C_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:34:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) 16:34:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffffffffffb2, 0x0) 16:34:48 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001ca, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:34:48 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:34:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) 16:34:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffffffffffb2, 0x0) [ 535.547517][T23640] FAT-fs (loop1): bogus number of reserved sectors [ 535.570002][T23645] FAT-fs (loop4): bogus number of reserved sectors [ 535.586697][T23640] FAT-fs (loop1): Can't find a valid FAT filesystem [ 535.596443][T23645] FAT-fs (loop4): Can't find a valid FAT filesystem 16:34:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffffffffffb2, 0x0) 16:34:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 16:34:49 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001cb, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:34:49 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) [ 535.758990][T23645] FAT-fs (loop4): bogus number of reserved sectors [ 535.769450][T23645] FAT-fs (loop4): Can't find a valid FAT filesystem [ 535.911215][T23664] FAT-fs (loop1): bogus number of reserved sectors [ 535.920708][T23664] FAT-fs (loop1): Can't find a valid FAT filesystem [ 535.979551][T23668] FAT-fs (loop1): bogus number of reserved sectors [ 535.986111][T23668] FAT-fs (loop1): Can't find a valid FAT filesystem 16:34:49 executing program 0: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/policy\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz'}, &(0x7f00000001c0)="00f7", 0x2, 0xffffffffffffffff) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x268000, 0x2) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) signalfd4(r2, &(0x7f0000000400)={0x7}, 0x8, 0x80000) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000300)={@mcast1, 0x71, r3}) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000340), &(0x7f0000000380)=0x4) readv(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/175, 0x2bd}, {&(0x7f0000000480)=""/178, 0xb2}, {&(0x7f0000000640)=""/248, 0xf8}, {&(0x7f00000003c0)=""/50, 0x1c}], 0x100000000000004e) setsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f00000000c0)="31e211415ba5735c8eedfc1fd89f2f86adb204d982e6db8b662853e33fc9a0ecceeba5ed76dff3a2016031356d002f3924db534a12528da9a3d715ce301559b0085632911717ea4a7fb96c5b96889f4beac20562a2b6ba4142fafca4dcfd490915912ebeee94ebb8b0b75ccfc44148c0ca106ebf42369ffdb9f4cca232321331e2745f9aa08de49886994f536cc7044f2024831df6317189c4b4d27849a73f", 0x9f) 16:34:49 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0xfffffffffffffffa, &(0x7f0000000680)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:34:49 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:34:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 16:34:49 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001cc, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:34:49 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) [ 536.620532][T23674] FAT-fs (loop1): bogus number of reserved sectors [ 536.625796][T23683] FAT-fs (loop4): bogus number of reserved sectors [ 536.638889][T23674] FAT-fs (loop1): Can't find a valid FAT filesystem [ 536.673284][T23683] FAT-fs (loop4): Can't find a valid FAT filesystem 16:34:50 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 16:34:50 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0xfffffffffffffffa, &(0x7f0000000680)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) [ 536.721489][T23687] FAT-fs (loop1): bogus number of reserved sectors [ 536.745338][T23687] FAT-fs (loop1): Can't find a valid FAT filesystem 16:34:50 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:34:50 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001cd, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) [ 536.811121][T23683] FAT-fs (loop4): bogus number of reserved sectors [ 536.839623][T23683] FAT-fs (loop4): Can't find a valid FAT filesystem 16:34:50 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xe8a, 0x430080) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000100)=0x10000000000000, 0x4) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000300)=""/175, 0xaf}, {&(0x7f0000000480)=""/178, 0xb2}, {&(0x7f0000000640)=""/248, 0xf8}, {&(0x7f00000003c0)=""/50, 0x32}], 0x4) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000040)=""/89) 16:34:50 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:34:50 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r5, &(0x7f0000000340)={0x2c, 0x80000000005, r7, 0x4, r4}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r6, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r9, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) 16:34:50 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) [ 537.019391][T23697] FAT-fs (loop1): bogus number of reserved sectors [ 537.039487][T23697] FAT-fs (loop1): Can't find a valid FAT filesystem 16:34:50 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:34:50 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001ce, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:34:50 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) [ 537.142863][T23708] FAT-fs (loop1): bogus number of reserved sectors [ 537.158934][T23708] FAT-fs (loop1): Can't find a valid FAT filesystem 16:34:50 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) [ 537.273419][T23711] FAT-fs (loop4): bogus number of reserved sectors 16:34:50 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) [ 537.352172][T23711] FAT-fs (loop4): Can't