0x7, "3af9d2ec"}, 0x0, 0x2, @offset=0x1, 0x4}) 07:26:05 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) [ 466.306587] 9pnet: Insufficient options for proto=fd 07:26:06 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) poll(&(0x7f0000000140)=[{}], 0x1, 0xb7) close(0xffffffffffffffff) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) 07:26:06 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x4e) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) [ 466.482818] FAT-fs (loop4): bogus number of reserved sectors 07:26:06 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x100000000000000]}) 07:26:06 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000001900)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000040)=0x1008) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r3, 0x7}, &(0x7f0000000140)=0x8) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000180)={&(0x7f0000ffb000/0x2000)=nil, 0xa15, 0x7, 0x62, &(0x7f0000ffa000/0x4000)=nil, 0x1ff}) lseek(r2, 0x0, 0x3) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) [ 466.528785] FAT-fs (loop4): Can't find a valid FAT filesystem [ 466.562663] 9pnet: Insufficient options for proto=fd 07:26:06 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200002, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040)) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) [ 466.629679] FAT-fs (loop4): bogus number of reserved sectors [ 466.664331] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:06 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x20000, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000040)={0x0, 0x103004, 0x4, 0x60fc, 0x4}) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}, 0x81}}}, &(0x7f0000000140)=0x84) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000300)=""/37, &(0x7f0000000340)=0x25) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000380)={0x2000000000000000, 0xf000, 0x4, 0xc, 0xf}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000200)=ANY=[@ANYRES32=r3, @ANYBLOB="01000a00008001009f8d01002b0004001f00ffff07000100"], &(0x7f0000000240)=0x1c) r4 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r4, r2, 0x0, 0xa10a) 07:26:06 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000040)) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x167) lseek(r2, 0x0, 0x3) 07:26:06 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0xffe7]}) 07:26:06 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfatz', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:26:06 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) poll(&(0x7f0000000140)=[{}], 0x1, 0xb7) close(0xffffffffffffffff) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) [ 466.861639] 9pnet: Insufficient options for proto=fd 07:26:06 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 07:26:06 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') r2 = accept4$alg(r0, 0x0, 0x0, 0x0) fcntl$notify(r1, 0x402, 0x80000000) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) sendfile(r2, r1, 0x0, 0xa10a) 07:26:06 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) connect$rds(r0, &(0x7f0000000040)={0x2, 0x4e23, @rand_addr=0x66}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:26:06 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0xfffffffffffffdfd]}) [ 467.101320] 9pnet: Insufficient options for proto=fd [ 467.135462] 9pnet: Insufficient options for proto=fd 07:26:06 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000540)={0x0, 0x0, [], @raw_data=[0xff, 0xffffffffffffffa8, 0x1, 0x7, 0xed, 0x10000, 0x4, 0x565, 0x4, 0x6, 0xf0, 0x2, 0x6, 0x9, 0x8, 0xff, 0x0, 0xffff, 0x3, 0x8, 0x0, 0xa1, 0x5, 0x3f, 0x5, 0x1, 0x7ff, 0x8, 0x200, 0x7, 0x101, 0x100]}) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) sendmsg$key(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x2, 0xd, 0x2, 0xf, 0xd, 0x0, 0x70bd29, 0x25dfdbff, [@sadb_spirange={0x2, 0x10, 0x4d6, 0x4d5}, @sadb_x_nat_t_type={0x1, 0x14, 0x7fff}, @sadb_x_policy={0x8, 0x12, 0x1, 0x1, 0x0, 0x6e6bb4, 0x8, {0x6, 0x33, 0xffffffff, 0x9, 0x0, 0x33db7f32, 0x0, @in=@loopback, @in6=@loopback}}]}, 0x68}}, 0x40000) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$cec(&(0x7f00000002c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000004c0)=0x0) write$P9_RGETLOCK(r2, &(0x7f0000000500)={0x2a, 0x37, 0x1, {0x0, 0x689, 0x92, r4, 0xc, 'enospc_debug'}}, 0x2a) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x101, 0x1, &(0x7f0000000080)=[{&(0x7f0000000700)="92bc34c4717898f267697c0a21670997f4a8ff43c120ea57a16fd416ec7ce431f4a55f47d671341cbf04251a2e645ffc8832a6ebbbc57faef41789facb4a7807adf76a0dfddb2dde8b7b15b110198b7b1c9f8b3cf539e768d485d66201a879572b3f92633003031844f22093881f07470586e1d0646fc3a325b598382a1e5bfa54d1fad0a0ee8d971ece788652d4fcee2dc6d27dbe8cbcbddcba19f715b671e4b6f9322de995c2db4d3328e5a9ec84155055efa075dc68aeb842f330767dcabef98677aeb2a4b5f4b39a2b18ad525c86e5857e6925b5b90eec4e4a0a0fbf96e047d5800e940d9012f6864c4a4523178994b412f54abf62f1d46e12144833f4be52e6d2d6ec314f423d056a25242f4720b6d7a28347b89d2f506be8efb1b85bb810b9e2aa51dba0f296c15e252b19d7708526aa15ef56aa242f4e27cb024f9000015fe3aa9923a30d92701f3ef081aec4e5e334605638df5aa4fa94bd6055db9f83b3794535f9a5159fbb14d52ca1c345f9dba881dc7375571b9b717e3ff535003b44daf9ac31b9b93797c34a2299309dc524c5f61ef2bd6b1c0e2554612597cc550ca8a3249a63e8aec7f944504da635ed31413358d06b573af8f0f5359b8019ad9d8d081a53f6fc2ace8082c2faaf94107db08cf852898b62e442822fdbf34764b04332237c2658f7a955e58e89bdfe433ec9687cc865918c2f0b068e4b0af05cc998800f0a615d461c9bcc7557e7fcb64e5593e9be59745c3df7675685ecdfa7a513b8c69a815ce1f3c244929930574841962e2bc29fd065eccbc5c7e9eccc0e5f7ad94d699d58a17125f69fea89d6dafbd1c1dd5637e42c21ebb0070453418119a8a6d8ef2a46c32004b62569eccf4883f63a662051478573d1005111d2b7ea58227ff31090355c41b59fe29ff2bd32e23095bf2be0aed1c1928e959aa1dd952f31c2d14bd148e631c0366deca1b36ce1489ddd0b02386d852afaedcaa5d2747f9571375ce8b04a5a8b78153ce3859f8e6ef178ddf71cb1c307aba11df404660a4e507b86e9a85ada6a95572cca210e372e02bee03a021211a16a9c006d73f7766cb3fe3fa4b2c4b515b5f212605a464c690d5c77b91a9f3a4c114a3f15e1832efd08389eb20d0f8855a4bab30bd165250f386d80a96eab2cfed2042979772dc84f2b3cbcd59657b23710e9de7281812055c599af5a71c7b4856e2a94a8dbbdadd2bdf32d9974e996460fdf4e240919239def5e761f7bb2ac0fb66e8022fd892a2e47160712e708e399fd1a298157de946d11d59e34c084830cb8ee739ff31d158dc9b96338721ef0ff830f435f86c1ca8f88fab0a675437bee208b488c2567e5277e968321a1f3815a569bb00f9ead1d0171e5acb4044bbbd9ca6e4b3c1eca7a871a2332972fb4740d2a45d1baba282b006c4338f206b67f2fcbbaeef9202eb6db529c22c8e8c90b55f1b842355ba539a9c5836a97deaab4ab4a50732b0df7d35583615373e4e920bc0f0bf9d4255e33baf55ac22a15f1510b8580adfb7082a85732b593d8a01800118c5cc127bcb6f631ccf4a24d61c562b8c55cf3cfcf4a19a164cffa0da18d6381fbc612915f2a1241bb7c4ca2f6b1e1fd9d95cc2eccaf2cdb638ae0d3006e75f0a14f9fd86b3e20595909b5d878d3d3a961e707f58fb6586eba7b72f7d631a97aaca278497aeeeed66a20f04765940aa107876384e1a06970687724f769954831138a7817d4a85d208d9fe8caa615c582ac676d68faf7cf9cf58275e21045015abb6960096f01fa0f474503e168f04603a3c4e6af50e95aedd1b81481d83877b59cb85ba265017754b85d9e5a366ef40642bc5d14aada3aaae1226c1ae138362dc08734f8cb9c66c5cd60597025a7f0cb5d2cfffe3b30ac83367c446a84f05ce662b14bcf0aa7b0ab1612f096ebb2b96aae8dc9351f3222a92f0b98551217db17abd7bc4d161bb327fddc8914acdcda74cb3bdbf3148e271a79592f5ab17f0785b750a19e93f1be6549e3334f7e2d6c48f5cbc81605338d4b9515df4b2f2a0be492405a8876af0b1d076ad5e4bf8bb718a5414b540627c0acc998b96531fbda1a8056ac6d9d043d59cfdf97a0aa16a5fea094ad75a0fed6a43694b2cfd289afc29cd5e9c5468f64e17193b635669452ba492e095426848ec3c9aa7e760059f0ca13e6246c701a79e3e7825e89c454269741e44480094b28f5eb3b7e404eb7c84aa2f3ccfcc2c7dcac908ed670669c11009b0bc452c3452380e900f7882499b51a102fe7ba27663019c76e6e4a21031f27a150aa6bfdc082034739dbd960f608ab22f0c224db58dce82d99a27600c6c225681f03ca45ea703789514f6dfdcc98e97fc510015247491d743b84444b028a8c06654b11203c49f11adcbbd4677f3ff9a4b6f285ccfc645a3f3863401191e3d040851029d2905170ed01777771220cb3deb7d2ab7e19697c28163aaf1612f977af4c84781dcae0a0e4b0b2970e1f07474e3f6c18b3c05830aeec6d2aa3a63310a9a4cb787c9ffe1f5ce48a8d67100fff5dc1788343155bf9e3baf2e30a0afaf751776b050dda8be25b0c7ac81f0d863a22b9fc1929666cb694d3062556133a75b20f5cc6f39164d12e0570e7b567f7cd6afc143354bd556bc6ece160786b9d58dff6de37a3815302d1dbf0478298b9bbe0fcf30f6d74153b61e694114754fd4a6780056cff1603bd0a99b483af36f482ad9c17cf66abaf3e98e2c17414ee98f6167fc44b31ffcb7f99b8a60835a7e9ec3d513556b9d1e75f040a73a68621eaed866eeb12b8efa69365d88d7557eca88fa8fdd3264586b74e4c761524534c96d8eebaaae73aa634e3d55870eb2e1d98b1c850eb186adb2f298418ff31c57b67fc121656714b410ced468d389c54ae8ac651032c422888bd058a32c849181e28b440a8157fab04c125919d1f23dee5257b4dfee4090a4b345ac1f2ac24dec50b26cecf2f9d18000aa24b46a2d8af06d5d74b9bd5a3565873d665e53bd77b082240fc73513bb8e2801f164463e1ba6835b03f04634f521d653b852f65b59ba92ffba0247dfc5b966a0077df27e2c9109f9f3e337cc734dcc2934be0091a20c037908e71efdb158a2c983e906ae60eca08a825fd39ebb2621892ee0803c70c54cf8a3de7bd32173bd52f98dfe3d49d8ecc0ddd4993c66b95d7d32d084e8d3c1a1211aeabc71910b6be40a09ce412f1ec36169effbbfd2e83c3a81f5a9cbceeb9a99e1713620b55b3cd490640ec67b004750cb2059c226db09c4c25a9ce492d387ecb4c612dffd279f8aa0702aa3a6c25d1076b135494981580ea3ccb4d3535d85cd4c7d27601d3ebeb190b748abb44e50c5a663be8e35e7030b88fb871467fe2177f7b161451425478d0baef72a2e78b077f0274f7955014db64d908276eecb4608627aa09712add00c047fff785c221e452b49d3ea763c74cffd37d047df5038552af9afa705998adf098bcc7bf82178ea18da3a543986bf5f2851ff1e351ab23e89f0435dd6d0564e96ede4f865fc610b08730f72aa62c7736152cf02a289ad9338de2b592dd6e52e16de28cfdc3309cc0adc67b2ec5c0f456236211f90089e24d96624bedfcfa035d61c562d164d7a5e7ef4c6a1bdd3d12d1547ae673889af1fb7a9e17541213440124b31e2636d6c726c81f8773868ac845211d26fd8702fec0c116fa8e3bccf85642adb77c53cd8a2425b2eae0dd021470310aa54f36ace11e70bcac34246a5e7646c754c6f50aa86883a8593cd9005a020383398bc0103f482818f3a39a12396c02f82b0654112fae840cb314bc5e38c2b2f424d64ace48b222e33a56a76d6a98467655b383cbdbd0ed843e50c9cc6e12d5d49343c7a4588a15dfdf5e25198a0b36e901ab4c865c62ec035387fbd240ea18d393ea308fc1b1d5042c52c0102cee153c0fb93bc83a18670aaaea6f9f019ec177fcacbefac12b329ca190b9f15932e78d4820c30931084acf4efd4f148cf165658c6e263461e2cfad7e8157b26cabb0384e840254a8cf450d6582e9e9e7720973405b4049e876d29039982944cb69e1053017e9bd199dbf7c132912ff7517b0df69a535fd6ba13888be4093aa4c1bb01d725653acb894240ddf1ae4c0b78420141082fe73d5f4c9b1a82cb6d1ab6105adbda5b19217ab5b7cad8cb81bfc75384f2e60deb0e6f780fb0d87ffa87743363caf68bb5628afed0ac699c7d726f950b7bcd5969a4b57e702d581a5419d290248767acecf245afe0d743072017d64145e58ed5fac0d830df6747d64fb9288e91058560c14e1754e13ab8f190d0f006b1aba04bcc01ae9b3627b03821c8f9a5b89367ec44c9b4fcfd7e039fcafe4de52d8719acbe6f2d10c80adbb02b4fefbcfb5ebec3536e4e913c6d725adcee882d8a063771fdb8835b2faa042f13cca54549571038cdc09953c4ebfff591d9beecbf2fe31a1cc0bafff0a6a1023155cd7dc13b1ce7ddbe55beda2a39c7da67ba0959791faf145a833333c61f12e28c2dc373e3a4759c69a9e1451242eb67e17cc7f2baa44a8af52d8c1560be858b0723f22f0cb822e69d50caa6bdceb891418a84edc8be6149d75996c9a3eeb03254e6cc0a57db2df3f02cfff403faf81ff44a0ac3cd3378a0e174c73f1b00f42ac6d7f5c3f64acfe8f5a928fc10b30dc9cbe447c0ee6a32455c70359896a53fd83a55576c1ce3ed09891086df1b344d0f12f656feecdfe231cd6b12eaf36055387bb1ac85383bd212749dfd46007a88d439e17ce639f1b7bf6e7baee3f199836d9bcfebee7599e3f59f3ef405ce40fe1f3db8ccc50422ffd4d083b32dedf78f1b250827c1412c23bd2d4557f4d07b924b006c23c6982d703dfbeb4096c23fa4fe9522bd9e41b934e9914ed4098bf4bdb159acc4f779a7a90413c6d2f4eea4d7282e8f8d2af439402c24c1155d57f1de7cec7231e8c9600809a0a0e9469ab7095d62fc8c6c033df92cd3299a64bb523acbbaa6e80d1287c25b533cc80a76cf5812c60494d6ae284c9a1b972c9207d692a3f22a6cf8ba0435de486da8e9d480ad853dff5812c76a2fa4c04b40e2022312a247df60d339665d81cef780a437258856d1b32ade5699ccd4777d4bea3dfa906d0ebcf782041e2692fab56d648dd6ba420cc882727b9ac305d6b36cd9acf32a546da271979ec165f5a43a751bb5f672c718e361603cf067c999cd8131217db27d591a35aedaedea92da3e1d52c090a6d23abd6772855b70ee8c8d17ae092d1c9376b2acc3c5b3b6ed6cfc6e7e1dab088a66aee62c07b26579ad779bbee4d436b0e70b3ebd1e0e4600d714c1cbfe5a33244a5a436cf5b13db65f6f8b0380528171177c55f57ba24253b0065d5083de34b6f97e1adbb198242c053481da4d5237498f9df74f8ae8a341b7a7bc8d408d61a9c7e45969a0dceac32f031466b88d21ff1fc2ed10d138b406fe6704f4c0c265678913d9b8ae576a4dbebefb94af2f457ca0dc76f811cf3abe494eac66eb221557450470eddcd3f72c4c13b18e178b908626549960ecade01f760c5bf37edcdb64b9c51e8e8b7bdaff063b09805002f595cd7fd24e401f322534acb8749186a62e2f059f7deaacf06f20d7741ddd5974e0b3a7a391744d1adf6a2b6119478c8ab85362a1226da9b9562c60f22ccf1bca36332363fa4f078745fd609579a663ef5bc90edc7fd931cb73563f09a24780a533906e10db8a75ef39a19ff64d4325412693d50a97bea09bd392841fe945319f9e63ce6594735aac37f2d839608f248a5", 0x1000, 0xffffffffffffffe1}], 0x4010, &(0x7f0000000200)={[{@degraded='degraded'}, {@space_cache='space_cache'}, {@nodatasum='nodatasum'}, {@enospc_debug='enospc_debug'}, {@ssd='ssd'}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@smackfsroot={'smackfsroot'}}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x63, 0x39, 0x66, 0x7a, 0x36, 0x7b, 0x34], 0x2d, [0x61, 0x7c, 0x65, 0x61], 0x2d, [0x38, 0x0, 0x38, 0x36], 0x2d, [0x7f, 0x65, 0x64, 0x75], 0x2d, [0x79, 0x73, 0x31, 0x66, 0x33, 0x3f, 0x37, 0x73]}}}, {@euid_eq={'euid', 0x3d, r3}}]}) 07:26:06 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) move_pages(0x0, 0xb6, &(0x7f0000000000)=[&(0x7f0000ffb000/0x1000)=nil], &(0x7f0000000ffc), &(0x7f0000000000), 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r2, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) r4 = accept4$alg(r0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/sockcreate\x00') ioctl$DRM_IOCTL_GET_UNIQUE(r5, 0xc0106401, &(0x7f0000000200)={0x1000, &(0x7f0000000300)=""/4096}) pwritev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)="6023ac1926dcc0cd1bbb10af2dcc155b798060030bbb8379a549feeb9a730c077f26b41f36198950b907e78ba67b6b8846455e752880a043a57eebaf7900b7b549b596f9f6fd28c6fc2be605661b71243cd65e30e2e0387012922629ae04c044c64ceecae7757cc45cbca895ed86166af69deb5d5712689454a3a0d9b7c73903c08ccbad588a262f9b46f56568b686fc437195570d27d885b394aff96aaffc34891bf01072fdc8b16f6206b3ed94590cd3f7f30778a80a56455580d5d56fad1d4cf89fd3141e0ccc62c701fab2a085378fe26dda99463cc739abc9a6f60dfd22ee9bf955", 0xe4}], 0x1, 0x0) sendfile(r1, r1, 0x0, 0xf4) 07:26:06 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:26:06 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000100)={{0xa, 0x4e24, 0x5, @empty, 0x6}, {0xa, 0x4e20, 0x0, @remote, 0x94}, 0x10000, [0x9, 0x81, 0xdce3, 0x1000, 0x774, 0x1, 0x5, 0xfffffffffffffffd]}, 0x5c) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) lseek(r3, 0x0, 0x3) 07:26:06 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r0 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000140)=[{r0}], 0x1, 0xb7) close(r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) 07:26:06 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0xfdfdffff00000000]}) [ 467.359432] 9pnet: Insufficient options for proto=fd 07:26:07 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0xf518, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f00000001c0)={0x8, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}]}) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write$apparmor_exec(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="b36dbfab81ee4faa28475487737461636b202f6465762f960f726164696f23009ce3c7d5ce23e85adb521e2003000000cbcc79ff4a8a2ba6ee8595091d5c6318f84f792452980b91c9fdfd619566e31a04dd3b403c845208169599783cd80ecb3fa4be4f049b65e5d24a9dffc97960ddc49b"], 0x14) write(r1, &(0x7f0000000540)="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", 0xd) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x7, {0xbe00000000000000, 0x5, 0x15, 0x100000000, 0x0, 0x7}, 0x7ffffffe, 0x1}, 0xe) lseek(r2, 0x0, 0x3) clock_settime(0x6, &(0x7f0000000180)={0x77359400}) [ 467.393823] FAT-fs (loop4): bogus number of reserved sectors [ 467.431932] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:07 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) getuid() 07:26:07 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x1000000]}) [ 467.522259] FAT-fs (loop4): bogus number of reserved sectors 07:26:07 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) 07:26:07 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0xfdfd]}) [ 467.573437] FAT-fs (loop4): Can't find a valid FAT filesystem [ 467.599210] 9pnet: Insufficient options for proto=fd 07:26:07 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb}) socket$l2tp(0x18, 0x1, 0x1) lseek(r0, 0x0, 0x3) 07:26:07 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r0 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000140)=[{r0}], 0x1, 0xb7) close(r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) 07:26:07 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:26:07 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0xc0000, 0x0) accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x10, 0x80000) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd\b\x00=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="e72c002ef030682503bfd4397d8fde556de7"]) [ 467.628578] 9pnet: Insufficient options for proto=fd 07:26:07 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0xe7ff]}) 07:26:07 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) modify_ldt$read(0x0, &(0x7f0000000180)=""/119, 0x77) fsetxattr$security_smack_entry(r0, &(0x7f0000000040)='security.SMACK64EXEC\x00', &(0x7f0000000200)='$#,:!