find a valid FAT filesystem 16:34:50 executing program 3: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x4000) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4000000000000000, 0x0) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000300)=""/175, 0xaf}, {&(0x7f0000000480)=""/178, 0xb2}, {&(0x7f0000000640)=""/248, 0xf8}, {&(0x7f00000003c0)=""/50, 0x32}], 0x4) [ 537.433214][T23721] FAT-fs (loop1): bogus number of reserved sectors [ 537.445712][T23711] FAT-fs (loop4): bogus number of reserved sectors [ 537.454868][T23721] FAT-fs (loop1): Can't find a valid FAT filesystem 16:34:50 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) [ 537.485196][T23711] FAT-fs (loop4): Can't find a valid FAT filesystem [ 537.521678][T23729] FAT-fs (loop1): bogus number of reserved sectors 16:34:50 executing program 3: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x100000000000015d, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) [ 537.535397][T23729] FAT-fs (loop1): Can't find a valid FAT filesystem 16:34:51 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000940)='/dev/vga_arbiter\x00', 0x20000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000980)={0x9, 0xc, [0x4, 0x9, 0x9]}) socketpair(0x13, 0x7, 0xadc, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000200)=""/130, &(0x7f00000002c0)=0x82) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000080)={0x0, 0xff}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000100)={r4, 0x401, 0x7}, 0x8) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000b80)={0x9, &(0x7f0000000b00)=[{}, {}, {}, {0x0}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000bc0)={r5, 0x1}) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000300)=""/175, 0xaf}, {&(0x7f0000000480)=""/178, 0xb2}, {&(0x7f0000000640)=""/248, 0xf8}, {&(0x7f00000003c0)=""/50, 0x32}], 0x4) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000140)={r4, 0xb6, "bf5ddf24f86e31d62d16b11d94c15d5960d00d355a5167c5e44fd339fc78d90092b40d6a5f2ac0a93c172063d2b8baec950b1036a85780264233d8"}, &(0x7f00000001c0)=0x43) r7 = syz_open_procfs(0x0, &(0x7f0000000400)='fd\x00') getsockopt$inet_sctp_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000a80)=@assoc_id=r6, &(0x7f0000000ac0)=0x4) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000009c0)={r4, 0xc6, 0x88, "0335df18ec2ecc6ed727d8c141e1e04044a05f076147d41ffd73647511b515fd250a7706a8032cf9b186a50b8620910ab6accd01d11c070c0abb729aee11bbf38dc7986f762d712059ef380935cfce319d33b5ffb1770283e0942e36fab7dc51b2a55904305064449a3b95c26d8cc23c0438012e82029c74364f3e689bfbe845fcb6054569bfc96f"}, 0x90) ioctl$SG_IO(r7, 0x2285, &(0x7f00000008c0)={0x53, 0xffffffffffffffff, 0xa2, 0x3, @scatter={0x1, 0x0, &(0x7f0000000440)=[{&(0x7f0000000540)=""/255, 0xff}]}, &(0x7f0000000780)="224428ec73a16e2df330655fbf63d2d790782e7badd29eb00158e20875938f7399fd5bdc383d6226c1967e932fdda27600dcf947b916b0bdaa293b392903dbc004a1ed9a7195246c4e0e941a7563dd7ee6d5f4839c2cc87de8efb1dfa42fcb4eb8c2bd6973072dea433dc9c943e7e3acc6ff41b2bc23b1a2a74a92608ad231407299293cd9255cbc7afa7c72aee1d73edaf002f776403409db359f6ca16e207f9ee2", &(0x7f0000000840)=""/26, 0x3ff, 0x31, 0xffffffffffffffff, &(0x7f0000000880)}) getsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000c00), &(0x7f0000000c40)=0x4) 16:34:51 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001cf, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:34:51 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:34:51 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:34:51 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) 16:34:51 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) [ 538.006029][T23743] FAT-fs (loop4): bogus number of reserved sectors [ 538.018170][T23744] FAT-fs (loop1): bogus number of reserved sectors [ 538.024963][T23743] FAT-fs (loop4): Can't find a valid FAT filesystem [ 538.049462][T23744] FAT-fs (loop1): Can't find a valid FAT filesystem 16:34:51 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) 16:34:51 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r5, &(0x7f0000000340)={0x2c, 0x80000000005, r7, 0x4, r4}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r6, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r9, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.ys1\x0f', 0x1ff) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) [ 538.131067][T23743] FAT-fs (loop4): bogus number of reserved sectors [ 538.158548][T23755] FAT-fs (loop1): bogus number of reserved sectors [ 538.172486][T23743] FAT-fs (loop4): Can't find a valid FAT filesystem [ 538.187684][T23755] FAT-fs (loop1): Can't find a valid FAT filesystem 16:34:51 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001d0, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:34:51 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:34:51 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r5, &(0x7f0000000340)={0x2c, 0x80000000005, r7, 0x4, r4}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r6, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r9, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.ys1\x0f', 0x1ff) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) 16:34:51 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) [ 538.419181][T23766] FAT-fs (loop4): bogus number of reserved sectors [ 538.464506][T23766] FAT-fs (loop4): Can't find a valid FAT filesystem [ 538.545475][T23766] FAT-fs (loop4): bogus number of reserved sectors [ 538.559000][T23766] FAT-fs (loop4): Can't find a valid FAT filesystem 16:34:52 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000300)=""/175, 0xaf}, {&(0x7f0000000480)=""/178, 0xb2}, {&(0x7f0000000640)=""/248, 0xf8}, {&(0x7f00000003c0)=""/50, 