\x00', 0x6, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x20}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000380)={r1, 0x62, "e9bdd29993ad43fd11094f1ef2a500affcce4f1229a6cda191ee1c68901ea7a7e377eda67680a5a9464f5aa930f40c58bfb554795b1e43fba6d57ecb1e830f98ffa7ff4eeefee664fbf1a750212be3e8ccf92ca678ed75fd112122857ef2ffbd4527"}, &(0x7f0000000400)=0x6a) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000480)={0x0, @reserved}) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl(r2, 0x1000008912, &(0x7f0000000440)="025c2d023c126285718b70") r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000400}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r3, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x9}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004081}, 0x20000090) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000100)={{0xfffffffffffffffa, 0x80}, {0x7, 0x37b}, 0x8, 0x1, 0xffff}) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) fchmod(r2, 0x100) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb}) socket$l2tp(0x18, 0x1, 0x1) 07:26:07 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000002c0)=0x0) r4 = syz_open_procfs(r3, &(0x7f00000000c0)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r4, &(0x7f0000000140)={0xa, 0x4, 0xfa00, {r5}}, 0xc) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f0000000800)={0xb85, 0x11f000}) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000a00)=0x5, 0x4) r6 = accept4$alg(r2, 0x0, 0x0, 0x0) sendfile(r6, r4, 0x0, 0xa10a) r7 = getuid() stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r6, r7, r8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000a80)={{{@in6=@loopback, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}}}, &(0x7f0000000a40)=0x8b) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000540)=0xe8) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0}, &(0x7f0000000680)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f00000007c0)=0xe8) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000340)=0x16, 0x4) getgid() getgid() lstat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)) getgroups(0x5, &(0x7f0000000900)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0]) ioctl$ASHMEM_SET_PROT_MASK(r4, 0x40087705, &(0x7f00000009c0)={0x10000, 0x1}) fsetxattr$system_posix_acl(r4, &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {0x1, 0x2}, [{0x2, 0x0, r9}, {0x2, 0x4, r10}, {0x2, 0x4, r11}, {0x2, 0x6, r12}, {0x2, 0x4, r13}, {0x2, 0x2, r14}], {0x4, 0x2}, [], {0x10, 0x3}, {0x20, 0x4}}, 0x54, 0x1) bind$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e24}, 0x6e) [ 467.816805] 9pnet: Insufficient options for proto=fd [ 467.822435] FAT-fs (loop4): bogus number of reserved sectors [ 467.841474] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:07 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000210}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x80000000}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x1) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) [ 467.915629] FAT-fs (loop4): bogus number of reserved sectors [ 467.955611] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:07 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0xffffffffffffffe7]}) 07:26:07 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r0 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000140)=[{r0}], 0x1, 0xb7) close(r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) 07:26:07 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:26:07 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:26:07 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000000)={0x0, @output={0x0, 0x1, {0x10001, 0x31d}, 0x3, 0x4}}) [ 468.114982] 9pnet: Insufficient options for proto=fd [ 468.184515] 9pnet: Insufficient options for proto=fd 07:26:07 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x2]}) 07:26:07 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f0000000200)={0x3, 0x1, [0xffffffff, 0x4, 0x1ff, 0x461, 0x3, 0x416, 0x8001, 0xe5]}) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/mls\x00', 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000380)=0x1, 0x12) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000001c0)={0xfffffff7fffffffb, 0xffffffffffffffff, 0x405}) socket$l2tp(0x18, 0x1, 0x1) accept4$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x80000) lseek(r4, 0xfffffffffffffffc, 0x3) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000100)=0x7) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e24, @rand_addr=0x40}, 0x10) fcntl$setstatus(r4, 0x4, 0x4000) 07:26:07 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) setxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64MMAP\x00', &(0x7f0000000080)='wfdno', 0x5, 0x3) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) fcntl$setlease(r0, 0x400, 0x2) 07:26:07 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x10}) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) [ 468.266086] FAT-fs (loop4): bogus number of reserved sectors [ 468.294587] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:07 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x200000000000000]}) [ 468.375729] 9pnet: Insufficient options for proto=fd [ 468.391901] 9pnet: Insufficient options for proto=fd 07:26:08 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000140)=[{r0}], 0x1, 0xb7) close(r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) 07:26:08 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0xc, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = dup3(r0, r0, 0x80000) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000000)={0x2, "fcc34a5f91734c19bdafbac4d2467603070f498f17a5c1e3749b1a610c062118", 0x1, 0xed5f, 0xff07, 0x40000, 0x2}) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) syncfs(r0) [ 468.433476] FAT-fs (loop4): bogus number of reserved sectors [ 468.439299] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:08 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000040)=0xfffffffffffffbfc) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000440)={0x1, 0x0, 0x100, 0x5, {0x6, 0x3ff, 0x40, 0x86}}) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2c41c088b31107a9, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000380)={0x16, 0x98, 0xfa00, {&(0x7f00000001c0), 0x0, r2, 0x30, 0x0, @in6={0xa, 0x4e23, 0x1a7b, @mcast2, 0xff}}}, 0xa0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) lseek(r3, 0x0, 0x3) 07:26:08 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000000)={0x8, 0x401, 0x6}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000700ffffffffffff000000000000ffffffffffffaaaaaaaaaaaa000000000000aaaaaaaaaa21aaaaaaaaaa0f02a57508e9c79616292678ae294205900f2df89f417504d1f2665b28e535ec5388c0da5f50765eb5"]) sendfile(r2, r1, 0x0, 0xa10a) write$binfmt_aout(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x8cb) 07:26:08 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat>', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:26:08 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0xffffffff00000000]}) [ 468.612206] 9pnet: Insufficient options for proto=fd 07:26:08 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) openat$cgroup_procs(r0, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000040)={0x3, 0x7fffffff}) [ 468.666696] 9pnet: Insufficient options for proto=fd 07:26:08 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="da409093ac663c05eb594e2b48e827702c60a24e4277ca7e606748ec34ceb2565ecd26f4bccdf1515ff663d112650e4213bab8d3d0e622238789c60a76565a17b67f64ae2fa1f83e089213cdd9bf0dedd6dd6caf70e7a3bce3b3a107bd720682d900cc50b2490efcb03a880f1e2ef216c300010b6c"]) 07:26:08 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f000000fc00)={&(0x7f000000c4c0)=@hci={0x1f, 0x0}, 0x80, &(0x7f000000fb00)=[{&(0x7f000000c540)=""/189, 0xbd}, {&(0x7f000000c600)=""/224, 0xe0}, {&(0x7f000000c700)=""/153, 0x99}, {&(0x7f000000c7c0)=""/181, 0xb5}, {&(0x7f000000c880)=""/198, 0xc6}, {&(0x7f000000c980)=""/4096, 0x1000}, {&(0x7f000000d980)=""/4096, 0x1000}, {&(0x7f000000e980)=""/135, 0x87}, {&(0x7f000000ea40)=""/4096, 0x1000}, {&(0x7f000000fa40)=""/147, 0x93}], 0xa, &(0x7f000000fbc0)=""/49, 0x31}, 0x2122) sendmsg$nl_route(r1, &(0x7f000000fcc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000fc80)={&(0x7f000000fc40)=@ipv6_getnetconf={0x34, 0x52, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8}, @NETCONFA_IFINDEX={0x8, 0x1, r3}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x1bb1}, @NETCONFA_FORWARDING={0x8, 0x2, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40081}, 0x80) sendfile(r2, r1, 0x0, 0xa10a) 07:26:08 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0xffffffe7]}) 07:26:08 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000140)=[{r0}], 0x1, 0xb7) close(r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) 07:26:08 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0xfdfdffff]}) [ 468.919850] 9pnet: Insufficient options for proto=fd 07:26:08 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) sendfile(0xffffffffffffffff, r1, 0x0, 0xa10a) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0xce}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r2, 0x6}, &(0x7f0000000040)=0x8) setsockopt$packet_buf(r1, 0x107, 0x1f, &(0x7f0000000300)="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", 0x1000) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={0x0, 0xcfb8}, 0x8) 07:26:08 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat,', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:26:08 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x2, 0x3) 07:26:08 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000040)={0x1, {{0xa, 0x4e20, 0x100000001, @empty, 0x186d0}}}, 0x88) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r1 = socket$inet6(0xa, 0x803, 0x7) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 07:26:08 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x80000, 0x14) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xb) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x4, 0xffffffff}) sendfile(r3, r2, 0x0, 0xa10a) 07:26:08 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0xe7]}) [ 469.149570] 9pnet: Insufficient options for proto=fd 07:26:08 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x802, 0x2009) ioctl(r1, 0x100001000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) tgkill(r2, r3, 0xa) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) lseek(r4, 0x0, 0x3) 07:26:08 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c2d023c126285718070") fstatfs(r0, &(0x7f0000000080)=""/74) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) mknod(&(0x7f0000000000)='./file1\x00', 0x10, 0xf2c1) 07:26:08 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000140)=[{r0}], 0x1, 0xb7) close(r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) 07:26:08 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0xfdfdffffffffffff]}) 07:26:08 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:26:09 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES64=r0]]) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 469.372488] 9pnet: Insufficient options for proto=fd 07:26:09 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000000)=[@in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e21, @multicast2}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={r3, 0x8001, 0x3e, 0x80, 0xb4}, 0x14) sendfile(r2, r1, 0x0, 0xa10a) [ 469.447884] 9pnet: Insufficient options for proto=fd 07:26:09 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount(&(0x7f0000000000)=@sg0='/dev/sg0\x00', &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='mqueue\x00', 0x2000, 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 07:26:09 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x2000000]}) [ 469.517025] FAT-fs (loop4): bogus number of reserved sectors [ 469.523576] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:09 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='security.ima\x00', &(0x7f0000000140)=@sha1={0x1, "02d42a4ae2bab5f8db8786ce7c274da95d6fe504"}, 0x15, 0x2) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:26:09 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0xff, 0x40c00) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r3}}, 0xc) 07:26:09 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000140)=[{r1}], 0x1, 0xb7) close(r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) [ 469.633038] FAT-fs (loop4): bogus number of reserved sectors [ 469.671518] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:09 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0xe7ffffff]}) [ 469.705500] 9pnet: Insufficient options for proto=fd 07:26:09 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) [ 469.743231] 9pnet: Insufficient options for proto=fd 07:26:09 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x805, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@remote, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f0000000680)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@empty}}, &(0x7f00000007c0)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000800)={{{@in6, @in6=@ipv4={[], [], @local}, 0x4e22, 0x6, 0x4e21, 0x1, 0xa, 0x80, 0x20, 0x87, r2, r3}, {0xedf, 0x3, 0x7, 0x2, 0x63, 0x9, 0x4, 0x7}, {0x8, 0x400, 0x81, 0x2}, 0x0, 0x6e6bb9, 0x2, 0x1, 0x1, 0x2}, {{@in=@empty, 0x4d3, 0xff}, 0xa, @in=@rand_addr=0x4, 0x34ff, 0xb9e69e4c8a7fe084, 0x1, 0x7, 0x800, 0x800, 0x1000}}, 0xe8) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) lseek(r4, 0x0, 0x3) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x9, 0xa0, 0x9, 0x7]}) 07:26:09 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) recvmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@can={0x1d, 0x0}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000300)=""/205, 0xcd}, {&(0x7f0000000400)=""/206, 0xce}, {&(0x7f0000000140)=""/31, 0x1f}, {&(0x7f0000000500)=""/240, 0xf0}, {&(0x7f0000000200)=""/60, 0x3c}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/168, 0xa8}], 0x7, &(0x7f0000001740)=""/4096, 0x1000}, 0x40010022) getsockname$packet(r1, &(0x7f0000002740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002780)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000027c0)={{{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}}}, &(0x7f00000028c0)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000002b00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002b40)=ANY=[@ANYBLOB="88010000", @ANYRES16=r3, @ANYBLOB="00032abd7000fbdbdf250300000008000100", @ANYRES32=r4, @ANYBLOB="800002003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000700000008000600", @ANYRES32=r6, @ANYBLOB="080001006e7e10ef621b6f7b185c8a61c7a4f97aff4cafe82d44ad8293ff088cc7eb43eae8781320e9de67b9", @ANYRES32=r7, @ANYBLOB="e400020038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000008000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000100000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000200000038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000008000300030000000800040004000000"], 0x188}, 0x1, 0x0, 0x0, 0x800}, 0x40) 07:26:09 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',w?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX, @ANYBLOB=',\x00']) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') 07:26:09 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x2]}) [ 469.934056] 9pnet: Insufficient options for proto=fd [ 469.943192] FAT-fs (loop4): bogus number of reserved sectors [ 469.959264] 9pnet: Insufficient options for proto=fd [ 469.968577] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:09 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000140)=[{r1}], 0x1, 0xb7) close(r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) 07:26:09 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c80"]) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x4e24, 0x7ff, @mcast1, 0x4}, {0xa, 0x4e22, 0x3, @mcast1, 0x5}, 0x8602, [0x2, 0xe66, 0x800, 0x42, 0x101, 0x58e, 0x6, 0xf9c]}, 0x5c) 07:26:09 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='net/fib_trie\x00') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r1, r1, 0x0, 0xa10a) r2 = semget(0x2, 0x7, 0x40) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r2, &(0x7f0000000000)=[{0x4, 0x1, 0x1000}], 0x1, &(0x7f0000000080)={r3, r4+30000000}) [ 470.052379] FAT-fs (loop4): bogus number of reserved sectors [ 470.095859] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:09 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000040)={0x6, 0x7, 0x7, 0x1, 0x5}) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) r2 = semget(0x3, 0x1, 0x2) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000100)=""/155) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) lseek(r3, 0x0, 0x3) 07:26:09 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:26:09 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdfd]}) 07:26:09 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xd3d8, 0x40200) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000680)=ANY=[@ANYBLOB="0000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000d13f069553cd017d0d68cb0984000000000000000000000000000001000000e80600005929000000000000070000000000000009000000000000000700000000000000000000000000000000000000000000000000000000000000770000000500000007000000000000009f000000000000000010000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]) getsockopt$inet_buf(r0, 0x0, 0x9, &(0x7f0000000040)=""/238, &(0x7f0000000140)=0xee) ppoll(&(0x7f0000000200)=[{r0, 0x4}], 0x1fffffffffffffa1, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f0000000580)={0x7}, 0x8) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) linkat(r0, &(0x7f0000000300)='./file0\x00', r0, &(0x7f0000000340)='./file0\x00', 0x1000) connect$pppoe(r0, &(0x7f00000005c0)={0x18, 0x0, {0x2, @broadcast, 'ip6gretap0\x00'}}, 0x1e) r3 = accept4$alg(r1, 0x0, 0x0, 0x0) sendfile(r3, r2, 0x0, 0xa10a) connect$pppoe(r0, &(0x7f0000000640)={0x18, 0x0, {0x1, @empty, 'erspan0\x00'}}, 0x1e) pipe2(&(0x7f0000000600), 0x4800) [ 470.194362] 9pnet: Insufficient options for proto=fd [ 470.216539] 9pnet: Insufficient options for proto=fd 07:26:09 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0\x00') mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 07:26:09 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7c010000", @ANYRES16=r2, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x48081}, 0x1) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r4 = socket$l2tp(0x18, 0x1, 0x1) lseek(r3, 0x0, 0x3) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f00000004c0)=@req={0x28, &(0x7f0000000200)={'bridge_slave_1\x00', @ifru_settings={0x7fff, 0x7fffffff, @te1=&(0x7f00000001c0)={0xffffffffffffcd9f, 0x8, 0x7, 0x6}}}}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000500)={0x100000000, 0x0}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000540)={0x3, r5}) 07:26:10 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000140)=[{r1}], 0x1, 0xb7) close(r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) 07:26:10 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe7]}) [ 470.388348] FAT-fs (loop4): bogus number of reserved sectors [ 470.420489] 9pnet: Insufficient options for proto=fd [ 470.433852] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:10 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x20600, 0x0) syz_open_dev$loop(&(0x7f0000000800)='/dev/loop#\x00', 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000700), &(0x7f0000000740)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000880)={{{@in6, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}}}, &(0x7f0000000980)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000009c0)={@loopback, 0x1e, r2}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000780), &(0x7f00000007c0)=0xc) r3 = gettid() r4 = syz_open_procfs(r3, &(0x7f0000000840)='net/route\x00') shmget(0x0, 0x200000, 0x7c000067, &(0x7f0000e00000/0x200000)=nil) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x4000, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r6 = accept4$alg(r1, 0x0, 0x0, 0x0) sendfile(r6, r4, 0x0, 0xa10a) openat$pfkey(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff1000/0xc000)=nil, 0xc000, 0x8, 0x98810, r4, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000300)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f00000002c0)={r7}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x30, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES64=r8, @ANYBLOB="02130020000f630c40020000fcffffffffffff5700000000000000000000000000000000"], 0xfe, 0x0, &(0x7f0000000080)="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"}) r9 = shmget(0x0, 0x1000, 0x54000000, &(0x7f0000ff2000/0x1000)=nil) ioctl$RTC_UIE_ON(r4, 0x7003) r10 = getuid() ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000280)={0x4}) fstat(r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000a00)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, r4, 0x0, 0x9, &(0x7f0000000540)='/dev/dsp\x00'}, 0x30) shmctl$IPC_SET(r9, 0x1, &(0x7f00000005c0)={{0x2, r10, r11, r12, r13, 0x80, 0x3}, 0x7, 0xfffffffffffff829, 0x3ff, 0x101, r14, r15, 0x7e0}) rt_tgsigqueueinfo(r15, r15, 0x31, &(0x7f0000000640)={0x40, 0x3, 0x5}) [ 470.472861] 9pnet: Insufficient options for proto=fd 07:26:10 executing program 0: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x9, 0x10880) setsockopt$inet_dccp_int(r0, 0x21, 0x11, &(0x7f0000000140)=0x1fa1, 0x4) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x1, 0x1}, 0x10) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @win={{0x80000000, 0x1, 0x4, 0x2}, 0x6, 0x401, &(0x7f0000000200)={{0x0, 0x80000000, 0x4, 0xda}, &(0x7f00000001c0)={{0x100, 0x80000000, 0x5, 0x1}, &(0x7f0000000180)={{0x5, 0x9436, 0x2f7, 0x1}}}}, 0x93, &(0x7f0000000340)="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", 0x401}}}) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000440)={[{0xfdd, 0x1f, 0x200, 0x1, 0x9, 0xffffffffffffff91, 0x9, 0x124, 0x44, 0x7, 0x2, 0x3, 0x3}, {0xca, 0x100000000, 0xffffffff, 0x5, 0x9, 0x4, 0x3, 0x8000, 0xa62f, 0xfed3, 0x1000, 0x0, 0x15f}, {0x4, 0x5, 0x1, 0x7, 0x1, 0xf314, 0x200, 0x9, 0x8000, 0x2, 0x1, 0x83f5, 0x7fffffff}], 0x10001}) lseek(r3, 0x0, 0x3) 07:26:10 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x8, 0x1, 0x7, 0x8, 0xfffffffffffffffe}) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) [ 470.530841] FAT-fs (loop4): bogus number of reserved sectors [ 470.557753] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:10 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) [ 470.639631] 9pnet: Insufficient options for proto=fd 07:26:10 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) [ 470.661315] 9pnet: Insufficient options for proto=fd 07:26:10 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x2, &(0x7f0000000140)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x400000, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.nlink\x00', &(0x7f0000000200)={'L-', 0x6a1}, 0x28, 0x1) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000380)={0x15, 0xac, &(0x7f00000002c0)="9463e13dcd411258cfe347e751fb15368fc686259ddebee872b1f1dc701283fe89bbd12f54b7de5aa368e56fe14fef6ae55a867648ae16da5d04c676818a1213256224ef134160a4489d6bd1ea664bd2aa6ca5aed40b7469c8d2f26a78f28573ff6d378b30ccc6634adc20c3286ab94523469c47e88bcf79f0103b42d3a254d57d1d81a221216b38cc558a6827c3f92b7606f0e4d8f38883684a5c6fc6e0218865fb1e204692d7ad60e83ff4"}) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000b38895612507c1f7c455fae2c754fcdf11507dc90097bc71ccec0f1216e02a30cf1d90dcd8ecf8147b8c22c5658692acbc34742412064da35b7f49145f86ede7936be0ce7ce5c4c6a16d92f920719b84e53a1d0c0f8751db3615ae4e96232b9c8a16886b965ba7ab8f8d2b07000000a4dc3074b60dcf5bf9978b1cf55a84fe361611b0bd7366a2247c0d4279e24a39", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',smackfsfloor=],euid>', @ANYRESDEC=r2, @ANYBLOB=',fsmagic=0x0000000000000006,fowner<', @ANYRESDEC=r2, @ANYBLOB="2c726f6f74636f6e746578743d73797374656d5f752c7375626a5f757365723d3970002c736d61636b66737472616e736d7574653d3970002c66736e616d653d2b6e6f646576dc272a2c00"]) 07:26:10 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = socket$inet6(0xa, 0x806, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000000)) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r3, r1, 0x0, 0xa10a) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) fcntl$getown(r0, 0x9) fcntl$getown(r2, 0x9) fcntl$getown(r3, 0x9) fcntl$getownex(r3, 0x10, &(0x7f00000000c0)={0x0, 0x0}) r5 = getpgrp(r4) r6 = getpid() ioctl$TIOCEXCL(r1, 0x540c) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r3, &(0x7f0000000080)={r1, r3, 0x3}) 07:26:10 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0xffffffe7]}) 07:26:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000140)=[{r0}], 0x1, 0xb7) close(r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) 07:26:10 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x0, {0x7, 0x0, 0x3002, 0x8, 0x6, 0x7, 0x1, 0x2}}) socket$l2tp(0x18, 0x1, 0x1) set_tid_address(&(0x7f0000000040)) lseek(r2, 0xfffffffffff, 0x3) [ 470.881953] FAT-fs (loop4): bogus number of reserved sectors [ 470.887824] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:10 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) 07:26:10 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) splice(r2, &(0x7f0000000040), r0, &(0x7f0000000100), 0x9, 0xf) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:26:10 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000140)=0xe8) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000200)=0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000240)={0x0, 0x0}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept4$alg(r0, 0x0, 0x0, 0x80000) sendmsg$nl_generic(r1, &(0x7f0000001700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200004}, 0xc, &(0x7f00000016c0)={&(0x7f0000000300)={0x13ac, 0x3e, 0x204, 0x70bd26, 0x25dfdbfc, {0x20}, [@nested={0x1a0, 0x94, [@typed={0xc, 0x79, @u64=0x1}, @typed={0xc, 0x76, @str='crc32c\x00'}, @typed={0x8, 0x95, @uid=r3}, @generic="efa54a6178e10d7269922c9b1703aefb76a00ee5ab56a1dbac32b1412844dda35dd4be79c99919d028493743f58545ce2657fc53ccde7ab56afb75c54c871fd56a4b621c2b448a8573f6645f7f748c082fdb3bf809853bebd377e7331d9d576519fb510e725db58f0b510576bb3537ff0fe6f132d14989852dbc1b1bd0e775ed31547cd7e57d1670cfb01fee23dc998f9812c5c5943dad5178c7b444492b6e61cb5e92f43462e83d1eddbf2a798ccc14ef96a7e618bbb773a849499adcdc390b065862b5311ab52b3d7a56bd58c8c74d1c0d9eb22f0e9eab0e384174b5545af1d024cb02b5c6d5", @typed={0x64, 0x28, @str='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@'}, @generic="8253baec787bc670ac7f9030879705873828a011efca718622", @typed={0x8, 0x8d, @pid=r4}, @typed={0x8, 0x9, @str='{(\x00'}, @typed={0x8, 0x59, @ipv4=@broadcast}]}, @nested={0x11f8, 0x49, [@typed={0x8, 0x47, @ipv4=@loopback}, @generic="1d635d36fe", @typed={0x8, 0x57, @u32}, @generic="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", @generic="5463c74146f83fdd4e1832f82d3bf4c07230d199cb8fc1b8dd9e09c3fa7c2f9e09146f3b4268717fb1a5a784e02a969c9c56bb5584d2f8f35db5bba405337bf35530a9b30176bd674650a64b1abf7791f79d96a63cd7bacc2aea4bf570bfe7a1abbd91df4a616a045f05c70a4228ed5cd9ab840a4c73e1bc2c7a5868459e2dbf090f68d01ebadac90b1d1b40c92804544718cb442d95ae8d81d2d790cb4ec02f586eb34424e81c6740ecd1ec27f5bdae5951fa267ad4e00016a1890034e555ba55c1b093a63becaa42ba4e92ac22600ec94a49bff480b95a4c5c8bea", @generic="519d235e7f6b6109864be037a8ef0aef2b0d5f4ce05876a4c321458f90f95c4ac08bbbd2f1ee5ae6601048f4eb1b012544722ce9c7cea61ad25be55503d7", @generic="8b173bef91a4ec412ca1f0631c83bf187d5b41085bf00c0d758423c63ba723dabac96f660bfc14b5e993ce235fe65c5393b7c20552f578518a78c30f04bd6d0dad38626805323185228ca4c20952406e16973b5a5fb5b4b2f915fc27690603ab885ce89b4b0e65d5941ebd6ea004df50b85a2d071db56edff62d7ad53269c0b0aefb32b563896c164f8647bbedbfaa0dd728d7e2b65d", @generic="0b7d4b823d89ed72bfe1510aace29a6ec05abc9e30495b6beb1a3251962b1dbbb516e8fac15f79", @typed={0x8, 0x59, @pid=r5}]}]}, 0x13ac}, 0x1, 0x0, 0x0, 0x14}, 0x4) 07:26:10 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x6, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0xfffffffffffffffc, &(0x7f0000000000)=ANY=[@ANYBLOB="7472616e733d026ac3bf66646e6f3d", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000080)={0x3, 0x7f}) [ 470.971935] FAT-fs (loop4): bogus number of reserved sectors [ 470.996169] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:10 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0xfdfdffffffffffff]}) 07:26:10 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat?', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:26:10 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x0, 0x200) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000040)={0x8, 0x7, 0x37f, 0x1000, '\x00', 0x2}) r1 = socket$inet6(0xa, 0x803, 0x7) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={r2, 0x70, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x4, @mcast1, 0x20}, @in6={0xa, 0x4e23, 0x40, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x12}}, 0x3}, @in6={0xa, 0x4e21, 0x10001, @mcast2, 0xf9}, @in6={0xa, 0x4e24, 0x7, @remote}]}, &(0x7f0000000240)=0x10) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 07:26:10 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x1000000]}) 07:26:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000140)=[{r0}], 0x1, 0xb7) close(r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) 07:26:10 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = getpid() r2 = syz_open_procfs(r1, &(0x7f0000000000)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000000c0)={0x1, r2}) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x80, 0x80) r3 = accept4$alg(r2, 0x0, 0x0, 0x80000) sendfile(r3, r2, 0x0, 0xa10a) 07:26:10 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$l2tp(0x18, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f00000003c0)=0x200, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000100)=0xc) fstat(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={r4, r5, r6}, 0xc) lseek(r2, 0x0, 0x3) 07:26:11 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0xe7ffffff]}) [ 471.405033] 9pnet: Insufficient options for proto=fd 07:26:11 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x6) r1 = socket$inet6(0xa, 0x803, 0x7) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0xc0382, 0x0) ioctl$VIDIOC_S_MODULATOR(r2, 0x40445637, &(0x7f0000000180)={0x0, "484d7e81b616bfb29fd396398462725c46b7b22c6a744a2168666df0d06d82c9", 0x30, 0x7f, 0x3, 0x8}) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="b17cca579f1e0c44b7a43aaa95f0e57ad828e4bb36417208ac787e71cdd6ac3295f33b7d688bb7e7fbfe7c4c9572ea6122a4200edc71c4fbb6490c8fd5be59c5959ea7db62f4a755f940fc92176624a39ac3d838143c69f9074b799b"]) 07:26:11 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x97', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:26:11 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) fcntl$setpipe(r0, 0x407, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0xfffffffffffffd87) accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa109) 07:26:11 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000040)={0x3, 0x0, [0xffffffff9e6228f3, 0x9, 0xff, 0x5, 0x1c, 0x5, 0x80000000, 0xdda]}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x2, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x4, 0x3) 07:26:11 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0xffe7]}) [ 471.604029] 9pnet: Insufficient options for proto=fd 07:26:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000140)=[{r0}], 0x1, 0xb7) close(r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) 07:26:11 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in=@multicast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, &(0x7f0000000500)=0xe8) sendmsg$nl_generic(r1, &(0x7f0000000940)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4a}, 0xc, &(0x7f0000000900)={&(0x7f0000000540)={0x390, 0x3f, 0x1, 0x70bd2d, 0x25dfdbfb, {0x7}, [@typed={0x4, 0x36}, @nested={0x27c, 0x5c, [@generic="3bc2090ec1721f66ef2cc696692ca47967c46e1e2dc7778fda182624e832076395478abd0c42164d81d44780c83c1b37bb6bfea5f4b9caeab2902424329c09c048beddf57d881e6d7a1fbfdec1d8371e7a18016da2e5d96804c5083f45d07a0bd39311307b6c5874ab95922ba831715e4dd149cde60130007a6561ec6cae25e6e44b64f3f7bd96649de4f775d0e2f426c1dea46e8ecdc6a472449cbefb05c7fec08386380d", @generic="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", @typed={0x14, 0x2b, @ipv6=@dev={0xfe, 0x80, [], 0x15}}, @generic="00df59c8808f112f5783532a45a4c0123fd454285cdf6f1eec50e0b33c2fa15b9c4488ec78acb6ebd6b11fed392a822cdb61e387223c0e452e8f150eb1d1c30e1aee6e19b0f18a25674410f3c56fa2915d2ca79bfba39a27c92ea3390606ba4f2f7198323055f0feef57fcd68f5cb70d8c429182edbe6806aecef675137332d459ace9b5b5495e210175fe998916862b587e29eb0166b6bf29120e5aa2ae02c4", @typed={0x24, 0x8e, @binary="c49dfc45915dcc9e2a698cd70222874665754da1f9876c6aa247d9973714"}]}, @typed={0x8, 0x21, @uid=r2}, @typed={0x8, 0x5a, @str='\x00'}, @nested={0xec, 0x3b, [@generic="1dab6c8a747f1f9f1e6cc26f2bf43bf4cca911ca27cd615afd3e85832bbf0a21ffac83790f402bd411e30e7717d91498d06c267d13398b5b5a647e", @generic="6e1febd667aa85e2bf947e3bee400a7d4d2c8e85058c7f22df8b7ea6325b40b5057977fa9d44a4b86bf3dbd53ddf2ee450fc2174f9943b758ae37b646e81fc362c5dac9b78c8cdcb15ff49624d2922a2c7aa27509d59adc4747771f60c9b0651ce78b64ccc34aa4f418a570cb35f68ca94a3ad128c387a667ee78b0383072b3f23f4826db5b47e71346c863ee044a53e9c179820d9ef51970c248b0cd079fd6424baa0e8430a2fe20bf148"]}]}, 0x390}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@mcast2, @in6=@dev}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000980)={0x0, 0x1, 0x2, 0x4}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140), &(0x7f0000000200)=0x6) sendfile(r3, r1, 0x0, 0xa10a) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="690f15c729a05bccef536bd3bb39ec2b60373ad6f5e010fe15a792b1fa95146e3ca3d06edcee355e0aad5d706bf5a6f5976c17b8602005ea8f861a0259dfa5ec36ddbcd91fd3b0427fa787b41beb3df97c7ceea8ef978784f3efd44349609e748819cc4629bb143de751970694ee009c901be107f843bb68ff3030757e864526c62ee2095abb767617af766af2d3ba85708dc72b003f0d120e35dda022c6af18642eabc0c0470d658f09f6796d63d2e40817b0138f6b22ff516ea5c48f2e6dcfdeaaea7b66d58576d95d6971aabe6983f9eb56597322a9fd6e8bec42666124f62ca72cf4ac7c5202b7a8f0", 0xeb) 07:26:11 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @ioapic={0x10000, 0x9, 0x9, 0x5, 0x0, [{0x9, 0x5, 0x6, [], 0x3}, {0x8, 0x80000000, 0x4e35, [], 0x50}, {0x5, 0x8001, 0x8}, {0x0, 0x1, 0x800, [], 0x9}, {0x10001, 0x1, 0x6ec, [], 0xffd}, {0xe4, 0x400, 0x4, [], 0x7}, {0x2, 0x10001, 0xb5e, [], 0x2}, {0x2, 0x8, 0xdc37, [], 0x8000}, {0xffffffff, 0x575, 0xf4, [], 0x8cce}, {0x7, 0x6, 0x5, [], 0x200}, {0xef6, 0xff, 0x1, [], 0x401}, {0x2, 0x1d, 0xf809, [], 0x80000001}, {0x6, 0x9, 0x8, [], 0x64ae5b95}, {0x1f, 0xd1, 0x2, [], 0xfffffffffffffffd}, {0x7fffffff, 0x2, 0xece5, [], 0x6}, {0x812, 0x7ff, 0x9, [], 0xffffffff}, {0x80, 0x2, 0x2c9, [], 0x1}, {0x1, 0x7, 0xf975, [], 0x8000}, {0x100000001, 0x7fff, 0x0, [], 0x1}, {0x8, 0x743, 0xfbc, [], 0x8}, {0x20, 0xfffffffffffff5ae, 0x0, [], 0x2}, {0x4, 0x6, 0x5, [], 0x100000000000}, {0x5, 0x40, 0x0, [], 0x100000001}, {0x0, 0x8, 0x7ff, [], 0x3f}]}}) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000040)) lseek(r2, 0x0, 0x3) 07:26:11 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xff, 0x3d}) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) dup3(r1, r1, 0x80000) 07:26:11 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0xe7ff]}) 07:26:11 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:26:11 executing program 1: socket$alg(0x26, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0xfffffffffffffd22) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x200) read$eventfd(r1, &(0x7f0000000000), 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x3c, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, [], 0x11}, 0x1}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000200)={r2, 0x8, 0x20}, 0xc) sendfile(r1, r0, 0x0, 0xa10a) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x102, 0x0) [ 471.908182] 9pnet: Insufficient options for proto=fd 07:26:11 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0xfffffffffffffe8b, 0x0, 0x2d4}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x100000000, 0x3) 07:26:11 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) [ 471.939479] FAT-fs (loop4): bogus number of reserved sectors [ 471.947577] 9pnet: Insufficient options for proto=fd [ 471.961344] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:11 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0xc000) 07:26:11 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x5, 0x7fffffff) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x8000, 0x0) getsockopt$nfc_llcp(r1, 0x118, 0x4, &(0x7f0000000700)=""/4096, 0x1000) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={r0}) setsockopt$inet_tcp_int(r2, 0x6, 0x24, &(0x7f0000000040)=0x40, 0x4) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 07:26:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000140)=[{r0}], 0x1, 0xb7) close(r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) [ 472.027271] FAT-fs (loop4): bogus number of reserved sectors [ 472.054042] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:11 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 07:26:11 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:26:11 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001f40)='/dev/dlm-monitor\x00', 0x0, 0x0) mq_timedsend(r0, &(0x7f0000001fc0)="fc360a22c7f1d145323a4fe9e83b5233a05423680f59672874accc4dbac61381e2541a9e4edf263aa87ec470907f7c9f7b7d491240669e21ea702bc46882eddc2a8710225a2642a18c81433852e1f6da749eb61f3b", 0x55, 0x8, &(0x7f0000002040)={0x0, 0x1c9c380}) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000001f80)) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r3 = accept4$alg(r1, 0x0, 0x0, 0x0) sendfile(r3, r2, 0x0, 0xa10a) recvmmsg(r3, &(0x7f0000001e00)=[{{&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)=""/211, 0xd3}], 0x1, &(0x7f0000000300)=""/161, 0xa1}, 0x7}, {{&(0x7f00000003c0), 0x80, &(0x7f0000000240)=[{&(0x7f0000000440)=""/141, 0x8d}, {&(0x7f0000000500)=""/128, 0x80}], 0x2, 0xfffffffffffffffd}, 0x7}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000580)=""/84, 0x54}, {&(0x7f0000000600)=""/205, 0xcd}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/214, 0xd6}], 0x4, &(0x7f0000001840)=""/139, 0x8b}, 0x1000}, {{&(0x7f0000001900)=@xdp, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001980)=""/15, 0xf}, {&(0x7f00000019c0)=""/68, 0x44}, {&(0x7f0000001a40)=""/30, 0x1e}, {&(0x7f0000001a80)=""/181, 0xb5}, {&(0x7f0000001b40)=""/68, 0x44}, {&(0x7f0000001bc0)=""/203, 0xcb}], 0x6, &(0x7f0000001d40)=""/166, 0xa6}, 0x7}], 0x4, 0x10001, &(0x7f0000001f00)={0x0, 0x1c9c380}) 07:26:11 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x7, &(0x7f0000000040)="0a8f7ca2e06c2d0245126285718060") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) lseek(r1, 0x0, 0x3) [ 472.188755] 9pnet: Insufficient options for proto=fd 07:26:11 executing program 5: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2cad"]) 07:26:11 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0xe7ffffffffffffff]}) [ 472.369000] FAT-fs (loop4): bogus number of reserved sectors [ 472.380545] FAT-fs (loop4): Can't find a valid FAT filesystem [ 472.407094] 9pnet: Insufficient options for proto=fd 07:26:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000140)=[{r0}], 0x1, 0xb7) close(r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) 07:26:12 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x8040, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r4 = accept4$alg(r2, 0x0, 0x0, 0x0) sendfile(r4, r3, 0x0, 0xa10a) 07:26:12 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:26:12 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) [ 472.432612] 9pnet: Insufficient options for proto=fd [ 472.433239] FAT-fs (loop4): bogus number of reserved sectors [ 472.498882] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:12 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x3, 0x40000) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000180)=""/92) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f00000000c0)={0x7ff, 0x42c}) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x4, 0x3ff, 0x2, 0x10000, 0x8, 0x6, 0x0, 0x0, 0xff, 0x9, 0x7fffffff, 0x3}) r1 = socket$inet6(0xa, 0x803, 0x7) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") fchdir(r1) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3dcd5f83a31d1c2fdb91ed01c01b5afc9c", @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB=',\x00']) 07:26:12 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) r3 = msgget$private(0x0, 0xa0) msgctl$MSG_INFO(r3, 0xc, &(0x7f0000000080)=""/172) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000180)=0x4, 0x4) r4 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000687000)=0x9, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000000, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendfile(r2, r1, 0x0, 0xa10a) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f00000001c0)=""/157) 07:26:12 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:26:12 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) connect$l2tp(r0, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x0, 0x2, 0x4, 0x2, {0xa, 0x4e20, 0x9, @mcast2}}}, 0x3a) connect$l2tp(r3, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x6, @empty, 0x262}}}, 0x3a) 07:26:12 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x2000000]}) [ 472.672551] 9pnet: Insufficient options for proto=fd [ 472.699165] 9pnet: Insufficient options for proto=fd 07:26:12 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',nfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) utimensat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x100) 07:26:12 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) [ 472.777407] FAT-fs (loop4): bogus number of reserved sectors [ 472.788586] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000140)=[{r0}], 0x1, 0xb7) close(r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) 07:26:12 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 472.864416] FAT-fs (loop4): bogus number of reserved sectors [ 472.899495] 9pnet: Insufficient options for proto=fd [ 472.905570] FAT-fs (loop4): Can't find a valid FAT filesystem [ 472.947693] 9pnet: Insufficient options for proto=fd 07:26:12 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x200000, 0x0) 07:26:12 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:26:12 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0xfdfd]}) 07:26:12 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 473.090968] 9pnet: Insufficient options for proto=fd [ 473.122382] 9pnet: Insufficient options for proto=fd [ 473.199767] FAT-fs (loop4): bogus number of reserved sectors [ 473.230983] FAT-fs (loop4): Can't find a valid FAT filesystem [ 473.302272] FAT-fs (loop4): bogus number of reserved sectors [ 473.308297] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:13 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000000)) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) 07:26:13 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0xffff, &(0x7f0000000100)={0x3}, 0x8) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:26:13 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x2, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7, 0x21, 0x2}, 0x7) r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x42000) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000180)=""/248, 