0x32}], 0x4) dup3(r0, r0, 0x0) 16:34:52 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:34:52 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) 16:34:52 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r5, &(0x7f0000000340)={0x2c, 0x80000000005, r7, 0x4, r4}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r6, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r9, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.ys1\x0f', 0x1ff) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) 16:34:52 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:34:52 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001d1, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) [ 538.987393][T23779] FAT-fs (loop1): bogus number of reserved sectors [ 539.001594][T23780] FAT-fs (loop4): bogus number of reserved sectors [ 539.018307][T23779] FAT-fs (loop1): Can't find a valid FAT filesystem [ 539.025126][T23780] FAT-fs (loop4): Can't find a valid FAT filesystem [ 539.127600][T23780] FAT-fs (loop4): bogus number of reserved sectors [ 539.138651][T23780] FAT-fs (loop4): Can't find a valid FAT filesystem [ 539.150332][T23793] FAT-fs (loop1): bogus number of reserved sectors 16:34:52 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/cpu/.yz1\x0f', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:34:52 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) [ 539.179435][T23793] FAT-fs (loop1): Can't find a valid FAT filesystem 16:34:52 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:34:52 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001d2, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:34:52 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:34:52 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) [ 539.378977][T23801] FAT-fs (loop4): bogus number of reserved sectors [ 539.400543][T23805] FAT-fs (loop1): bogus number of reserved sectors [ 539.408465][T23801] FAT-fs (loop4): Can't find a valid FAT filesystem [ 539.441414][T23805] FAT-fs (loop1): Can't find a valid FAT filesystem [ 539.556772][T23811] FAT-fs (loop1): bogus number of reserved sectors [ 539.569498][T23811] FAT-fs (loop1): Can't find a valid FAT filesystem 16:34:53 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) readv(r1, &(0x7f0000000740)=[{&(0x7f0000000300)=""/175, 0xaf}, {&(0x7f0000000480)=""/178, 0xb2}, {&(0x7f0000000640)=""/248, 0xf8}, {&(0x7f00000003c0)=""/50, 0x32}], 0x4) 16:34:53 executing program 3 (fault-call:2 fault-nth:0): r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 16:34:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) 16:34:53 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:34:53 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:34:53 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001d3, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) [ 539.984960][T23817] FAT-fs (loop1): bogus number of reserved sectors [ 539.992923][T23822] FAULT_INJECTION: forcing a failure. [ 539.992923][T23822] name failslab, interval 1, probability 0, space 0, times 0 [ 540.009868][T23817] FAT-fs (loop1): Can't find a valid FAT filesystem [ 540.017049][T23824] FAT-fs (loop4): bogus number of reserved sectors [ 540.037181][T23824] FAT-fs (loop4): Can't find a valid FAT filesystem [ 540.048750][T23822] CPU: 0 PID: 23822 Comm: syz-executor.3 Not tainted 5.0.0+ #25 [ 540.056423][T23822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 540.066490][T23822] Call Trace: [ 540.069810][T23822] dump_stack+0x172/0x1f0 [ 540.075166][T23822] should_fail.cold+0xa/0x15 [ 540.079799][T23822] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 540.085634][T23822] ? ___might_sleep+0x163/0x280 [ 540.090502][T23822] __should_failslab+0x121/0x190 [ 540.095455][T23822] should_failslab+0x9/0x14 [ 540.099970][T23822] __kmalloc+0x2dc/0x740 [ 540.104328][T23822] ? drm_ioctl+0x45c/0xa50 [ 540.108787][T23822] drm_ioctl+0x45c/0xa50 [ 540.113146][T23822] ? drm_mode_create_dumb+0x310/0x310 [ 540.118545][T23822] ? drm_version+0x3d0/0x3d0 [ 540.123141][T23822] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 540.128998][T23822] ? ___might_sleep+0x163/0x280 [ 540.133888][T23822] ? drm_version+0x3d0/0x3d0 [ 540.138590][T23822] do_vfs_ioctl+0xd6e/0x1390 [ 540.143237][T23822] ? ioctl_preallocate+0x210/0x210 [ 540.148371][T23822] ? selinux_file_mprotect+0x620/0x620 [ 540.153842][T23822] ? __fget+0x381/0x550 [ 540.158026][T23822] ? ksys_dup3+0x3e0/0x3e0 [ 540.162453][T23822] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 540.168706][T23822] ? fput_many+0x12c/0x1a0 [ 540.173159][T23822] ? tomoyo_file_ioctl+0x23/0x30 [ 540.178132][T23822] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 540.184387][T23822] ? security_file_ioctl+0x93/0xc0 [ 540.189528][T23822] ksys_ioctl+0xab/0xd0 [ 540.193694][T23822] __x64_sys_ioctl+0x73/0xb0 [ 540.198308][T23822] do_syscall_64+0x103/0x610 [ 540.202924][T23822] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 540.208834][T23822] RIP: 0033:0x458079 [ 540.212767][T23822] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 540.232394][T23822] RSP: 002b:00007f10883b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 540.240831][T23822] RAX: ffffffffffffffda RBX: 00007f10883b3c90 RCX: 0000000000458079 [ 540.248842][T23822] RDX: 0000000020000040 RSI: ffffffffffffffb2 RDI: 0000000000000003 [ 540.256837][T23822] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 540.265039][T23822] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f10883b46d4 [ 540.273042][T23822] R13: 00000000004bf1d9 R14: 00000000004d0b68 R15: 0000000000000004 16:34:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) 16:34:53 executing program 3 (fault-call:2 