0xf8}, {&(0x7f0000000280)=""/215, 0xd7}], 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x7) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") sync_file_range(r2, 0x100, 0x4, 0x2) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 07:26:13 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0xe7]}) 07:26:13 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000140)=[{r1}], 0x1, 0xb7) close(r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) 07:26:13 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) [ 473.684252] FAT-fs (loop4): bogus number of reserved sectors [ 473.690292] FAT-fs (loop4): Can't find a valid FAT filesystem [ 473.695908] 9pnet: Insufficient options for proto=fd 07:26:13 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 07:26:13 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="e1000000602441e54518f1bb7b2b92238a0a00dd28b88fc33970b56e8bdbc24710caea4b9f122c18a3e94a6dfa22704d63eac5ed99ecb660776fdf3370a004f545feb3f946e4182838b5f0b646daba7055c018531c20268c4b90989774e62b7ea58dcd9f65f2a28065eda383ffec75a1c00724f6c3475fa15b8aff68606f9097767609dd431a8461dcd3a199f889dafecb0965731b69f11da7d9e0f89099e10335549711aa6d722bae16f05e4cb4039e1a4d008ac41ba72cff272a8a7f8427f293a2afe0b71bca684a2652134afcbe777699dd00574bc65ef16e8b00000000000000000000cc4448b3c6a8c3421816fcf509a1fc0c948a393bca8958544269fd9933d3c92238dbd79f7d0703f298cf56919fb1a89bd0bd3c3b4696b0bcc13c332f2d39447dd7277e9b4f0a46d2a509debc353716da5734e6056d70ea45e41eff954c2ab3691215d8262510bbaca92539fd8df0ffbb5a43d8d7e35ce299c307a8"], &(0x7f0000000040)=0xe9) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000200)={r1, 0x401}, 0x8) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000100)={0x3, 0x1d, "390926d3cb4ca145598eed66784b1a3cc083780c42b1338a399cb548ac"}) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) lseek(r3, 0x0, 0x3) 07:26:13 executing program 1: r0 = open(&(0x7f0000000000)='./file0\x00', 0x280000, 0x4) accept$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000080)={{0x5, 0x4}, 'port1\x00', 0x2, 0x61805, 0xe024, 0x7, 0x348, 0xa2d, 0x5, 0x0, 0x1}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000500)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000640)={0x0}, &(0x7f0000000680)=0xc) r3 = syz_open_procfs(r2, &(0x7f0000000900)='net/sockstat\x00') bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x3ef) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000140)={'teql0\x00', {0x2, 0x4e20, @multicast1}}) r4 = accept4$alg(r1, 0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000280)={'raw\x00'}, &(0x7f0000000300)=0x54) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x29) sendfile(r4, r3, 0x0, 0xa10a) [ 473.736400] 9pnet: Insufficient options for proto=fd [ 473.775703] FAT-fs (loop4): bogus number of reserved sectors [ 473.791491] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:13 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) r0 = geteuid() syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000440)=[{&(0x7f0000000080)="d3e011a4ba657053999895d0138e456b37da90f4b226dfdf5939505297", 0x1d, 0x3f}, {&(0x7f0000000180)="5e963faec91aa6abcc40929351cf52537e7597fe74987964d14d97d00abb0a4684e082281d12e37d7dd27a89527578370a128f1fdde1360c4c497c962af70eae69a4b47773cc4b048d50", 0x4a, 0x100}, {&(0x7f0000000200)="01b7a06eebe3d7f4b00ae355659c1eace144b2b19dcbebedef06acac22863a0d7098d7a6f58859cc3fb38044ca030084313a0f79fd4c6e3001b00ab563422f488fd4d6a2dfff6863d690afe68db8675805b568e4caa01b39805988836917b3c48b82fe9005f13e9e3377665788bc0231bd73bcc0d1f0bb53d138bac8bd91af71de38b869e889990a83d657888170fe2de0cefb87c4a97cb74c35f3ecfc4693e6561867474f5825081e6182de707017e1dc6efaa60b0e3962119808", 0xbb, 0x5}, {&(0x7f00000002c0)="825b59cd2fcbbec4b3a47a224c0892aaf6557314bce6baa2b4350f375e2538874f36854d1d1fbf1976bc23786172b6062b8f138deb0f55a424c3362acc89e383a2e2132613c0c1a64fc15940e77fde9ed4a3185590d90f494766f7084244943c071b5562d43fa980549e241ad64a681157057ec40966fa21f03aa7730d57d28cc65c3d909b46007dc017b7cd", 0x8c}], 0x10, &(0x7f00000004c0)={[{@shortname_lower='shortname=lower'}, {@shortname_winnt='shortname=winnt'}, {@shortname_lower='shortname=lower'}], [{@fsname={'fsname'}}, {@dont_appraise='dont_appraise'}, {@fowner_gt={'fowner>', r0}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]}) 07:26:13 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000140)=[{r1}], 0x1, 0xb7) close(r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) 07:26:13 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_netdev_private(r3, 0x89f0, &(0x7f0000000100)="caf6504d76fe104863154b84de774365c08c8b622a29ed9155d48ea300234f13080e858d22c2a1d0308d9a750287858e456afbeeb84871c916a45730a003d87d2f147f8f5280ba8140c07e6dcbd43afc4e992eea183333a35d1a4fe4a852abaca7ebda4b7ccaae19695786b3985bf193a7284c3c84f8e900371b40c8bf225fcc974ed3a2dd0d04e6c69e75fb9e775ed7112d4497894ca2f9f90aa6c42bfaa4814ef1087802ff60ba8e0ff981e00edc137e85e71bb26b2bb9091c91dee54dd9b50c14725dfc785d71fad40ac94faa133eabfb1d46e6ec14368de89243f087e326a313892cc411248dfe8e6b6d9119f0baca") r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r4, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x24, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'dummy0\x00'}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) lseek(r2, 0x0, 0x3) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000240)={0x3, 0x6, 0x5, 0x7fffffff, 0x0, 0x8, 0x9, 0x1f, 0x2, 0x3, 0xcd9, 0x100}) getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f0000000400)=""/241, &(0x7f0000000280)=0xf1) 07:26:13 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:26:13 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfd]}) [ 473.979132] 9pnet: Insufficient options for proto=fd 07:26:13 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x4, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000400)=ANY=[@ANYBLOB="030000000000000000f0100000000000c200000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000430100000000000c400000000000000", @ANYPTR=&(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00y\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) ioctl$BLKBSZSET(r2, 0x40081271, &(0x7f0000000000)=0xffffffff) sendfile(0xffffffffffffffff, r2, 0x0, 0xa106) [ 474.044027] 9pnet: Insufficient options for proto=fd 07:26:13 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x20000, 0x0) ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f0000000180)=""/221) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 07:26:13 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) recvmsg(r0, &(0x7f0000000040)={&(0x7f0000000100)=@nl, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000180)=""/155, 0x9b}, {&(0x7f0000000340)=""/132, 0x84}, {&(0x7f0000000400)=""/212, 0xd4}, {&(0x7f0000000500)=""/140, 0x8c}, {&(0x7f00000005c0)=""/113, 0x71}, {&(0x7f0000000640)=""/114, 0x72}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0x7}, 0x3) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl(r2, 0x1, &(0x7f00000000c0)="0a5c2d023c126285128070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) fchmod(r1, 0x10) r4 = socket$l2tp(0x18, 0x1, 0x1) readahead(r4, 0x10001, 0x53) readv(r1, &(0x7f0000002900)=[{&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000001740)=""/125, 0x7d}, {&(0x7f00000017c0)=""/13, 0xd}, {&(0x7f0000001800)=""/142, 0x8e}], 0x4) lseek(r3, 0x0, 0x3) 07:26:13 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ff]}) [ 474.121829] FAT-fs (loop4): bogus number of reserved sectors [ 474.141776] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:13 executing program 1: socket$alg(0x26, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(authencesn(rmd128,xts-serpent-sse2))\x00'}, 0xcb) r1 = accept4$alg(r0, 0x0, 0x0, 0x80000) sendfile(r1, r0, 0x0, 0xa10a) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0x5, 0x4) [ 474.223549] FAT-fs (loop4): bogus number of reserved sectors [ 474.240039] FAT-fs (loop4): Can't find a valid FAT filesystem [ 474.249319] 9pnet: Insufficient options for proto=fd 07:26:13 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000040)) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2cddc2e307683fa126a89b3a5090e7673c0e08de16ae53f0131cb449fdbc40a2db160baff8fc1a797b56f4dffc20101109125e91e89cf85e5c1aa663d0f7bb099bdd7bf084f8b0b4cc9d9c02d19ac2099e93b1deb87c13bcdd6f21cc6a7a53fd2a4daf53b9a71190f9a3"]) 07:26:13 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000140)=[{r1}], 0x1, 0xb7) close(r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) 07:26:14 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:26:14 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 07:26:14 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000400)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x1, 0x1) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="aa0163c2114524a7198b7db482c648d1e8c3cb233c237a489d614be3f926ba04bc883105a89e3e798921ad2dc378f8d69fb991f5b52e2ed0b9cd69723c06b6971d2572a76a2cb9fe783a1b08154a2f7bd0e1b93696f103821ac0639e9ce1c99fb44f634311f6e123289ded864495a187639286357731cff7835458e51802a1098d12683dfc27fa0ddb9534610c7c44bee19d97e34577c4a9360169da152ba0e4b69de6ac5d609024aaa8c90c9121f5252ad388fb51e5798cd695dcc0989ba60f43001b06c52ea41404fdc2ac022474d099f1274095e6b8ef9728d06103c0f75fc4bc8955", @ANYRES16=r4, @ANYBLOB="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"], 0xa4}}, 0x0) socket$l2tp(0x18, 0x1, 0x1) lseek(r3, 0x0, 0x3) accept4$nfc_llcp(r0, 0x0, &(0x7f00000003c0), 0x800) [ 474.440320] 9pnet: Insufficient options for proto=fd 07:26:14 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x78, &(0x7f0000000000)=[@in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e24, 0x0, @mcast1, 0x100}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e22, 0xfffffffffffffffb, @dev={0xfe, 0x80, [], 0x1e}, 0x2}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x14}}]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={r3, @in={{0x2, 0x4e24, @broadcast}}, 0x5, 0x4, 0x6, 0xd8b4, 0x40}, &(0x7f0000000100)=0x98) 07:26:14 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_open_dev$rtc(&(0x7f00000000c0)='/dev/rtc#\x00', 0x9, 0x40000) r1 = socket$inet6(0xa, 0x803, 0x7) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$amidi(&(0x7f00000006c0)='/dev/amidi#\x00', 0x1000, 0x1) r5 = getpid() ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000840)={0xffff, 0x1, r5, 0x0, r2, 0x0, 0x40, 0x3}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e22, @remote}}, 0x1, 0x1f, 0x6, 0x200000000000000, 0x5}, &(0x7f0000000580)=0x98) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000005c0)={r6, @in6={{0xa, 0x4e21, 0x3, @empty, 0x3}}}, &(0x7f0000000680)=0x84) r7 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x1f00000000000000, 0x20800) mount$fuseblk(&(0x7f0000000200)='/dev/loop0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='fuseblk\x00', 0x2000080, &(0x7f0000000400)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1200}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x1c0000000}}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@subj_user={'subj_user', 0x3d, 'wlan1ppp1'}}]}}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000700)={r6, @in6={{0xa, 0x4e23, 0x7, @remote, 0x521}}, 0x0, 0x7f, 0x8, 0x0, 0x8}, &(0x7f00000007c0)=0x98) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x8, &(0x7f0000000800)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$int_out(r0, 0x2, &(0x7f0000000180)) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000880), &(0x7f00000008c0)=0xc) [ 474.554239] FAT-fs (loop4): bogus number of reserved sectors [ 474.567375] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:14 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdfd]}) 07:26:14 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) prctl$PR_SET_FPEMU(0xa, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000040)={0xc973, 0x9, 0x7fffffff}, 0xc) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 474.636550] FAT-fs (loop4): bogus number of reserved sectors 07:26:14 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x80000) accept4$alg(r0, 0x0, 0x0, 0x800) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000100), 0x2) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000300)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000000140)=0xe8) r4 = getegid() fchown(r0, r3, r4) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r5 = accept4$alg(r2, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r2, 0x50, &(0x7f0000000040)}, 0x10) sendfile(r5, r2, 0x0, 0xa10a) [ 474.680053] 9pnet: Insufficient options for proto=fd [ 474.681340] FAT-fs (loop4): Can't find a valid FAT filesystem [ 474.714814] 9pnet: Insufficient options for proto=fd 07:26:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x0, 0x300) poll(&(0x7f0000000140)=[{r1}], 0x1, 0xb7) close(r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) 07:26:14 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x0, &(0x7f0000000140)="0400000000000000718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 07:26:14 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) 07:26:14 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000180)=0x0) r2 = syz_open_procfs(r1, &(0x7f00000001c0)='cpuset\x00') ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x3, {0xb, @pix={0x0, 0x1f}}}) r3 = socket$inet6(0xa, 0x803, 0x3) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x9}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000140)=r4, 0x4) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000200)={0x80000001, 0x3, 0x1, 0x1104, 0x8c02, 0xe7, 0x4}) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) ioctl$FS_IOC_GETFSLABEL(r5, 0x81009431, &(0x7f0000000340)) lseek(r3, 0x0, 0x3) 07:26:14 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\xff', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) [ 474.914179] 9pnet: Insufficient options for proto=fd 07:26:14 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0xe80, 0x0) personality(0x600000b) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0xfffffffffffffffd, &(0x7f0000000440)=ANY=[]) 07:26:14 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x80007, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:26:14 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 07:26:14 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) 07:26:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x0, 0x300) poll(&(0x7f0000000140)=[{r1}], 0x1, 0xb7) close(r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) 07:26:14 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:26:14 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvfrom(r0, &(0x7f0000000000)=""/135, 0x87, 0x2, &(0x7f0000000180)=@tipc=@name={0x1e, 0x2, 0x0, {{0x2}}}, 0x80) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 07:26:14 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffe7]}) 07:26:14 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000140)={0x4, 0x8, 0xfa00, {r2, 0x3}}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) lseek(r3, 0x0, 0x3) 07:26:14 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa10a) 07:26:15 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 07:26:15 executing program 5: prctl$PR_GET_TSC(0x19, &(0x7f0000000180)) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c777f6d386771", @ANYRESHEX, @ANYBLOB=',\x00']) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@loopback, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000000300)=0xfdd5) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x50, r3, 0x0, 0xf66, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd17}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xcad1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x9}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffffffffff000}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x400000000000}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008000}, 0x44) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000040)='./file0\x00', r2, r4) [ 475.350572] 9pnet: Insufficient options for proto=fd [ 475.357350] FAT-fs (loop4): bogus number of reserved sectors [ 475.370755] 9pnet: Insufficient options for proto=fd [ 475.376877] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:15 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000000100)={0x80, 0x2, 0x4efd}) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) write$P9_RFLUSH(r0, &(0x7f0000000040)={0x7, 0x6d, 0x1}, 0x7) lseek(r2, 0x0, 0x2) [ 475.498574] 9pnet: Insufficient options for proto=fd 07:26:15 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:26:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x0, 0x300) poll(&(0x7f0000000140)=[{r1}], 0x1, 0xb7) close(r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) [ 475.549232] 9pnet: Insufficient options for proto=fd 07:26:15 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0xfffffffffffffff7, &(0x7f00000002c0)="0a5c4f023c1362d3008a70a5382f33db51ca9fa35c7c27857180b413863cf12eb0d6d9836978fc0357869203dafff0221a2447e5410cb6b8ef7e199acedcf5450b") setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x1, 0x4) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) 07:26:15 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) getpgrp(r0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r3 = accept4$alg(r1, 0x0, 0x0, 0x0) sendfile(r3, r2, 0x0, 0xa10a) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='veno\x00', 0x5) [ 475.705875] FAT-fs (loop4): bogus number of reserved sectors [ 475.745579] FAT-fs (loop4): Can't find a valid FAT filesystem [ 475.769096] 9pnet: Insufficient options for proto=fd [ 475.781115] 9pnet: Insufficient options for proto=fd 07:26:15 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) fcntl$setlease(r0, 0x400, 0x1) 07:26:15 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) [ 475.817989] FAT-fs (loop4): bogus number of reserved sectors [ 475.833601] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:15 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) 07:26:15 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000040)={0x101ff, 0x0, &(0x7f0000ff2000/0xe000)=nil}) lseek(r2, 0x0, 0x3) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000100)={0x0, {0x1, 0x1ff, 0x3ff, 0x1f}}) 07:26:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) poll(0x0, 0x0, 0xb7) close(r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) 07:26:15 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\"', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) [ 475.969586] 9pnet: Insufficient options for proto=fd [ 476.002866] 9pnet: Insufficient options for proto=fd 07:26:15 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 07:26:15 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe7]}) 07:26:15 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x4, 0x9, 0x1, {0xb, @pix={0x3, 0x1, 0x4745504a, 0xf, 0xffff, 0x9, 0x8, 0x5, 0x1, 0x7, 0x8ed453c50d41515d, 0x3}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:26:15 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'ip_vti0\x00', {0x2, 0x4e20, @local}}) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x400000000a10a) [ 476.200817] 9pnet: Insufficient options for proto=fd [ 476.225773] 9pnet: Insufficient options for proto=fd 07:26:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) poll(0x0, 0x0, 0xb7) close(r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) 07:26:15 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe7]}) 07:26:15 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x2, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x100001890e, &(0x7f0000000340)="82e5bdf65b2d023c126285718070") fallocate(r1, 0x40, 0x5, 0x7ff) recvmsg$kcm(r0, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x3, r3, 0x30, 0x1, @in6={0xa, 0x4e22, 0x3, @local, 0x8}}}, 0xa0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x6}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000500)=@assoc_value={r4, 0x401}, 0x8) socket$l2tp(0x18, 0x1, 0x1) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000380)={0x6, 0x0, [{0x1000000000, 0x2, 0x0, 0x0, @msi={0x1ff, 0x5, 0xffffffff}}, {0x7, 0x7, 0x0, 0x0, @irqchip={0xfffffffffffff800, 0x77c}}, {0x7, 0x3, 0x0, 0x0, @sint={0x43, 0x9}}, {0x6, 0x2, 0x0, 0x0, @msi={0x1, 0x8, 0xfffffffffffffffc}}, {0x10000, 0x3, 0x0, 0x0, @irqchip={0x10000, 0x3}}, {0x0, 0x2, 0x0, 0x0, @msi={0x3, 0x85, 