fault-nth:1): r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 16:34:53 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001d4, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:34:53 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) [ 540.367459][T23824] FAT-fs (loop4): bogus number of reserved sectors [ 540.389350][T23824] FAT-fs (loop4): Can't find a valid FAT filesystem [ 540.418336][T23836] FAULT_INJECTION: forcing a failure. [ 540.418336][T23836] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 540.431608][T23836] CPU: 0 PID: 23836 Comm: syz-executor.3 Not tainted 5.0.0+ #25 [ 540.439272][T23836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 540.449423][T23836] Call Trace: [ 540.452738][T23836] dump_stack+0x172/0x1f0 [ 540.457097][T23836] should_fail.cold+0xa/0x15 [ 540.461708][T23836] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 540.467553][T23836] ? __lock_acquire+0x548/0x3fb0 [ 540.472591][T23836] ? is_bpf_text_address+0xac/0x170 [ 540.477812][T23836] should_fail_alloc_page+0x50/0x60 [ 540.483022][T23836] __alloc_pages_nodemask+0x1a1/0x7e0 [ 540.488414][T23836] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 540.494139][T23836] ? find_held_lock+0x35/0x130 [ 540.499039][T23836] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 540.504870][T23836] cache_grow_begin+0x9c/0x860 [ 540.509652][T23836] ? drm_ioctl+0x45c/0xa50 [ 540.514080][T23836] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 540.520348][T23836] __kmalloc+0x67f/0x740 [ 540.524607][T23836] ? drm_ioctl+0x45c/0xa50 [ 540.529045][T23836] drm_ioctl+0x45c/0xa50 [ 540.533305][T23836] ? drm_mode_create_dumb+0x310/0x310 [ 540.538705][T23836] ? drm_version+0x3d0/0x3d0 [ 540.543323][T23836] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 540.549157][T23836] ? ___might_sleep+0x163/0x280 [ 540.554021][T23836] ? drm_version+0x3d0/0x3d0 [ 540.558634][T23836] do_vfs_ioctl+0xd6e/0x1390 [ 540.563254][T23836] ? ioctl_preallocate+0x210/0x210 [ 540.568393][T23836] ? selinux_file_mprotect+0x620/0x620 [ 540.573874][T23836] ? __fget+0x381/0x550 [ 540.578051][T23836] ? ksys_dup3+0x3e0/0x3e0 [ 540.582478][T23836] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 540.588751][T23836] ? fput_many+0x12c/0x1a0 [ 540.593189][T23836] ? tomoyo_file_ioctl+0x23/0x30 [ 540.598150][T23836] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 540.604438][T23836] ? security_file_ioctl+0x93/0xc0 [ 540.609571][T23836] ksys_ioctl+0xab/0xd0 [ 540.613759][T23836] __x64_sys_ioctl+0x73/0xb0 [ 540.618430][T23836] do_syscall_64+0x103/0x610 [ 540.623075][T23836] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 540.629003][T23836] RIP: 0033:0x458079 [ 540.632910][T23836] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 540.652708][T23836] RSP: 002b:00007f10883b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 540.661154][T23836] RAX: ffffffffffffffda RBX: 00007f10883b3c90 RCX: 0000000000458079 [ 540.669167][T23836] RDX: 0000000020000040 RSI: ffffffffffffffb2 RDI: 0000000000000003 [ 540.677155][T23836] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 540.685144][T23836] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f10883b46d4 [ 540.693132][T23836] R13: 00000000004bf1d9 R14: 00000000004d0b68 R15: 0000000000000004 16:34:54 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:34:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) setgid(0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) [ 540.830773][T23843] FAT-fs (loop1): bogus number of reserved sectors [ 540.836010][T23846] FAT-fs (loop4): bogus number of reserved sectors [ 540.844305][T23843] FAT-fs (loop1): Can't find a valid FAT filesystem [ 540.895870][T23846] FAT-fs (loop4): Can't find a valid FAT filesystem 16:34:54 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x1) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000d00)=ANY=[@ANYBLOB="040000000000000002004e207f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000900000002004e23ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24ac14141500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e217f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e240000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e207f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e210000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22ac1414150000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a02b3fe3b0da6e4f4b83439f09fa6ca2563c5cf80c2b2df3eeb362b38b054119803a6df407f92c3a52fd927695cb3f729875882d5827b811a3de1f44878798666ee17c43f2687b3e2ab2f7f3dae8693a5db6a94"], 0x510) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x80, 0x12000) readv(r1, &(0x7f0000000740)=[{&(0x7f0000000300)=""/175, 0xaf}, {&(0x7f0000000480)=""/178, 0xb2}, {&(0x7f0000000640)=""/248, 0xf8}, {&(0x7f00000003c0)=""/50, 0x32}], 0x4) 16:34:54 executing program 3 (fault-call:2 fault-nth:2): r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 16:34:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) setgid(0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) 16:34:54 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001d5, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:34:54 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) [ 541.020218][T23846] FAT-fs (loop4): bogus number of reserved sectors [ 541.054054][T23846] FAT-fs (loop4): Can't find a valid FAT filesystem 16:34:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) setgid(0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) 16:34:54 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:34:54 executing program 0: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xfffffffffffffbff, 0x101000) recvfrom$llc(r0, &(0x7f0000000140)=""/178, 