0xffffffffffffffff}}]}) lseek(r2, 0x0, 0x3) 07:26:15 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) setsockopt(r0, 0x3, 0xffffffff, &(0x7f0000000000)="6597d35feb75978472ad84ad6d2bd07b1139cd4ce0819e7cf2a48063f2f923c247c5e442c803d256c7b61cf261335bc2d0ef8fe35dbe7352008e7fcefef675ba499809ff2bb8d1aca0e09161153642c1b8a118f498", 0x55) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 07:26:15 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x06', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:26:16 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000000)) socket$alg(0x26, 0x5, 0x0) accept4$alg(r0, 0x0, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) [ 476.494787] 9pnet: Insufficient options for proto=fd 07:26:16 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 07:26:16 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000040)=0x5, 0x4) [ 476.527892] 9pnet: Insufficient options for proto=fd 07:26:16 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c0033b1db6c519bb010b00e7a46370543f8050800000000000000ae9300499e1d0abd62"]) 07:26:16 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000100)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000200)='net/xfrm_stat\x00') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) getsockname(r0, &(0x7f0000000240)=@ipx, &(0x7f00000000c0)=0x80) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000000)=0x0) ptrace$getregs(0xc, r4, 0x5, &(0x7f0000000040)=""/125) sendfile(r3, r2, 0x0, 0xa10a) socket$vsock_stream(0x28, 0x1, 0x0) 07:26:16 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) poll(0x0, 0x0, 0xb7) close(r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) 07:26:16 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) 07:26:16 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x1, 0x1, 0x0, r0}) socket$l2tp(0x18, 0x1, 0x1) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) lseek(r0, 0x3, 0x3) [ 476.792242] 9pnet: Insufficient options for proto=fd 07:26:16 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:26:16 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x2) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") fcntl$dupfd(r0, 0x406, r0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="feffffff6e6f3d59cba59e76d36af82c07a7e8ee0165dbbd42e2b4ad7f026b8f9d461db4009709e3443a90ccccfb2ed08064b5bfb100ba775668205f08ccdb342a4b43729b55a419ddf56ec22395967439a3511466aae1fdaf0e1832ad8c5a048339090725ab342c13bad4949c6209bc6555f304a24bed96175772f395c044e9e86dee4a19b9ff921bb9281bf49af34fc6d0f3449b7d13cb3307d7e73278b1085920b974629d7a69656b0e3ba3a9c0f796114561f248134f834a04625b70", @ANYRESHEX, @ANYBLOB=',\x00']) 07:26:16 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffffffffffff]}) 07:26:16 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d0600000000000000") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x8080, 0x1) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000380)={0x1, {r4, r5+30000000}, 0x9, 0xe4c}) r6 = socket$l2tp(0x18, 0x1, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff5000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff2000/0x4000)=nil, &(0x7f0000000040)="0fb8b90942d6cc274a750c09eac312442676deee6b2e9cf52b856dcc63b7a5dbf52f92", 0x23, r0}, 0x68) lseek(r3, 0x0, 0x3) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)={&(0x7f00000003c0)='./file0\x00', r6}, 0x10) 07:26:16 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x80000088) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) fcntl$setstatus(r1, 0x4, 0x44400) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000080)=0x5) sendfile(r3, r2, 0x0, 0xa10a) unlink(&(0x7f00000000c0)='./file1\x00') ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 477.045290] FAT-fs (loop4): bogus number of reserved sectors [ 477.080809] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:16 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000140), 0x0, 0xb7) close(r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) [ 477.189387] 9pnet: Insufficient options for proto=fd [ 477.196665] FAT-fs (loop4): bogus number of reserved sectors [ 477.233208] FAT-fs (loop4): Can't find a valid FAT filesystem [ 477.238196] 9pnet: Insufficient options for proto=fd 07:26:16 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ffffffffffffff]}) 07:26:16 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x0e', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:26:16 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) io_setup(0x83, &(0x7f0000000080)=0x0) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x713, r1, &(0x7f00000000c0)="5da1de7f7e758c1fd7f9b8aa9b278fd2da252f", 0x13, 0x5, 0x0, 0x2, r1}, &(0x7f00000001c0)) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x7, 0x1, 0x1, &(0x7f0000ffd000/0x1000)=nil, 0x8ad}) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 07:26:16 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000040)={@broadcast, @dev}, &(0x7f0000000100)=0x8) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:26:16 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x5e, &(0x7f0000000000)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@', 0xffffffffffffffff}, 0x30) r3 = syz_open_procfs(r1, &(0x7f0000000300)='net/igmp6\x00\x83\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@\x1e8U\xd9\xc4-q{\x86@\xb3\x9dC\x8e\x83\x0fe?3\xb407\x18\x15\x00\xfc\xfe\x1b\xad\x89}\xf2\xa5,\xd5\x02j\xcc\xa2\xb0a\xdc\xd0\xeb:\x13\x05|O(\x1cAX\x83B,\x91^\xce\xd1\x94\xa0F\xbf\"\x95\xd2\xa7\\aR#\xe5\xc4\x15\x1aG\x15#\x1a?\x8dJ7m\xa1\xae\xc7\x93\xc0\x13\xfa[\xc6?\xa2e\x820{k\xe5|\xdd\xf7\xc3\xfe\xbb\xa20EW\xd2&\xee\xe7\xce+]Z\xeb\xe6\x88\x96\xca\xe5{\xee\xe5h\x99\xc71\x9a\xbb|B\xf5\xff\xff\xff') bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000140)=0x80, 0x4) r4 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x81, 0x2100) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f00000000c0)={0x7ff, {0x80, 0xffffffff, 0x1, 0x1, 0x80000001, 0x9}}) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) write$P9_RSTAT(r4, &(0x7f0000000540)={0x16a, 0x7d, 0x1, {0x0, 0x163, 0x1f, 0xe5, {0x1, 0x3, 0x7}, 0x11000000, 0x446c, 0x3ff, 0x1, 0xe, 'keyring,wlan1:', 0xc, '/dev/media#\x00', 0x2c, 'wlan1mime_typeproc-%/GPL[\x90vboxnet1cgroupem0*', 0xea, 'net/igmp6\x00\x83\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@\x1e8U\xd9\xc4-q{\x86@\xb3\x9dC\x8e\x83\x0fe?3\xb407\x18\x15\x00\xfc\xfe\x1b\xad\x89}\xf2\xa5,\xd5\x02j\xcc\xa2\xb0a\xdc\xd0\xeb:\x13\x05|O(\x1cAX\x83B,\x91^\xce\xd1\x94\xa0F\xbf\"\x95\xd2\xa7\\aR#\xe5\xc4\x15\x1aG\x15#\x1a?\x8dJ7m\xa1\xae\xc7\x93\xc0\x13\xfa[\xc6?\xa2e\x820{k\xe5|\xdd\xf7\xc3\xfe\xbb\xa20EW\xd2&\xee\xe7\xce+]Z\xeb\xe6\x88\x96\xca\xe5{\xee\xe5h\x99\xc71\x9a\xbb|B\xf5\xff\xff\xff'}}, 0x16a) r5 = accept4$alg(r0, 0x0, 0x0, 0x1) sendfile(r5, r0, 0x0, 0x9ad7) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000200)=0x200030, 0x4) write$binfmt_elf32(r2, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x8001, 0xe7, 0x0, 0x5, 0x313d6a956127ebb0, 0x3f, 0xa69, 0x3cc, 0x38, 0x262, 0x9, 0x4, 0x20, 0x1, 0x2, 0x1, 0x6}, [{0x70000000, 0x100000001, 0x3, 0x3f, 0x200, 0x1, 0x20, 0x7fff}, {0x5, 0x5, 0xfffffffffffffffa, 0x6, 0x3, 0x80, 0x9, 0x4cf8}], "6880bec3fc9c532e6af48028d4e96cc8049d2d021c1f81e9a1f1fb3c130e310c76d9924c36aab0b836c5660eeb0992abb3527138dec0464ff1225f18a262a154f1592db247ff3fa273fabde319b32602aa04d28434bf28ca6065caf6a51971b9d2baaa435df763d96863679d817f1836eded34c31762da060949008c4a624d0b74c2a25b3b68986a8c77d754d5e932579572c40ea995cd"}, 0x10f) [ 477.471598] 9pnet: Insufficient options for proto=fd 07:26:17 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe7]}) 07:26:17 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)=@deltaction={0x130, 0x31, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x28, 0x1, [{0x14, 0x6, @TCA_ACT_KIND={0xc, 0x1, 'skbmod\x00'}}, {0x10, 0x1e, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0x10, 0x1, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x14, 0xf, @TCA_ACT_KIND={0xc, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0x10, 0x9, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0x14, 0x12, @TCA_ACT_KIND={0xc, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x15, @TCA_ACT_KIND={0x8, 0x1, 'xt\x00'}}, {0x14, 0x15, @TCA_ACT_KIND={0xc, 0x1, 'police\x00'}}, {0x10, 0x19, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0x10, 0x8, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0x10, 0x4, @TCA_ACT_INDEX={0x8, 0x3, 0x9c8}}, {0x14, 0x3, @TCA_ACT_KIND={0xc, 0x1, 'skbmod\x00'}}, {0x10, 0x1d, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x18, @TCA_ACT_INDEX={0x8, 0x3, 0xf1}}, {0x14, 0xf, @TCA_ACT_KIND={0xc, 0x1, 'mirred\x00'}}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4040051}, 0x24000800) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) 07:26:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000140), 0x0, 0xb7) close(r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) 07:26:17 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(r0, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x40000000) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) setsockopt$inet6_buf(r0, 0x29, 0x1c, &(0x7f0000000180)="4275be31fe05119ef4069f7c325c25cac063be8aa87405a333e11576ab9f2e9b8e7990bf19cf9f68260a952abab50ebe911ab544b8be18ff8d8a", 0x3a) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000040)={0x4, "7229b900a39e5acea78a59759d571f7ffbc1e7c4e270b2028c1e48174558ff0e", 0x1, 0x8000000000000001}) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='veth0\x00', 0x10) lseek(r2, 0x0, 0x3) openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x10000, 0x0) 07:26:17 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000000380)=0xe8) r3 = getuid() getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000440)={{{@in, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f0000000540)=0xe8) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000600)=0x6) syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f0000000080)='./file0\x00', 0x9, 0x1, &(0x7f0000000680)=[{&(0x7f0000000800)="3956cc04dedb0554dc2c8cdb0a322e82804ffa81da458754f8ab536724010f5d5303590aac796cae5fff51cdb6b6919872f0705a31c7aeb1468ac90d2a9779a133a86244b27e543aa258f15441facc576532fdeb6ea43a5f1517b8bafe3041e47d60242b6040fd19abfff6c22fda88b0cd590a278356360a372e1c2f2c9495bc73408e3575a948657f05b546df34a5cf6f9bc1dd69d70bb9e6136c6e5cfdf1611e3c99e7366c8366d76ec7f5448b0db04653f2cc5cc91f76ae17ba4ddcadcdebaa069bebf13e84fea6f3ea7d9d88335728608da2dab1585fdee8c5eceb4abb2a2b7b9d4ed1", 0xffffff21, 0x7f}], 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB='datacow,noinode_cache,obj_user=/@,hash,euid=', @ANYRESDEC=r2, @ANYBLOB="005e4bf4fd764a0000000000ceca02d9e2a22fb0459fb30b134481d5ffe951c1881e1345f6b9b4a8651107a1a27c7712d85c7fbde047f6c379ac4901f358050a990f22aff662f1ff243e3e033c487be63d63bd8284eacbb827da2c3fbea69bfd9b686df0bb1d62c66a", @ANYRESDEC=r3, @ANYBLOB=',fowner>', @ANYRESDEC=r4, @ANYBLOB=',\x00']) creat(&(0x7f0000000640)='./file0\x00', 0x20) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 07:26:17 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x04', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:26:17 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ffffff]}) 07:26:17 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x2) fchmod(r0, 0x1c0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) prlimit64(r3, 0xf, &(0x7f0000000080)={0x2, 0x8000}, 0x0) r4 = accept4$alg(r1, 0x0, 0x0, 0x0) sendfile(r4, r2, 0x0, 0xa10a) [ 477.855300] 9pnet: Insufficient options for proto=fd 07:26:17 executing program 0: prctl$PR_SET_UNALIGN(0x6, 0x3) r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="ca000000f8a5ceea560ccc96a75e1f94f2d27aba478580870372d706a2b6fe1dd4fe630f8e946df5ca5950da89e9cc3aecbd734a0527894c8eb3384c8d86ac67a73e0c7cdc7323f8dca73be69598d6e08595b7485d1a46c5841504ac58e5c00632d97beef649ff96eaf45d4a451e068f7c2dc31632eed4c4b7909417c9f8d2b7ef4290381edc0ccc620ccedadd3e57cf50050dd0eaa84f45569c29af7689bfe4598adea172f74d10b47b0eb223fefcfb04f0633520f38aaf08018e6c1f15f6f40a0a7272f9a243d7f6d8c811d84b"], &(0x7f0000000040)=0xd2) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={r2, 0x1}, &(0x7f0000000340)=0x8) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) lseek(r3, 0x0, 0x3) 07:26:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000140), 0x0, 0xb7) close(r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) 07:26:17 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 07:26:17 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\a', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:26:17 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x400, 0x0) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f00000002c0)=0x8000) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xa10a) r3 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x6, 0x0) setxattr$security_ima(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='security.ima\x00', &(0x7f00000001c0)=@v2={0x3, 0x0, 0x12, 0x3, 0xa1, "6f5250c731de0cbf27ad91f61979564db19f66e3ad126ff5c07fa76a8aaf5c0a4442f2addecb752f6a28214d8cc9a962eed1c69b47c8b6feb2f893322af1bf59ca97a08108280e6b6e3d10c968d799a399c837c41cc204b385d134b8a0d824b185fae7773da706aec4af7fa04bc79774ec052d475996314d0f23e304d703d1efdd83fd89f28580936c9041fd534815a6ca2b6f591b38018da073909f3d28700264"}, 0xab, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r3, 0xc028564e, &(0x7f0000000080)={0x0, 0x1, [0x7, 0x400, 0x9, 0xc000000000000000, 0x1, 0x81, 0x1, 0x80000000]}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r4, 0xc008551a, &(0x7f0000000100)={0x4, 0x18, [0xfffffffffffff80e, 0x0, 0x8, 0x6, 0x9, 0xffffffffffff8001]}) 07:26:17 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 07:26:17 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(r1, &(0x7f00000003c0)="5f8e5bca42f8017bc211dfb35c89ea4ceea02544b409770ce9a2dcf20473380b1abff467c90e6a656400dc72cce362c0935788cc5a09ce4f8460c4a60239a949946be7ab4511674d9016dbaef5aaa95d6c736ee027a2cb00000000a45183836bd116badbd1c3b03124f30000", 0x6c) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) write$P9_RXATTRWALK(r0, &(0x7f0000000040)={0xf, 0x1f, 0x1, 0x3}, 0xf) socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000100)={{0x8, 0x95f0, 0x0, 0xae2, 0xb30a, 0x2}, 0x4}) lseek(r2, 0x0, 0x3) 07:26:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000140)=[{}], 0x1, 0xb7) close(r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) [ 478.567438] 9pnet: Insufficient options for proto=fd 07:26:18 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socket$inet(0x2, 0xa, 0x20) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 07:26:18 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000000)) arch_prctl$ARCH_GET_CPUID(0x1011) sendfile(r2, r1, 0x0, 0xa10a) 07:26:18 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 07:26:18 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) 07:26:18 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:26:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000140)=[{}], 0x1, 0xb7) close(r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) 07:26:18 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffffffffffff]}) [ 478.690256] syz-executor5 uses obsolete (PF_INET,SOCK_PACKET) [ 478.693131] FAT-fs (loop4): bogus number of reserved sectors [ 478.719972] 9pnet: Insufficient options for proto=fd [ 478.722288] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:18 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 478.758254] 9pnet: Insufficient options for proto=fd 07:26:18 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) setsockopt$sock_void(r1, 0x1, 0x0, 0x0, 0x0) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) syz_open_pts(r1, 0x42) sendfile(r2, r1, 0x0, 0xa10a) [ 478.798361] FAT-fs (loop4): bogus number of reserved sectors [ 478.804859] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:18 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdfd]}) 07:26:18 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:26:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000140)=[{}], 0x1, 0xb7) close(r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) 07:26:18 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = semget$private(0x0, 0x3, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x8, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) semop(r0, &(0x7f0000000040)=[{0x0, 0xfff, 0x1000}, {0x1, 0x0, 0x800}, {0x2, 0xa22, 0x1800}, {0x3, 0x80000001, 0x1000}], 0x4) r2 = socket$inet6(0xa, 0x803, 0x7) ioctl(r2, 0x6d1c, &(0x7f0000000000)="f80c67023c126285718070933b3c329539218992b9398ae1ba23287262ed9de7832877e3cf82b0be95") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 07:26:18 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000040)) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000340)=""/4096) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000001340)=""/135) lseek(r2, 0x0, 0x3) r3 = getpgrp(0xffffffffffffffff) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f0000000100)={0x9}) write$UHID_INPUT2(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0c0000006b0001e886fa33c1a7377e8a5db1a3eae051a39ce2725554c93e503fe22828ad22528053bf64470881a040d079ca696530a6fc7e43ceb5c77e168a91d543c70f234cad3638b1321f7bc84b4d1dcde269cda863774ee9c7c784bbbfec134fd56ccfb0d103a4d19d99caf25af080"], 0x71) 07:26:18 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x1, @ipv4={[], [], @local}, 0x7fff}, @in6={0xa, 0x4e21, 0x800, @mcast2, 0x8}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1a}}, @in={0x2, 0x4e20, @multicast2}], 0x58) ioctl(r1, 0x200, &(0x7f0000000080)="f9ac24a17b9535af36c7d0146ae1c0d3b4348aa182950ec1059d0b316365e18bfc23a641b9dcc776f90cdcbbe4dd97249b1ea3ddacd5c88dfed135c5b657d72f9c2f3bd1b359e2235b7284dc72f87cdcebc5069fbf40b737efa73a22416d12c1ef93b457127ed69fb52da7cd54c3b8911a30d9316ec164863af2e1a69933981236c9c57ffd8c8466cdb9382849e11402b03a9083fd49be90fe4a584fade806e8014ee856213e0520e91e07a05ad3eb11034279b82be074a08275919b4770e73b9a6159ad5d9655f291b15a2e6b89a1f987608c2bed5ccc289c783daad59b1a140e2b2543f3b96cb502d2dfde") 07:26:18 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 07:26:18 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000040)={0xa, 0x6, 0x100000000, 0x5}, 0xa) [ 479.062855] 9pnet: Insufficient options for proto=fd [ 479.064045] FAT-fs (loop4): bogus number of reserved sectors [ 479.100220] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:18 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x100a) setxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64IPIN\x00', &(0x7f0000000080)='trans=fd,', 0x9, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="7472616e733d6664c51ad8432c7266", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) 07:26:18 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x3) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000300)={0x4c, "9312ca86e8b566d6ed0029bfd2b77e4bbf96e4b678607ebcf6988a1f70751e54", 0x100, 0x1, 0x20, 0x2, 0x4}) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000100)={0x0, @remote, @multicast1}, &(0x7f0000000240)=0xc) sendfile(r2, r1, 0x0, 0xa10a) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000200)) openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x800, 0x0) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$VT_GETSTATE(r4, 0x5603, &(0x7f0000000400)={0xe7ec, 0x0, 0x49ec}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001400)={{{@in6=@mcast2, @in6=@mcast1}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f0000000140)=0xe8) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000480)={0x33, @empty, 0x4e20, 0x2, 'none\x00', 0x5, 0x0, 0x3c}, 0x2c) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc2001, 0x40) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x5}}, 0x1, 0x20}, &(0x7f0000000580)=0x90) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000005c0)=@assoc_value={r5, 0x1}, 0x8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bridge_slave_1\x00', r3}) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) 07:26:18 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ffffffffffffff]}) 07:26:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) close(r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) [ 479.182985] FAT-fs (loop4): bogus number of reserved sectors [ 479.249316] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:18 