0xb2, 0x10162, &(0x7f0000000200)={0x1a, 0x31f, 0xffffffffffffffff, 0x9, 0x1, 0x9, @dev={[], 0xb}}, 0x10) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001880)={0x6, 0x0, [{0x6000, 0xd8, &(0x7f0000000640)=""/216}, {0x4, 0xaf, &(0x7f0000000040)=""/175}, {0x2, 0x39, &(0x7f0000000240)=""/57}, {0x1000, 0x1000, &(0x7f0000000780)=""/4096}, {0xd000, 0x30, &(0x7f0000000280)=""/48}, {0x3000, 0xea, &(0x7f0000001780)=""/234}]}) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000300)=""/175, 0xaf}, {&(0x7f0000000480)=""/178, 0x412}, {&(0x7f0000000540)=""/248, 0xf8}, {&(0x7f00000003c0)=""/50, 0x32}], 0x4) 16:34:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) [ 541.172087][T23865] FAT-fs (loop1): bogus number of reserved sectors [ 541.195752][T23865] FAT-fs (loop1): Can't find a valid FAT filesystem 16:34:54 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001d6, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) [ 541.317935][T23874] FAT-fs (loop4): bogus number of reserved sectors [ 541.339553][T23874] FAT-fs (loop4): Can't find a valid FAT filesystem [ 541.351872][T23877] FAT-fs (loop1): bogus number of reserved sectors 16:34:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:34:54 executing program 0: recvmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/229, 0xe5}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/77, 0x4d}], 0x3, &(0x7f0000000540)=""/175, 0xaf}, 0x40010000) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x100) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f00000007c0)) getsockopt$inet6_dccp_int(r0, 0x21, 0x1e, &(0x7f0000000400), &(0x7f0000000440)=0x4) r2 = syz_open_dev$swradio(&(0x7f0000000600)='/dev/swradio#\x00', 0x0, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000800)='/dev/sequencer2\x00', 0x400000, 0x0) ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000780)=0x27b) r3 = syz_open_dev$evdev(&(0x7f0000000840)='/dev/input/event#\x00', 0x0, 0x103040) readv(r3, &(0x7f0000000740)=[{&(0x7f0000000300)=""/175, 0xaf}, {&(0x7f0000000480)=""/178, 0xb2}, {&(0x7f0000000640)=""/248, 0xf8}, {&(0x7f00000003c0)=""/50, 0x32}], 0x4) [ 541.370824][T23877] FAT-fs (loop1): Can't find a valid FAT filesystem 16:34:54 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:34:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) [ 541.457183][T23874] FAT-fs (loop4): bogus number of reserved sectors [ 541.496229][T23874] FAT-fs (loop4): Can't find a valid FAT filesystem 16:34:54 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001d7, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:34:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffff00000002, &(0x7f0000000040)) 16:34:54 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) [ 541.614659][T23891] FAT-fs (loop1): bogus number of reserved sectors [ 541.630044][T23891] FAT-fs (loop1): Can't find a valid FAT filesystem 16:34:55 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) [ 541.734516][T23895] FAT-fs (loop1): bogus number of reserved sectors [ 541.786428][T23895] FAT-fs (loop1): Can't find a valid FAT filesystem 16:34:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffff00004b47, &(0x7f0000000040)) 16:34:55 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) [ 541.861428][T23901] FAT-fs (loop4): bogus number of reserved sectors [ 541.873935][T23901] FAT-fs (loop4): Can't find a valid FAT filesystem 16:34:55 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:34:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffff00004b49, &(0x7f0000000040)) 16:34:55 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001d8, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) [ 541.977702][T23901] FAT-fs (loop4): bogus number of reserved sectors [ 541.998214][T23901] FAT-fs (loop4): Can't find a valid FAT filesystem [ 542.079377][T23913] FAT-fs (loop1): bogus number of reserved sectors [ 542.085939][T23913] FAT-fs (loop1): Can't find a valid FAT filesystem [ 542.228038][T23924] FAT-fs (loop1): bogus number of reserved sectors [ 542.249262][T23924] FAT-fs (loop1): Can't find a valid FAT filesystem 16:34:55 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000300)=""/175, 0xaf}, {&(0x7f0000000480)=""/178, 0xb2}, {&(0x7f0000000040)=""/248, 0xf8}, {&(0x7f00000003c0)=""/50, 0xfffffffffffffe45}], 0x4) r1 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000140), 0x800) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000180)={0x84, @multicast2, 0x4e23, 0x4, 'ovf\x00', 0x20, 0x3, 0x78}, 0x2c) 16:34:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffff0000541b, &(0x7f0000000040)) 16:34:55 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:34:55 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:34:55 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001d9, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:34:55 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:34:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffff00005421, &(0x7f0000000040)) 16:34:55 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xae9, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) readv(r1, &(0x7f0000000740)=[{&(0x7f0000000300)=""/175, 0xaf}, {&(0x7f0000000480)=""/178, 0xb2}, {&(0x7f0000000640)=""/248, 0xf8}, {&(0x7f00000003c0)=""/50, 0x32}], 0x4) [ 542.542699][T23937] FAT-fs (loop4): bogus number of reserved sectors [ 542.551525][T23934] FAT-fs (loop1): bogus number of reserved sectors [ 542.578426][T23934] FAT-fs (loop1): Can't find a valid FAT filesystem [ 542.581615][T23937] FAT-fs (loop4): Can't find a valid FAT filesystem 16:34:55 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:34:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffff00005450, &(0x7f0000000040)) 16:34:56 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:34:56 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:34:56 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:34:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffff00005451, &(0x7f0000000040)) [ 542.844232][T23959] FAT-fs (loop1): bogus number of reserved sectors [ 542.866037][T23963] FAT-fs (loop4): bogus number of reserved sectors [ 542.874352][T23959] FAT-fs (loop1): Can't find a valid FAT filesystem 16:34:56 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001da, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:34:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffff00005452, &(0x7f0000000040)) [ 542.899750][T23963] FAT-fs (loop4): Can't find a valid FAT filesystem 16:34:56 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) [ 543.005961][T23963] FAT-fs (loop4): bogus number of reserved sectors [ 543.014353][T23969] FAT-fs (loop1): bogus number of reserved sectors [ 543.039405][T23963] FAT-fs (loop4): Can't find a valid FAT filesystem 16:34:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffff00005460, &(0x7f0000000040)) [ 543.056587][T23969] FAT-fs (loop1): Can't find a valid FAT filesystem 16:34:56 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) [ 543.233963][T23984] FAT-fs (loop4): bogus number of reserved sectors [ 543.271767][T23984] FAT-fs (loop4): Can't find a valid FAT filesystem [ 543.339429][T23984] FAT-fs (loop4): bogus number of reserved sectors [ 543.347307][T23984] FAT-fs (loop4): Can't find a valid FAT filesystem 16:34:56 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x8, 0x0) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000300)=""/175, 0xaf}, {&(0x7f0000000480)=""/178, 0xb2}, {&(0x7f0000000640)=""/248, 0xf8}, {&(0x7f00000003c0)=""/50, 0x32}], 0x4) 16:34:56 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:34:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffff40049409, &(0x7f0000000040)) 16:34:56 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001db, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:34:56 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:34:56 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:34:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffff40086602, &(0x7f0000000040)) [ 543.678254][T24000] FAT-fs (loop1): bogus number of reserved sectors [ 543.679745][T23996] FAT-fs (loop4): bogus number of reserved sectors [ 543.699398][T23996] FAT-fs (loop4): Can't find a valid FAT filesystem [ 543.712324][T24000] FAT-fs (loop1): Can't find a valid FAT filesystem 16:34:57 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000000080)) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000300)=""/175, 0xaf}, {&(0x7f0000000480)=""/178, 0xb2}, {&(0x7f0000000640)=""/248, 0x13c}, {&(0x7f00000003c0)=""/50, 0x32}], 0x4) 16:34:57 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:34:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffff40087602, &(0x7f0000000040)) 16:34:57 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:34:57 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001dc, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) [ 543.832141][T24010] FAT-fs (loop1): bogus number of reserved sectors [ 543.838686][T24010] FAT-fs (loop1): Can't find a valid FAT filesystem 16:34:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffff4020940d, &(0x7f0000000040)) 16:34:57 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:34:57 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) [ 543.929449][T24019] FAT-fs (loop4): bogus number of reserved sectors [ 543.936007][T24019] FAT-fs (loop4): Can't find a valid FAT filesystem 16:34:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffff80086601, &(0x7f0000000040)) [ 544.040676][T24029] FAT-fs (loop1): bogus number of reserved sectors [ 544.047571][T24029] FAT-fs (loop1): Can't find a valid FAT filesystem [ 544.047706][T24019] FAT-fs (loop4): bogus number of reserved sectors [ 544.069834][T24019] FAT-fs (loop4): Can't find a valid FAT filesystem 16:34:57 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) [ 544.105194][T24034] FAT-fs (loop1): bogus number of reserved sectors [ 544.125094][T24034] FAT-fs (loop1): Can't find a valid FAT filesystem 16:34:57 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:34:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffff80087601, &(0x7f0000000040)) [ 544.325924][T24042] FAT-fs (loop4): bogus number of reserved sectors [ 544.362071][T24042] FAT-fs (loop4): Can't find a valid FAT filesystem [ 544.438245][T24042] FAT-fs (loop4): bogus number of reserved sectors [ 544.452754][T24042] FAT-fs (loop4): Can't find a valid FAT filesystem 16:34:58 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x8080, 0x0) getsockopt$ax25_int(r1, 0x101, 0xf, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x3ff, 0x40, 0xffffffffffff1723, 0x77}, 'syz1\x00', 0x5}) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000300)=""/175, 0xaf}, {&(0x7f0000000480)=""/178, 0xb2}, {&(0x7f0000000640)=""/248, 0xf8}, {&(0x7f00000003c0)=""/50, 0x32}], 0x4) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, r2, 0x3, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, [{0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r1}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7ff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x103}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) 16:34:58 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:34:58 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:34:58 