executing program 0: r0 = open(&(0x7f0000000480)='./file0\x00', 0x400, 0x10) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f00000004c0)={0xf004, 0x3000, 0x0, 0x9, 0x5}) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000180)=@in, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)=""/50, 0x32}, {&(0x7f0000000340)=""/223, 0xdf}], 0x2}, 0x20) write$P9_RWALK(r1, &(0x7f0000000100)={0x4a, 0x6f, 0x6, {0x5, [{0x4, 0x1, 0x8}, {0x0, 0x2, 0x4}, {0x10, 0x2, 0x1}, {0x1, 0x3, 0x4}, {0x4}]}}, 0x4a) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000000)={0xb}) socket$l2tp(0x18, 0x1, 0x1) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) 07:26:18 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\xff', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:26:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) close(r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) 07:26:18 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe7]}) [ 479.307219] 9pnet: Could not find request transport: fdÅØC [ 479.325037] 9pnet: Could not find request transport: fdÅØC 07:26:18 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='%\'em1-\x00') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) ioctl$RTC_AIE_OFF(r1, 0x7002) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa10a) 07:26:19 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40000, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) 07:26:19 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ffffff]}) 07:26:19 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0xfffffffffffffffd) sendfile(r2, r1, 0x0, 0xa10a) 07:26:19 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x5) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:26:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) close(r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) 07:26:19 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) [ 479.608157] 9pnet: Insufficient options for proto=fd 07:26:19 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7]}) 07:26:19 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 07:26:19 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) socket$inet6(0xa, 0x803, 0x3) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = dup(r0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x6) lseek(r1, 0x4, 0x3) accept$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x1c) [ 479.707330] FAT-fs (loop4): bogus number of reserved sectors [ 479.726087] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:19 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x0, [0x176]}) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r6 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r6, r1, 0x0, 0xa10a) [ 479.787496] FAT-fs (loop4): bogus number of reserved sectors [ 479.823018] 9pnet: Insufficient options for proto=fd 07:26:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000140)=[{r1}], 0x1, 0xb7) close(0xffffffffffffffff) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) 07:26:19 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe7]}) [ 479.845161] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:19 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") accept4(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}}, &(0x7f0000000080)=0x80, 0x800) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 07:26:19 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000040)={{0x2, 0x80, 0xffff, 0x19e4, 0x1, 0x14}, 0xe477}) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000100)=0x10001, 0x2) lseek(r2, 0x0, 0x3) 07:26:19 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) 07:26:19 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) [ 480.008082] 9pnet: Insufficient options for proto=fd 07:26:19 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 480.092100] 9pnet: Insufficient options for proto=fd 07:26:19 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x2, 0x9, 0x1, {0x200000000000000b, @raw_data="5c494fd86df12bb80d6090346c10fc9213e79a91e49d4dc09b5afaa1b17a975daf74300555f6e814f46a045793effed6c0446c83de35b6bcd4162b058694c7313f736601fb24b5e8a9244ca8f8e2e912b681e498ce13c158ff7a91916f857da932d1897bead1d53e4995a8ba07db7a201befd4ea7ed810123e6f1b10289f6bb96b7f8ff917008cfa8cc318cbb361ed148a5ee2b1a5e1615b4afa76a1b0eac59a8d3b4a30d3cd49a05ccea89bc566eb1308a71c6df87452499f81c7b64e792549248d253a40e376cc"}}) socket$bt_rfcomm(0x1f, 0x200100000000000, 0x3) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x1, 0x800, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) ioctl$EXT4_IOC_RESIZE_FS(r1, 0x40086610, &(0x7f0000000040)) 07:26:19 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) [ 480.126904] FAT-fs (loop4): bogus number of reserved sectors [ 480.146544] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:19 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) getsockopt$inet6_mreq(r0, 0x29, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) setsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f0000000000)="9741d8788fa07093724f64615dc66f27813b0fd5caf66d3d9d84c5ff011290313687665da4a731190941ab790357e4409c2743eb913024c319e9c3ecb06c05d5af4ba933a176f04a345ff1b839df1d8807", 0x51) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 07:26:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000140)=[{r1}], 0x1, 0xb7) close(0xffffffffffffffff) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) [ 480.208886] FAT-fs (loop4): bogus number of reserved sectors [ 480.241460] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:19 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x7, 0x78e8) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000040)=0x78) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) sendto(r1, &(0x7f0000000180)="e4e4bd5222eab4ddfaae5e77b5beb9b6d503f6a29a56fe57b7db72beefe1c550b05cfb7fbc24039f3b", 0x29, 0x4000880, &(0x7f0000000440)=@xdp={0x2c, 0x3, r2, 0x1}, 0x80) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0xffffffffffffff38, 0x4, 0x4000, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) lseek(r3, 0x0, 0x3) 07:26:19 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) ioctl(r0, 0x5, &(0x7f0000000100)="81e7fa28febef421e318b330fb9ebaec2d1ebe67ab92cfe1688262b30adaab6169cb6de95bd29a6f3cd3e0ac07837a7dd269dd9ef51c4b4276d8789242efb26d1753d2219efcb1b853cd35babf8a3f8d61f384bd113b6f3bb884e9828093850372b769c15b992c82286631836a43077aad30fd829653a867e4939b607c67e8d93cb98ba85e8cf567f0ce5ec5c769adb56fae4a930e585751bb25175d63e740133874da9788fb798b6505a3354beac1bc95081ad019516da7071ac85d794e8af4b5a5e1") write(r0, &(0x7f00000003c0)="1fafd7931c29e0427bea42587bdd0ef105f153b0666a11dcb65801f0e3f569acc721b7173497d2ba3bdb1a7df5ee9fe0c85a130169d6efb4a4344977e11dbb1bbb1329da5fc174500cd800ab9f3133d61ee1128de4c404191cd9ce7bb178774f544160a7e505772129dedde7c6fd98693f503d681cbd0d5d824234d1233acef117ed602522ea9bd5fd1401685e94b38c2eda3ed52f990b9004a2bf2d110ac8252af39ffb778d85f189e356097631ff707f", 0xb1) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000480)="0a5c2d023c700000160000") ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000340)={0x5, &(0x7f0000000200)=[{}, {}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000380)={r1, 0x3}) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @rand_addr=0x5}, 0x4, 0x1, 0x0, 0x4}}, 0x2e) lseek(r2, 0x0, 0x3) ioctl$KDDISABIO(r0, 0x4b37) 07:26:19 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) [ 480.311816] 9pnet: Insufficient options for proto=fd 07:26:19 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x805, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 07:26:20 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 07:26:20 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x80000000000000b, 0x0, 0xf, 0x3ffffe, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:26:20 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mlockall(0xfc) r1 = dup(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x2}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000004c0)=ANY=[@ANYBLOB="77000000da933eeef487f0aa6f216b3585d0f1e8d93d15c7664e2faf400506145b185a5d89c3ecedae98df0a331d11bde55d9fa24def6132f984da5e9038e6f484aeb760dccdcf08b6dc50b9e49a3946716c364da4b910a0c007c95a77572a04f6fc82f5f713c70b39bc70db9eb5c2d78a42f5acf6b24f333ea70a"], &(0x7f0000000400)=0x1) unshare(0x40000000) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000300)) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000180)={{0x9}, 'port0\x00', 0x0, 0x50, 0x6, 0x0, 0x0, 0x1, 0x101, 0x0, 0x4, 0x3ff}) socketpair(0x0, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x208000}, 0xc, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB="01002cbd7000fedbdf250a00000008000400010100004b34975cd9b861c814ba2b06e891298dac15b927f600937eb675464c5ccd423f7c97503d8e520cf9c832fc5d4aad7cbe5becddcab3b44cb1326ca527cba8989727bf3445be7e28ec17297ddab4e124e7acc4da5a98db77c6342ff58fb6a76e9a01a7f733fbd5951fe87cb921a3df32cc3097e63b511234c7d7657678e591bab628d1ffb1ecd02398eba5128be9574d8e5346e025fa5f9e75bbc3507eda63ddd36510c90cfb6b4b848e890edf36d73e1aee5171cf2e3676171e"], 0x1}, 0x1, 0x0, 0x0, 0x40000c0}, 0x40000) tkill(0x0, 0x8) accept$inet6(r3, 0x0, &(0x7f0000000480)=0x330) ptrace$getenv(0x4201, 0x0, 0x8000, &(0x7f00000003c0)) wait4(0x0, &(0x7f0000000200), 0x0, &(0x7f0000000000)) ioctl$int_in(r3, 0x5473, &(0x7f0000000100)=0xed4) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000240)=0x1ff) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r5 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r5, r4, 0x0, 0xa10a) [ 480.437620] FAT-fs (loop4): bogus number of reserved sectors [ 480.455513] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:20 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) [ 480.502150] 9pnet: Insufficient options for proto=fd [ 480.666139] IPVS: ftp: loaded support on port[0] = 21 07:26:20 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 07:26:20 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r2, 0x402, 0x70bd26, 0x25dfdbfd, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x8000}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x200080d4}, 0x10) 07:26:20 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000140)=[{r1}], 0x1, 0xb7) close(0xffffffffffffffff) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) 07:26:20 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @win={{0x6, 0x9, 0xfffffffffffffffc, 0xb0da}, 0x4, 0x0, &(0x7f00000001c0)={{0x59e9, 0x0, 0x9, 0x5}, &(0x7f0000000180)={{0xfffffffffffffffa, 0x8000, 0x1, 0x8}, &(0x7f0000000040)={{0x401, 0x5, 0x7, 0x1}}}}, 0x3, &(0x7f0000000200)="bede7abe08e03be0ee6e083148b30dbbbd9a3c9c9d02964c17a8ab4f5a189ce76ce00fae49d970e1535d086b686c10b76f", 0x1}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x6, &(0x7f0000000100)="0a5c2d023c12627af939e872990c17618c0000000000000070410a4041427435a2469a8c4144cc1e93c09c83b07070a7afb1841a5d134b0505923ae6cbe31f526cdba9d9b5b0ab84997c433a835eeae65b70606608997785f4b45e01d374218b043ae176d039bd7c987a476ef9d2b05f6b316d61a517cb5c54") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x247}, 0xfffffffffffffffe) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:26:20 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) [ 480.902155] 9pnet: Insufficient options for proto=fd 07:26:20 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffe7]}) [ 481.016670] FAT-fs (loop4): bogus number of reserved sectors 07:26:20 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x4, 0x400) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000180)={0x5, 0x3, 0x80, 0x100000000, &(0x7f0000000040)=[{}, {}, {}]}) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r1 = socket$inet6(0xa, 0x803, 0x7) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 07:26:20 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) fstat(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x1000000, &(0x7f00000001c0)={[{@index_off='index=off'}, {@xino_off='xino=off'}], [{@seclabel='seclabel'}, {@fowner_eq={'fowner', 0x3d, r2}}]}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) lseek(r3, 0x0, 0x3) [ 481.057414] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:20 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00\x83\xaf\x1ab\x1e\x9c\xf6\xe9\x9c\xe5\x1a\xb3\x19\x11\x16\xc9O\xac\x10\xecb.G\x7f_\xf3\x149\xb8\xacz\xc7\xee\r\xee\x897\a\x00\x00\x00\x00\x00\x00\x00\x80\xbb\xe9d\xe8\x13^\xc6\xc9\xc5\x8a\"K\xb0\xf2I\xa51e\x9b\x04G5#\x06\xc4\xde\x0f\xb2\x90\xcb\x8f\x8c\x05\xfc\xf4~\x93@') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa114) 07:26:20 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 07:26:20 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)={0x2}) socketpair$unix(0x1, 0x8000400000000001, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x8000000c, 0x1, &(0x7f0000000080)=[{&(0x7f00000001c0)="cefaad1b", 0x4}], 0x0, 0x0) ioctl$sock_proto_private(r0, 0x894c, 0x0) [ 481.163791] FAT-fs (loop4): bogus number of reserved sectors [ 481.172496] 9pnet: Insufficient options for proto=fd [ 481.193365] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:20 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat@', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:26:20 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000140)=[{r1}], 0x1, 0xb7) close(r1) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) 07:26:20 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00') write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:26:20 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="8571807000000000000000") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) symlink(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x2050010, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e22,sq=0x0000000000000007,fowner<', @ANYRESDEC=r1, @ANYBLOB="69643d0000003b4d46d6265c39a1966f978bae0f66cce6082918ae342bf8dbf3bd9beaef31452c260de5c93f270d0f29462f9f9ef5302be1142d05e3f36f7173978459c7aa4dfb3a71bf885f4dba5530b449b8890f0834b67cc9aee4cc5306b43c9ba5e3d904c4dbab632a9d703715b7ac79e08c0d18c9afb01b962a2525a13445c6999c56a8c77b6c2a7e72dc425fc0a8c60a62bb577b294376c52f84d1410d6fcc", @ANYRESDEC=r2, @ANYBLOB=',\x00']) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/autofs\x00', 0x24600, 0x0) fchmodat(r3, &(0x7f0000000380)='.\x00', 0x24) 07:26:20 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ff]}) [ 481.382405] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 481.428831] BFS-fs: bfs_fill_super(): Superblock is corrupted [ 481.443501] 9pnet: Insufficient options for proto=fd 07:26:21 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x1, 0x1, {0xb, @win={{0xca, 0xffff, 0xfff}, 0xd, 0x1000, &(0x7f0000000140)={{0x7, 0xfff, 0x100, 0x4}, &(0x7f0000000100)={{0x8000, 0x61095575, 0x5, 0x3}}}, 0x45f, &(0x7f0000000340)="6154578de546fc67c78bf15664c9c37e8c9a7a3b207555408bad30123f28415889b78b5f45b8d1cb4d322e28102c2965ddaa9c71e8232b7a00bf29188fa1b7a4f8566981be20eca3112b2508f5fe152d33761ab0f58f1942f81eeaa3631fe8db490f5457f976a8d206e68d0a18ddf8d8b39e8f7c86134a9da8147a04d54eb005a5575580f8520e72180ae9274874100b60ce363373958e90d7751cca494a74f5536177dc6ac7717ec598b08724c74c90f7789c567026c223b9931c1f53b1f5fb595f3f6134f415321f05aa7fc05928010be9f9e41bedf67fd8b9e6381a79340d6456ef88e62e7aaa955ffd282752", 0x5}}}) r1 = socket$inet6(0xa, 0x803, 0x3) setsockopt$sock_int(r1, 0x1, 0x3f, &(0x7f0000000040)=0x6, 0x4) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) sendfile(r3, r1, &(0x7f0000000180), 0x23) [ 481.489577] 9pnet: Insufficient options for proto=fd 07:26:21 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfd]}) 07:26:21 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c2d023c126285718070") lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000140)={0x0, 0xfb, 0x9a, 0x1, 0x8, "8f37fefdd3fbd0765985a7d598fd90d2", "b5df0f81fabd35db559853518e25004aea0088fec9c1e3304e0ceec9f1c07dca7d39ca11d73896497e60b65243edb1993ed65236d41749f33554e9d96c664f18d1d63df87baf33b2f1fbf8fd0bcb43017221dc65e1c86ce79423d2bc1c714145baf860ed2db24dabae447c5268a4cbf780c864a7251070fba9810185e6ab3a887d10d84b3f"}, 0x9a, 0x2) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 07:26:21 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x38, {'wfdno'}}) 07:26:21 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000140)=[{r1}], 0x1, 0xb7) close(r1) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) 07:26:21 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat6', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) [ 481.654749] 9pnet: Insufficient options for proto=fd [ 481.691692] 9pnet: Insufficient options for proto=fd 07:26:21 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000100)={0x0, 0x3ffffffffffe, 0x3, &(0x7f0000000040)=0x401}) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='/dev/swradio#\x00') r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x400, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000540)={0x5, 0x10, 0xfa00, {&(0x7f0000000340), r4, 0x1}}, 0x18) lseek(r2, 0x0, 0x3) [ 481.717102] 9pnet: Insufficient options for proto=fd 07:26:21 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 07:26:21 executing program 5: mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000040)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000000180)=0xe8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) pipe2(&(0x7f0000000480)={0xffffffffffffffff}, 0x4800) openat$random(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/urandom\x00', 0x100, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0x7ff, 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000440)={0xb, 0x10, 0xfa00, {&(0x7f0000000280), r2, 0x6}}, 0x18) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@access_uid={'access', 0x3d, r1}}, {@cache_fscache='cache=fscache'}, {@fscache='fscache'}, {@version_u='version=9p2000.u'}, {@version_9p2000='version=9p2000'}, {@loose='loose'}]}}) 07:26:21 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x38, {'wfdno'}}) 07:26:21 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="4d3d0012e5ff00", @ANYRESHEX, @ANYBLOB=',\x00']) 07:26:21 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @raw_data="12bb31b3af4b7ca2f7686f66e919550f099be26b52c3c3467495f271d2b580b3bec57eb5d23e9fd4be84995621c3a876b39ccee55787968412870a96b75cbc41ca6270e9f8c57960e2d06acb8a8bae34faff635dbfdac7a6831a5c615dc64374d8751aa0ac1eab22c805940ed81192acf4ec243c6cb5b2ea955830f930e439fdaaf829e41670e56dfc7c42c72780a7a707a39fc2e7a034ebf02e562b9d3303cc10c7c4d2c3bf73d771e97cf36caecc3496fe73ad58206f08b968f9bc3d9b507e57ea78dc3af7ffac"}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x8010, r1, 0x0) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0xf, 0x0, 0xfffffffffffffff9, 0x0, r0}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:26:21 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000140)=[{r1}], 0x1, 0xb7) close(r1) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 481.927424] 9pnet: Insufficient options for proto=fd 07:26:21 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x04', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:26:21 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) [ 481.996239] audit: type=1400 audit(1545377181.586:64): avc: denied { map } for pid=26196 comm="syz-executor0" path="socket:[82084]" dev="sockfs" ino=82084 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=rawip_socket permissive=1 07:26:21 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x38, {'wfdno'}}) [ 482.044002] 9pnet: Insufficient options for proto=fd 07:26:21 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) msgget$private(0x0, 0x41) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000100)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) bind$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, {0x3, 0x0, 0x2, 0x6, 0x3ff, 0x80000001}, 0x1000}, 0xa) socket$l2tp(0x18, 0x1, 0x1) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x800) lseek(r2, 0x0, 0x3) 07:26:21 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="7466642c557f506e6f31", @ANYRESHEX, @ANYBLOB="2c7766eb186259943d", @ANYRESHEX, @ANYBLOB=',\x00']) [ 482.189490] 9pnet: Insufficient options for proto=fd 07:26:21 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe7]}) 07:26:21 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) socket$inet6(0xa, 0x803, 0x7) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x38, {'wfdno'}}) 07:26:21 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)=0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) kcmp(r1, r2, 0x0, r0, r0) r3 = socket$inet6(0xa, 0x803, 0x3) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000180)) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000140)={0x4, 0xf777777b, 0x3f, 0x4, 0x3, @stepwise={{0x401, 0x8}, {0x3c9, 0xe5}, {0x8, 0x5}}}) socket$l2tp(0x18, 0x1, 0x1) socket$netlink(0x10, 0x3, 0x0) lseek(r4, 0x0, 0x3) 07:26:21 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:26:21 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40000, 0x0) getsockname$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10) 07:26:21 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ff]}) 07:26:21 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe7]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) [ 482.412240] 9pnet: Insufficient options for proto=fd [ 482.435206] 9pnet: Insufficient options for proto=fd 07:26:22 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7]}) [ 482.460279] 9pnet: Insufficient options for proto=fd 07:26:22 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) socket$inet6(0xa, 0x803, 0x7) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x38, {'wfdno'}}) 07:26:22 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x4, 0x3, 0x200) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) connect(r2, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @broadcast}, 0x4, 0x3, 0x1, 0x3}}, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000040)=0xfff, 0x4) sendto$inet(r4, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000001180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='sit0\x00', 0x10) flistxattr(r4, &(0x7f0000000580)=""/192, 0xc0) ioctl$UI_END_FF_ERASE(0xffffffffffffff9c, 0x400c55cb, &(0x7f00000004c0)={0x8, 0x4000000000000}) getsockname$inet6(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x1c) sendto$inet(r4, &(0x7f0000d7cfcb), 0x100000252, 0x0, &(0x7f0000893ff0), 0x10) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000240)={{0x3, 0x0, 0x5, 0x4, 0x1f}, 0xc26, 0x9, 0x4}) shutdown(r4, 0x400000000000001) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000400)={{0x3, 0x3, 0x332, 0x3, 0x21}, 0xfffffffffffffffe, 0x3ff, 0xffffffffffffff80}) r5 = gettid() capset(&(0x7f0000000340)={0x20080522, r5}, &(0x7f0000000480)={0x7, 0x4, 0x5, 0xa3e5, 0x9, 0x7fff}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000080)={'lo\x00', {0x2, 0x4e24, @local}}) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f00000002c0)={'broute\x00'}, &(0x7f00000003c0)=0x78) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000540)) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x400, @remote}, 0xffffffffffffff06) connect$inet(r6, &(0x7f0000000380)={0x2, 0x4e21, @broadcast}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 07:26:22 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000100)={0x585, 0x2, 0x0, {r3, r4+10000000}, 0x4, 0x9}) lseek(r2, 0x0, 0x3) [ 482.513907] FAT-fs (loop4): bogus number of reserved sectors [ 482.519729] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:22 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) r1 = socket(0x1, 0xf, 0xffffffffffffff77) accept$inet(r1, 0x0, &(0x7f0000000000)) [ 482.640557] 9pnet: Insufficient options for proto=fd 07:26:22 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ffffff]}) [ 482.662825] FAT-fs (loop4): bogus number of reserved sectors [ 482.688477] 9pnet: Insufficient options for proto=fd [ 482.706018] FAT-fs (loop4): Can't find a valid FAT filesystem [ 482.732367] 9pnet: Insufficient options for proto=fd 07:26:22 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) socket$inet6(0xa, 0x803, 0x7) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x38, {'wfdno'}}) 07:26:22 executing program 0: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) fsetxattr$trusted_overlay_opaque(r0, 0xffffffffffffffff, &(0x7f0000000140)='y\x00', 0x2, 0x2) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) lseek(r3, 0x0, 0x3) 07:26:22 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfatk', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:26:22 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffe7]}) 07:26:22 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c7703006e6f3d", @ANYRESHEX, @ANYBLOB=',\x00']) [ 482.905531] 9pnet: Insufficient options for proto=fd 07:26:22 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 07:26:22 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x38, {'wfdno'}}) [ 483.019637] 9pnet: Insufficient options for proto=fd 07:26:22 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffffffffffff]}) [ 483.084170] 9pnet: Insufficient options for proto=fd [ 483.559340] 9pnet: Insufficient options for proto=fd 07:26:23 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b6b6b00]}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) 07:26:23 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x38, {'wfdno'}}) 07:26:23 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 07:26:23 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") recvmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) write(r1, &(0x7f0000000180)="ae97f17a3ed038ba971aa86b760fd8c671fa93ef08864452ee4f034a60f0808d3643e037e377ff95a71a52ddb1285e040933a718be39eb3ae12c870d3f5f30a07f7a78bf54647ace430cb3e43a15f1be3a13f17c3da7", 0xfffffffffffffe6c) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) lseek(r2, 0x0, 0x3) socket$rds(0x15, 0x5, 0x0) 07:26:23 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@mcast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000000180)=0xe8) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, 'rfdno'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@subj_role={'subj_role', 0x3d, '9p\x00'}}, {@smackfshat={'smackfshat', 0x3d, 'cgroup[(*\\ \x19\''}}, {@measure='measure'}, {@euid_gt={'euid>', r1}}, {@uid_gt={'uid>', r1}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}}) [ 483.670122] 9pnet: Insufficient options for proto=fd 07:26:23 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\xff', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:26:23 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x38, {'wfdno'}}) 07:26:23 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)) ioctl$sock_proto_private(r0, 0x894c, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x0, 0x200000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080), 0x4) [ 483.756661] 9pnet: Insufficient options for proto=fd 07:26:23 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) [ 483.798177] 9pnet: Insufficient options for proto=fd 07:26:23 executing program 3 (fault-call:3 fault-nth:0): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000140)=[{r1}], 0x1, 0xb7) close(r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) [ 483.876385] 9pnet: Insufficient options for proto=fd 07:26:23 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x2, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r1 = socket$inet6(0xa, 0x80800, 0x10000) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7, 0x400000) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x4, 0x7fff}, {0xfcd9, 0x100000000}, {0x101, 0x51ef8710}]}) ioctl(r1, 0x1000008910, &(0x7f00000001c0)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='tra\bs=fd,rfN?$n', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="5904"]) 07:26:23 executing program 0 (fault-call:1 fault-nth:0): seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_execute_func(&(0x7f0000000180)="0faef24029450ff3440f1157f1d1b4b4c16a3e5481bcbc85d04e92d9f4150f6323230ff7c6") 07:26:23 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x38, {'wfdno'}}) 07:26:23 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) 07:26:23 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:26:23 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)=0xff9) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) [ 484.088701] FAULT_INJECTION: forcing a failure. [ 484.088701] name failslab, interval 1, probability 0, space 0, times 0 [ 484.100271] CPU: 1 PID: 26374 Comm: syz-executor0 Not tainted 4.20.0-rc7+ #161 [ 484.107642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 484.116994] Call Trace: [ 484.119610] dump_stack+0x244/0x39d [ 484.123254] ? dump_stack_print_info.cold.1+0x20/0x20 [ 484.128450] ? ima_get_action+0x7e/0xa0 [ 484.132447] ? print_usage_bug+0xc0/0xc0 [ 484.136519] should_fail.cold.4+0xa/0x17 [ 484.140589] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 484.145737] ? print_usage_bug+0xc0/0xc0 [ 484.149813] ? __lock_acquire+0x62f/0x4c20 [ 484.154053] ? zap_class+0x640/0x640 [ 484.157768] ? print_usage_bug+0xc0/0xc0 [ 484.161855] ? mark_held_locks+0x130/0x130 [ 484.166089] ? print_usage_bug+0xc0/0xc0 [ 484.170156] ? find_held_lock+0x36/0x1c0 [ 484.174232] ? __sigqueue_alloc+0x251/0x710 [ 484.178556] ? lock_downgrade+0x900/0x900 [ 484.182718] ? check_preemption_disabled+0x48/0x280 [ 484.187740] __should_failslab+0x124/0x180 [ 484.191983] should_failslab+0x9/0x14 [ 484.195787] kmem_cache_alloc+0x47/0x730 [ 484.199882] __sigqueue_alloc+0x3db/0x710 [ 484.204040] ? dequeue_signal+0x630/0x630 [ 484.208193] ? find_held_lock+0x36/0x1c0 [ 484.212278] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 484.217823] ? _parse_integer+0x134/0x180 [ 484.221979] ? zap_class+0x640/0x640 [ 484.225710] __send_signal+0xd22/0x1bb0 [ 484.229710] ? prepare_signal+0xe50/0xe50 [ 484.233877] ? find_held_lock+0x36/0x1c0 [ 484.238188] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 484.243386] ? lock_acquire+0x1ed/0x520 [ 484.247383] ? force_sig_info+0x55/0x310 [ 484.251471] ? kasan_check_read+0x11/0x20 [ 484.255616] ? do_raw_spin_lock+0x14f/0x350 [ 484.259954] ? rwlock_bug.part.2+0x90/0x90 [ 484.264187] ? trace_hardirqs_on+0x310/0x310 [ 484.268619] ? find_held_lock+0x36/0x1c0 [ 484.272686] send_signal+0x4a/0xe0 [ 484.276277] force_sig_info+0x250/0x310 [ 484.280291] force_sig_fault+0x12c/0x1d0 [ 484.284354] ? force_sigsegv+0x110/0x110 [ 484.288451] ? kasan_check_write+0x14/0x20 [ 484.292683] ? up_read+0x225/0x2c0 [ 484.296256] __bad_area_nosemaphore+0x2dc/0x3a0 [ 484.300966] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 484.306535] bad_area+0x69/0x80 [ 484.309829] __do_page_fault+0xaf9/0xe60 [ 484.313893] ? trace_hardirqs_off+0xb8/0x310 [ 484.318316] do_page_fault+0xf2/0x7e0 [ 484.322119] ? vmalloc_sync_all+0x30/0x30 [ 484.326266] ? error_entry+0x70/0xd0 [ 484.329981] ? trace_hardirqs_off_caller+0xbb/0x310 [ 484.334996] ? trace_hardirqs_on_caller+0xc0/0x310 [ 484.339951] ? syscall_return_slowpath+0x5e0/0x5e0 [ 484.344881] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 484.349735] ? trace_hardirqs_on_caller+0x310/0x310 [ 484.354764] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 484.360215] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 484.365230] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 484.372399] ? __switch_to_asm+0x40/0x70 [ 484.376461] ? page_fault+0x8/0x30 [ 484.380005] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 484.384870] ? page_fault+0x8/0x30 [ 484.388412] page_fault+0x1e/0x30 [ 484.391872] RIP: 0033:0x2000018d [ 484.395238] Code: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0f ae f2 40 29 45 0f f3 44 0f 11 57 f1 b4 b4 c1 6a 3e 54 81 bc bc 85 d0 4e 92 d9 f4 15 0f 63 23 23 0f [ 484.414136] RSP: 002b:00007f53d1344c58 EFLAGS: 00010202 [ 484.419498] RAX: 0000000000401620 RBX: 00007f53d1344c90 RCX: 0000000000000000 [ 484.426763] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 484.434028] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 484.441297] R10: 0000000000000064 R11: 0000000000000000 R12: 00007f53d13456d4 [ 484.448578] R13: 00000000004c53c6 R14: 00000000004d9918 R15: 0000000000000003 07:26:24 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x38, {'wfdno'}}) 07:26:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000140)=[{r1}], 0x1, 0xb7) close(r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) 07:26:24 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ffffffffffffff]}) [ 484.566629] FAT-fs (loop4): bogus number of reserved sectors [ 484.576397] 9pnet: Insufficient options for proto=fd [ 484.601292] FAT-fs (loop4): Can't find a valid FAT filesystem [ 484.650428] 9pnet: Insufficient options for proto=fd [ 484.678777] FAT-fs (loop4): bogus number of reserved sectors [ 484.688417] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:24 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 07:26:24 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 07:26:24 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x38, {'wfdno'}}) 07:26:24 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) [ 484.882067] FAT-fs (loop4): bogus number of reserved sectors [ 484.897691] 9pnet: Insufficient options for proto=fd [ 484.905781] FAT-fs (loop4): Can't find a valid FAT filesystem [ 484.929350] 9pnet: Insufficient options for proto=fd [ 484.990563] FAT-fs (loop4): bogus number of reserved sectors [ 485.025995] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:24 executing program 0: seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_execute_func(&(0x7f0000000180)="0faef24029450ff3440f1157f1d1b4b4c16a3e5481bcbc85d04e92d9f4150f6323230ff7c6") 07:26:24 executing program 1: mkdir(0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x38, {'wfdno'}}) 07:26:24 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfd]}) 07:26:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000140)=[{r1, 0x300}], 0x1, 0xb7) close(r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) 07:26:24 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x801, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = dup(r0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000080)) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="7472616e733d66642c7266802e2865", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',cache=none,cachetag=\\wlan0+md5sum,cache=fscache,aname=9p\x00,\x00']) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000240)={0x5, 0x3, 0xdbbb, 0x60, &(0x7f0000000180)=[{}, {}, {}]}) r2 = getpgrp(0xffffffffffffffff) getpeername$inet(r1, &(0x7f00000000c0), &(0x7f00000002c0)=0x10) ioprio_get$pid(0x0, r2) 07:26:24 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:26:24 executing program 1: mkdir(0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x38, {'wfdno'}}) 07:26:24 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdfd]}) [ 485.212488] 9pnet: Insufficient options for proto=fd 07:26:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000140)=[{r1, 0xe401000000000000}], 0x1, 0xb7) close(r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) [ 485.261100] 9pnet: Insufficient options for proto=fd 07:26:24 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000000)={0x0, 0x6, "8bcdc9c7e24e"}, &(0x7f0000000040)=0xe) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r1, 0x8}, 0x8) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) [ 485.303673] FAT-fs (loop4): bogus number of reserved sectors [ 485.331828] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:25 executing program 0: seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_execute_func(&(0x7f0000000180)="0faef20229450ff3440f1157f1d1b4b4c16a3e5481bcbc85d04e92d9f4150f6323230ff7c6") 07:26:25 executing program 1: mkdir(0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x38, {'wfdno'}}) 07:26:25 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe7]}) [ 485.403563] FAT-fs (loop4): bogus number of reserved sectors [ 485.409385] FAT-fs (loop4): Can't find a valid FAT filesystem [ 485.488440] 9pnet: Insufficient options for proto=fd 07:26:25 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 07:26:25 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x100) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}, 0x2c, {[{@aname={'aname', 0x3d, 'trans=fd,'}}, {@msize={'msize', 0x3d, 0xffffffff}}, {@mmap='mmap'}, {@access_client='access=client'}, {@cache_none='cache=none'}]}}) 07:26:25 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat#', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:26:25 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x38, {'wfdno'}}) 07:26:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000140)=[{r1, 0x3000000}], 0x1, 0xb7) close(r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) 07:26:25 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) [ 485.764287] 9pnet: Insufficient options for proto=fd 07:26:25 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) lseek(r1, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0000616e738bf44aac473d66642c7266646e6f3d", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) 07:26:25 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x38, {'wfdno'}}) 07:26:25 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\xfc', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) [ 486.104558] 9pnet: Insufficient options for proto=fd 07:26:25 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) clock_gettime(0x0, &(0x7f0000002240)={0x0, 0x0}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)) recvmmsg(r0, &(0x7f00000020c0)=[{{&(0x7f0000000080)=@can, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)=""/73, 0x49}, {&(0x7f0000000200)}], 0x2}, 0xffffffffffffff7f}, {{&(0x7f0000000280)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000001740)=[{&(0x7f0000000300)=""/155, 0x9b}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/180, 0xb4}, {&(0x7f0000001500)=""/123, 0x7b}, {&(0x7f0000001580)=""/104, 0x68}, {&(0x7f0000001600)=""/119, 0x77}, {&(0x7f0000001680)=""/140, 0x8c}], 0x7}, 0x800}, {{&(0x7f00000017c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001840)=""/69, 0x45}, {&(0x7f00000018c0)=""/86, 0x56}, {&(0x7f0000001940)=""/136, 0x88}, {&(0x7f0000001a00)=""/213, 0xd5}], 0x4, &(0x7f0000001b40)=""/75, 0x4b}, 0x3ff}, {{&(0x7f0000001bc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001c40)=""/76, 0x4c}, {&(0x7f0000001cc0)=""/32, 0x20}], 0x2}, 0xbd9}, {{&(0x7f0000001d40)=@xdp, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001dc0)=""/121, 0x79}], 0x1}, 0x7ff}, {{&(0x7f0000001e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001f00)=""/133, 0x85}], 0x1, &(0x7f0000002000)=""/137, 0x89}, 0x5}], 0x6, 0x2041, &(0x7f0000002280)={r1, r2+10000000}) bind$bt_rfcomm(r3, 0xfffffffffffffffe, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="f9bd4245bb07cacfb2bdff"]) 07:26:25 executing program 0: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x1, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f00000000c0)={0x0, 0x0, {0x36, 0x2d, 0x13, 0x7, 0x3, 0x3f, 0x0, 0x2d, 0x1}}) seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_execute_func(&(0x7f0000000180)="0faef24029450ff3440f1157f1d1b4b4c16a3e5481bcbc85d04e92d9f4150f6323230ff7c6") openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 07:26:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000140)=[{r1, 0x6400}], 0x1, 0xb7) close(r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) 07:26:25 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x600200}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="a40400082500020027bd7000ffdbdf2500000000", @ANYRES32=r1, @ANYBLOB="0f000f000f000c00f2fff3ff0800050007ff0000200008001c00010008048100030000000200000080000000070000000200000008000d000200000008000e0006000000080001007462660018040200080006000200000004040300050000000900000000000000ab020000ff7f00000900000000000000ff0f000006000000feffffff0700000000000000020000003f000000844b00000200000005000000040000000400000081000000ff03000000000000e4060000ff7f000003000000a807000005000000030000000800000007000000e700000080000000df000000020000000900000003000000050000003f0000000080000019dc0000010100000900000000020000030000000000000001000080fa000000fbffffff0d620000930e00000000000000010000faffffff9d0e00000800000004000000050000000500000006000000070000000600000043080000ffffffff010000000100010009000000040000000600000006000000ff0700000a000000070000007e0500000500000006000000540c0000030000000802000002000000050000000080000002000000ff01000000000000feffffff070000000500000000000000010000001f000000000000c0b70000000da00000ff07000008000000010000001f0000000800000001800000017292500200000081000000080000000200000008000000080000000500000008000000001000008100000003000000060000000400000006000000040000000ff40000ff070000e0ffffff07000000ff010000040000000300000002000000010000800200000003000000040000000900000004000000ff030000890a000001000000030000000600000002000000000200000904000002000000ff7fffff050000008c6e000063da3e5ebc00000001000000800400000001000002000000000000000e865f6706000000fcffffff008000000080000001000000ffffffff00000000090000000700000079000000090000000500000004000000090000000180000002000000ff000000010400000300000002000000cbe70000dfa800000700000009290000060000000010000040000000faffffff04000000ff00000004000000050000000100000002000000050000000500000004000000b81c000080cf00000000000004000000000000000200000001000080e8ce6f3f03000000000000004c130000000001000100008000000000020000000600000007000000ff01000002000000ffffffff07000000450100000100010004000000010000000600000008000000bf0200000500000001000000ff0f00000000000004000000ff7f0000000200001f05000007000000070000008900000000000000ffff0000030000002902000004000000ff0f000020000000040000000100000000080000ebb2000006000000964800009d0000000c0000000104000003000000ff01000002000000000000003f0000000000000040000000080000000080000001000100010000000000010000100000ff07000001000080080006000500000008000e000300000008000d000a07000008000e000900000008000500050000000800050020670000"], 