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001dd, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:34:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xc0045878, &(0x7f0000000040)) 16:34:58 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:34:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffffc0045878, &(0x7f0000000040)) [ 544.849887][T24054] FAT-fs (loop1): bogus number of reserved sectors [ 544.856521][T24054] FAT-fs (loop1): Can't find a valid FAT filesystem [ 544.869393][T24058] FAT-fs (loop4): bogus number of reserved sectors 16:34:58 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) [ 544.909372][T24058] FAT-fs (loop4): Can't find a valid FAT filesystem [ 544.930352][T24066] FAT-fs (loop1): bogus number of reserved sectors 16:34:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffffc0189436, &(0x7f0000000040)) [ 544.955711][T24066] FAT-fs (loop1): Can't find a valid FAT filesystem 16:34:58 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001de, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:34:58 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:34:58 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) [ 545.214593][T24085] FAT-fs (loop4): bogus number of reserved sectors [ 545.215165][T24083] FAT-fs (loop1): bogus number of reserved sectors [ 545.233925][T24083] FAT-fs (loop1): Can't find a valid FAT filesystem [ 545.237435][T24085] FAT-fs (loop4): Can't find a valid FAT filesystem [ 545.351315][T24085] FAT-fs (loop4): bogus number of reserved sectors [ 545.369983][T24085] FAT-fs (loop4): Can't find a valid FAT filesystem 16:34:59 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/175, 0x192}, {&(0x7f0000000780)=""/178, 0xffffffffffffff91}, {&(0x7f0000000200)=""/248, 0xf8}, {&(0x7f00000003c0)=""/50, 0x32}], 0x4) 16:34:59 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:34:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffffc020660b, &(0x7f0000000040)) 16:34:59 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001df, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:34:59 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:34:59 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:34:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffffffffffc9, &(0x7f0000000040)) [ 545.914255][T24099] FAT-fs (loop4): bogus number of reserved sectors [ 545.931153][T24103] FAT-fs (loop1): bogus number of reserved sectors [ 545.947942][T24103] FAT-fs (loop1): Can't find a valid FAT filesystem [ 545.952881][T24099] FAT-fs (loop4): Can't find a valid FAT filesystem 16:34:59 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:34:59 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001e0, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:34:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 16:34:59 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000300)=""/175, 0xaf}, {&(0x7f0000000480)=""/178, 0xb2}, {&(0x7f0000000640)=""/248, 0xf8}, {&(0x7f00000003c0)=""/50, 0x32}], 0x4) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x5, 0x200) 16:34:59 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) [ 546.104881][T24099] FAT-fs (loop4): bogus number of reserved sectors [ 546.129657][T24099] FAT-fs (loop4): Can't find a valid FAT filesystem 16:34:59 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:34:59 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpu.stat\x00', 0x0, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000140)) r1 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x3) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x630000, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f00000000c0), 0x4) 16:34:59 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) [ 546.278557][T24127] FAT-fs (loop1): bogus number of reserved sectors 16:34:59 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) [ 546.327768][T24127] FAT-fs (loop1): Can't find a valid FAT filesystem [ 546.362793][T24134] FAT-fs (loop4): bogus number of reserved sectors 16:34:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) [ 546.376716][T24134] FAT-fs (loop4): Can't find a valid FAT filesystem [ 546.452641][T24137] FAT-fs (loop1): bogus number of reserved sectors [ 546.472572][T24134] FAT-fs (loop4): bogus number of reserved sectors [ 546.485916][T24137] FAT-fs (loop1): Can't find a valid FAT filesystem [ 546.487776][T24134] FAT-fs (loop4): Can't find a valid FAT filesystem 16:34:59 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0}) setgid(r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) 16:34:59 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:34:59 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x100, 0x101001) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000140)) r1 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000001c0)=0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f0000000240)={r0, r0, 0x1000000000000}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000000)={0x0, 0x80000, r1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={r4, 0x80000, r1}) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) 16:34:59 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001e1, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:34:59 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) [ 546.781421][T24156] FAT-fs (loop1): bogus number of reserved sectors [ 546.788130][T24154] FAT-fs (loop4): bogus number of reserved sectors [ 546.788198][T24156] FAT-fs (loop1): Can't find a valid FAT filesystem [ 546.797279][T24154] FAT-fs (loop4): Can't find a valid FAT filesystem [ 546.893378][T24154] FAT-fs (loop4): bogus number of reserved sectors [ 546.908348][T24154] FAT-fs (loop4): Can't find a valid FAT filesystem [ 546.970330][T24161] FAT-fs (loop1): bogus number