0x4a4}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) 07:26:25 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x38, {'wfdno'}}) 07:26:25 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x97ffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:26:26 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}}) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="22000000060000000000050000000000000002000007000000000100000000000000eb00000000000000"], 0x2a) [ 486.432255] FAT-fs (loop4): bogus number of reserved sectors [ 486.463242] FAT-fs (loop4): Can't find a valid FAT filesystem [ 486.474829] 9pnet: Insufficient options for proto=fd 07:26:26 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x5) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") fstat(r0, &(0x7f0000000080)) [ 486.499445] 9pnet: Insufficient options for proto=fd [ 486.517487] FAT-fs (loop4): bogus number of reserved sectors [ 486.537320] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:26 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x38, {'wfdno'}}) 07:26:26 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0xffffff8c, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:26:26 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) fadvise64(r0, 0x14, 0x9, 0x7) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}}) 07:26:26 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) creat(&(0x7f0000000000)='./file0\x00', 0x80) 07:26:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000140)=[{r1, 0xfffffffc}], 0x1, 0xb7) close(r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) [ 486.784728] 9pnet: Insufficient options for proto=fd [ 486.870061] 9pnet: Insufficient options for proto=fd [ 486.889253] FAT-fs (loop4): bogus number of reserved sectors [ 486.905712] 9pnet: Insufficient options for proto=fd [ 486.907708] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:26 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x3f9, 0xfffffffffffffffd) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="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", 0x1000) seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_execute_func(&(0x7f0000000180)="0faef24029450ff3440f1157f1d1b4b4c16a3e5481bcbc85d04e92d9f4150f6323230ff7c6") 07:26:26 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x38, {'wfdno'}}) 07:26:26 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}}) 07:26:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000140)=[{r1, 0x800000000000000}], 0x1, 0xb7) close(r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) 07:26:26 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x401, 0x40) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r1, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x1}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4) r2 = socket$inet6(0xa, 0x803, 0x7) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 07:26:26 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x37040000, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:26:27 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}}) read$FUSE(r0, &(0x7f0000000440), 0x1000) [ 487.438475] 9pnet: Insufficient options for proto=fd [ 487.448798] FAT-fs (loop4): bogus number of reserved sectors [ 487.471932] FAT-fs (loop4): Can't find a valid FAT filesystem [ 487.472190] 9pnet: Insufficient options for proto=fd [ 487.483754] 9pnet: Insufficient options for proto=fd 07:26:27 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x86) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdnj=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) 07:26:27 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x38, {'wfdno'}}) [ 487.551901] vivid-000: kernel_thread() failed [ 487.562296] FAT-fs (loop4): bogus number of reserved sectors [ 487.581307] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:27 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0x7f}, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}}) 07:26:27 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x6c00000000000000, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) [ 487.663731] 9pnet: Insufficient options for proto=fd 07:26:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000140)=[{r1, 0xfcffffff00000000}], 0x1, 0xb7) close(r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) [ 487.689845] 9pnet: Insufficient options for proto=fd 07:26:27 executing program 0: seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_execute_func(&(0x7f0000000180)="0faef24029450ff3440f1157f1d1b4b4c16a3e5481bcbc85d04e92d9f4150f6323230ff7c6") r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000080)={{0x2f, @multicast2, 0x4e22, 0x3, 'lc\x00', 0xa, 0x7, 0x5e}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x4e23, 0x3, 0x1, 0xf33, 0x8}}, 0x44) pwrite64(r0, &(0x7f0000000980)="3fd04ed89a294f54d713d5ea544c6a07c6e7958b2ddbcff743cd9f565dccdab179fab0ab33e100e9aebae99cb8a56c1b76b32afd7225c88d5a2dcd77ab007313bc44d3d7e54147e773184bf23f0d05fc09b686685d4403ccc23c65e54c288d5506a75e857e0b68", 0x67, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)={{0xcc, 0x10001, 0x200000000, 0x119, 0x208, 0x10001, 0x37a, 0x1000}, "a3a0ebb76ab642693dd85b3cc99b2f50b4734582c6a1246aafc27ebf1a3f6adfba506948d61582ae6afdba3bbe21390cc24a0ac9c62a7c6a486ed53115eddcf592cb864ee81cfe22ebbaf6b1b753107bb0b4d86b198d015ddbf9d5", [[], [], [], [], [], []]}, 0x67b) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000840)={0x6, {{0x2, 0x4e21, @remote}}, {{0x2, 0x4e20, @multicast1}}}, 0x108) 07:26:27 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000180)=@req={0x28, &(0x7f00000000c0)={'veth0_to_team\x00', @ifru_hwaddr=@dev={[], 0x15}}}) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r1 = socket$inet6(0xa, 0x803, 0x7) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0x80045500, &(0x7f0000000040)) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) [ 487.753228] 9pnet: Insufficient options for proto=fd 07:26:27 executing program 2: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}}) 07:26:27 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) socket$inet6(0xa, 0x803, 0x7) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x38, {'wfdno'}}) [ 487.857317] FAT-fs (loop4): bogus number of reserved sectors [ 487.874382] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:27 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount(&(0x7f0000000000)=@sr0='/dev/sr0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='vxfs\x00', 0x826, &(0x7f00000000c0)='9p\x00') mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) [ 487.912142] 9pnet: Insufficient options for proto=fd 07:26:27 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x40000000, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) [ 488.019366] 9pnet: Insufficient options for proto=fd 07:26:27 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}}) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000140)) 07:26:27 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) socket$inet6(0xa, 0x803, 0x7) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x38, {'wfdno'}}) [ 488.045483] FAT-fs (loop4): bogus number of reserved sectors [ 488.079007] FAT-fs (loop4): Can't find a valid FAT filesystem [ 488.088200] 9pnet: Insufficient options for proto=fd 07:26:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000140)=[{r1, 0x8000000}], 0x1, 0xb7) close(r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) [ 488.162604] 9pnet: Insufficient options for proto=fd 07:26:27 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x60, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) 07:26:27 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) socket$inet6(0xa, 0x803, 0x7) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x38, {'wfdno'}}) [ 488.197247] 9pnet: Insufficient options for proto=fd 07:26:27 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0xb, @pix={0x0, 0x1f}}}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@ipv4={[], [], @remote}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@loopback}}, &(0x7f0000000040)=0xe8) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = geteuid() lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f00000004c0)=0xc) stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0, 0x0}, &(0x7f0000000880)=0xc) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000008c0)={{}, {0x1, 0x2}, [{0x2, 0x0, r1}, {0x2, 0x7, r2}, {0x2, 0x7, r3}, {0x2, 0x2, r4}, {0x2, 0x1, r5}, {0x2, 0x390bced43eb1cb92, r6}, {0x2, 0x3, r7}, {0x2, 0x4, r8}, {0x2, 0x0, r9}, {0x2, 0x1, r10}], {0x4, 0x2}, [{0x8, 0x2, r11}], {0x10, 0x1}, {0x20, 0x3}}, 0x7c, 0x2) [ 488.338899] 9pnet: Insufficient options for proto=fd [ 488.346667] FAT-fs (loop4): bogus number of reserved sectors [ 488.382288] FAT-fs (loop4): Can't find a valid FAT filesystem [ 488.435784] FAT-fs (loop4): bogus number of reserved sectors [ 488.451436] FAT-fs (loop4): Can't find a valid FAT filesystem 07:26:28 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000000)={0x0, 0x100000000, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x1a9}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x100000000, 0x802, 0x2, {0x800000000000000b, @win={{0x9ce7, 0x1, 0xff}, 0x1, 0x9, &(0x7f0000000040)={{0x0, 0x3, 0xfffffffffffffffb}}, 0x1000, &(0x7f0000000100)="f9f6a4ebe594624cd80433625fad62ad8a5979e027b88490d05bb85b68ecf7e357ee7cae72131d8f0c930f858060c4f1b609333616d34b80a7c2a1e51972b2e7c951b7d2182e4540a7100e39f444e9d0afcf2b92b895167166778ddbd7b43c89e6feb4db3ce8880d01a26f1a9ed9e8bf1765df26ce58243cbca5af22e663f7da52d181f8bd0342d32be8e62afe5aa5612224d57cf14fda7e3d00e99d0a5e6ad79b00ea70694ad286999991414bed87aa83c9bf4f216b5097", 0x6}}}) 07:26:28 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f0000000180)={0xfa, "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"}) r1 = socket$inet6(0xa, 0x803, 0x7) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 07:26:28 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x0, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x38, {'wfdno'}}) 07:26:28 executing program 0: seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_execute_func(&(0x7f0000000180)="0faef24029450ff3440f1157f1d1b4b4c16a3e5481bcbc85d04e92d9f4150f6323230ff7c6") r0 = memfd_create(&(0x7f0000000000)='O\x00', 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000080)={{0x8, 0x40}, 'port0\x00', 0x24, 0x80010, 0x1, 0x0, 0x0, 0x3, 0x8, 0x0, 0x1, 0x7}) 07:26:28 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000140)=[{r1, 0x4}], 0x1, 0xb7) close(r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) 07:26:28 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x6000000000000000, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) [ 488.759082] ================================================================== [ 488.766757] BUG: KASAN: null-ptr-deref in refcount_sub_and_test_checked+0x9d/0x310 [ 488.766801] Read of size 4 at addr 0000000000000020 by task syz-executor2/26718 [ 488.766814] [ 488.766835] CPU: 1 PID: 26718 Comm: syz-executor2 Not tainted 4.20.0-rc7+ #161 [ 488.778201] 9pnet: Insufficient options for proto=fd [ 488.781986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 488.781992] Call Trace: [ 488.782013] dump_stack+0x244/0x39d [ 488.782033] ? dump_stack_print_info.cold.1+0x20/0x20 [ 488.782050] ? do_syscall_64+0x6be/0x820 [ 488.782064] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 488.782080] ? vprintk_func+0x85/0x181 [ 488.782100] kasan_report.cold.8+0x6d/0x309 [ 488.791074] ? refcount_sub_and_test_checked+0x9d/0x310 [ 488.791097] check_memory_region+0x13e/0x1b0 [ 488.791114] kasan_check_read+0x11/0x20 [ 488.791129] refcount_sub_and_test_checked+0x9d/0x310 [ 488.791148] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 488.834593] ? refcount_inc_not_zero_checked+0x2f0/0x2f0 [ 488.844339] ? vb2_vmalloc_put+0x5f/0x80 [ 488.844357] ? trace_hardirqs_off_caller+0x310/0x310 [ 488.844377] ? __kasan_slab_free+0x119/0x150 [ 488.844400] refcount_dec_and_test_checked+0x1a/0x20 [ 488.844416] vb2_vmalloc_put+0x19/0x80 [ 488.853534] FAT-fs (loop4): bogus number of reserved sectors [ 488.853572] __vb2_buf_mem_free+0x112/0x210 [ 488.865849] FAT-fs (loop4): Can't find a valid FAT filesystem [ 488.867638] ? vb2_vmalloc_get_dmabuf+0x300/0x300 [ 488.867658] __vb2_queue_free+0x830/0xa30 [ 488.867679] ? trace_hardirqs_off_caller+0x310/0x310 [ 488.867700] ? __vb2_plane_dmabuf_put.isra.6+0x310/0x310 [ 488.867726] vb2_core_queue_release+0x62/0x80 [ 488.900549] 9pnet: Insufficient options for proto=fd [ 488.902270] _vb2_fop_release+0x1d2/0x2b0 [ 488.902290] vb2_fop_release+0x77/0xc0 [ 488.902309] vivid_fop_release+0x18e/0x440 [ 488.902328] ? vivid_remove+0x460/0x460 [ 488.947654] v4l2_release+0x224/0x3a0 [ 488.951461] ? dev_debug_store+0x140/0x140 [ 488.955701] __fput+0x385/0xa30 [ 488.958989] ? get_max_files+0x20/0x20 [ 488.962881] ? trace_hardirqs_on+0xbd/0x310 [ 488.967209] ? kasan_check_read+0x11/0x20 [ 488.971360] ? task_work_run+0x1af/0x2a0 [ 488.975426] ? trace_hardirqs_off_caller+0x310/0x310 [ 488.980539] ? filp_close+0x1cd/0x250 [ 488.984353] ____fput+0x15/0x20 [ 488.987633] task_work_run+0x1e8/0x2a0 [ 488.991528] ? task_work_cancel+0x240/0x240 [ 488.995857] ? copy_fd_bitmaps+0x210/0x210 [ 489.000094] ? do_syscall_64+0x9a/0x820 [ 489.004074] exit_to_usermode_loop+0x318/0x380 [ 489.008660] ? __bpf_trace_sys_exit+0x30/0x30 [ 489.013167] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 489.018756] do_syscall_64+0x6be/0x820 [ 489.022657] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 489.028039] ? syscall_return_slowpath+0x5e0/0x5e0 [ 489.032967] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 489.037826] ? trace_hardirqs_on_caller+0x310/0x310 [ 489.042850] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 489.047868] ? prepare_exit_to_usermode+0x291/0x3b0 [ 489.052890] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 489.057737] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 489.062923] RIP: 0033:0x411121 [ 489.066117] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 34 19 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 489.085017] RSP: 002b:00007ffff2a2d510 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 489.092722] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000411121 [ 489.099993] RDX: 0000000000000000 RSI: 00000000007308c8 RDI: 0000000000000003 07:26:28 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x0, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x38, {'wfdno'}}) [ 489.107278] RBP: 0000000000000000 R08: 00000000007308c0 R09: 0000000000000000 [ 489.114595] R10: 00007ffff2a2d430 R11: 0000000000000293 R12: 0000000000000000 [ 489.121864] R13: 0000000000000001 R14: 00000000000003a0 R15: 0000000000000002 [ 489.129161] ================================================================== [ 489.136515] Disabling lock debugging due to kernel taint 07:26:28 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x2300000000000000, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}]}) [ 489.172131] 9pnet: Insufficient options for proto=fd [ 489.190257] Kernel panic - not syncing: panic_on_warn set ... [ 489.196172] CPU: 1 PID: 26718 Comm: syz-executor2 Tainted: G B 4.20.0-rc7+ #161 [ 489.197032] kobject: 'loop1' (00000000746579b4): kobject_uevent_env [ 489.204914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 489.204919] Call Trace: [ 489.204939] dump_stack+0x244/0x39d [ 489.204956] ? dump_stack_print_info.cold.1+0x20/0x20 [ 489.204975] panic+0x2ad/0x55c [ 489.223691] kobject: 'loop1' (00000000746579b4): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 489.226913] ? add_taint.cold.5+0x16/0x16 [ 489.226935] ? preempt_schedule+0x4d/0x60 [ 489.253041] ? ___preempt_schedule+0x16/0x18 [ 489.257459] ? trace_hardirqs_on+0xb4/0x310 [ 489.261783] kasan_end_report+0x47/0x4f [ 489.265764] kasan_report.cold.8+0x76/0x309 [ 489.270084] ? refcount_sub_and_test_checked+0x9d/0x310 [ 489.275459] check_memory_region+0x13e/0x1b0 [ 489.279874] kasan_check_read+0x11/0x20 [ 489.283852] refcount_sub_and_test_checked+0x9d/0x310 [ 489.289046] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 489.293634] ? refcount_inc_not_zero_checked+0x2f0/0x2f0 [ 489.299185] ? vb2_vmalloc_put+0x5f/0x80 [ 489.303251] ? trace_hardirqs_off_caller+0x310/0x310 [ 489.308365] ? __kasan_slab_free+0x119/0x150 [ 489.312797] refcount_dec_and_test_checked+0x1a/0x20 [ 489.317917] vb2_vmalloc_put+0x19/0x80 07:26:28 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x0, &(0x7f0000000140)="0a5c2d023c126285718070") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x38, {'wfdno'}}) [ 489.321826] __vb2_buf_mem_free+0x112/0x210 [ 489.326150] ? vb2_vmalloc_get_dmabuf+0x300/0x300 [ 489.331010] __vb2_queue_free+0x830/0xa30 [ 489.335162] ? trace_hardirqs_off_caller+0x310/0x310 [ 489.340305] ? __vb2_plane_dmabuf_put.isra.6+0x310/0x310 [ 489.345765] vb2_core_queue_release+0x62/0x80 [ 489.350262] _vb2_fop_release+0x1d2/0x2b0 [ 489.354419] vb2_fop_release+0x77/0xc0 [ 489.358314] vivid_fop_release+0x18e/0x440 [ 489.362560] ? vivid_remove+0x460/0x460 [ 489.366544] v4l2_release+0x224/0x3a0 [ 489.370352] ? dev_debug_store+0x140/0x140 [ 489.374597] __fput+0x385/0xa30 [ 489.377887] ? get_max_files+0x20/0x20 [ 489.381791] ? trace_hardirqs_on+0xbd/0x310 [ 489.386126] ? kasan_check_read+0x11/0x20 [ 489.390281] ? task_work_run+0x1af/0x2a0 [ 489.394369] ? trace_hardirqs_off_caller+0x310/0x310 [ 489.399477] ? filp_close+0x1cd/0x250 [ 489.403286] ____fput+0x15/0x20 [ 489.406583] task_work_run+0x1e8/0x2a0 [ 489.410501] ? task_work_cancel+0x240/0x240 [ 489.414847] ? copy_fd_bitmaps+0x210/0x210 [ 489.419086] ? do_syscall_64+0x9a/0x820 [ 489.423067] exit_to_usermode_loop+0x318/0x380 [ 489.427676] ? __bpf_trace_sys_exit+0x30/0x30 [ 489.432183] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 489.437749] do_syscall_64+0x6be/0x820 [ 489.441644] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 489.447018] ? syscall_return_slowpath+0x5e0/0x5e0 [ 489.451954] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 489.456802] ? trace_hardirqs_on_caller+0x310/0x310 [ 489.461843] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 489.466869] ? prepare_exit_to_usermode+0x291/0x3b0 07:26:29 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x38, {'wfdno'}}) [ 489.471906] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 489.476757] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 489.481945] RIP: 0033:0x411121 [ 489.485140] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 34 19 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 489.504044] RSP: 002b:00007ffff2a2d510 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 489.511754] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000411121 [ 489.519048] RDX: 0000000000000000 RSI: 00000000007308c8 RDI: 0000000000000003 [ 489.526349] RBP: 0000000000000000 R08: 00000000007308c0 R09: 0000000000000000 [ 489.533622] R10: 00007ffff2a2d430 R11: 0000000000000293 R12: 0000000000000000 [ 489.540890] R13: 0000000000000001 R14: 00000000000003a0 R15: 0000000000000002 [ 489.549140] Kernel Offset: disabled [ 489.552767] Rebooting in 86400 seconds..