of reserved sectors [ 546.976882][T24161] FAT-fs (loop1): Can't find a valid FAT filesystem 16:35:00 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1, 0x5) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000080)={0x80000000, 0x401}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="000000002e06ffffefffffc21a00000000"]) dup2(r2, r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000002e00)={0x14, 0x0, &(0x7f0000003380)=ANY=[], 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x1, [], 0x0, 0x1}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r4, 0x50, &(0x7f0000002e80)}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000031c0)={r4, 0x50, &(0x7f0000003140)}, 0x10) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000240)=0x0) r6 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) setsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, &(0x7f00000001c0)=0xffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r7, 0x401870cb, &(0x7f00000003c0)={0xff5, 0x698, 0x6, 0x7}) getpgid(0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000480)=0x5) bind$bt_sco(r8, &(0x7f0000000040), 0x8) listen(r8, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) mkdir(0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x1e) mount$bpf(0x20000000, 0x0, 0x0, 0x40000001fffd, 0x0) clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 16:35:00 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0}) setgid(r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) 16:35:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x50d001, 0x0) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000000140)={0x5031, "8aa8fcab0038914710ec683f1ab99478ac15a700fa2be703ae02d1ffb489fb68", 0x3, 0x1}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) getdents64(r1, &(0x7f00000001c0)=""/5, 0x5) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 16:35:00 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001e2, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:35:00 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:00 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) [ 547.132279][T24170] FAT-fs (loop4): bogus number of reserved sectors 16:35:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x7}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) [ 547.177894][T24170] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:00 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0}) setgid(r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) 16:35:00 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000300)=""/175, 0xaf}, {&(0x7f0000000480)=""/178, 0xb2}, {&(0x7f0000000640)=""/248, 0xf8}, {&(0x7f00000003c0)=""/50, 0x32}], 0x4) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x2040, 0x0) ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, &(0x7f0000000080)={0x6, "b2450dbf417a64b9712cf01b0a2ad0dcbb780663bf9a87a66beda4cd811d4711", 0x9, 0x16, 0x3a2800, 0xffffffff, 0x5, 0x2, 0x1, 0x12}) 16:35:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000140)={0x100, 0x9, 0x4000000000, 0xfeb, 0x8, 0x1f, 0x59d, 0x1ff, 0x9, 0xfff, 0x5, 0xb05}) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x18) [ 547.315414][T24180] FAT-fs (loop1): bogus number of reserved sectors 16:35:00 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:00 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001e3, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) [ 547.373277][T24180] FAT-fs (loop1): Can't find a valid FAT filesystem 16:35:00 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0}) setgid(r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) 16:35:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x7ff, 0xc2001) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x80000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000140)=@req={0x8, 0x1, 0x10002000000000, 0x9}, 0x10) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000100)) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) [ 547.480037][T24198] FAT-fs (loop1): bogus number of reserved sectors [ 547.486672][T24196] FAT-fs (loop4): bogus number of reserved sectors [ 547.510055][T24198] FAT-fs (loop1): Can't find a valid FAT filesystem [ 547.517858][T24196] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:00 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) pwrite64(r0, &(0x7f00000000c0)="8eda2577b344b580e9eb9afcd8bbe3b00a2d27a861c0da4965239b3052b7b4249dc552c839eb0b7233c659bbd355385046a843a6a4efdda2942d2b121da1a762677f261424c665bbd3f8111b988edc1c72389c7c00c73eec2cdb059f2c52ad5dbeda89df1c1b3589bcf7677d987e393dd4a4ffba130c57e61eef45e564c18b19149a1073696be1f43706c8e80cdb856d83a6e78d6339e4d66d", 0x99, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x10000) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f00000001c0)={0x5b, 0x6, 0xb, 0x5}) 16:35:01 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:01 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001e4, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:35:01 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0}) setgid(r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) 16:35:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x4, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f00000000c0)={{0x1}, {}, 0x8}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) [ 547.707592][T24215] FAT-fs (loop1): bogus number of reserved sectors [ 547.726629][T24215] FAT-fs (loop1): Can't find a valid FAT filesystem [ 547.795940][T24222] FAT-fs (loop4): bogus number of reserved sectors [ 547.813938][T24224] FAT-fs (loop1): bogus number of reserved sectors [ 547.820765][T24222] FAT-fs (loop4): Can't find a valid FAT filesystem [ 547.845648][T24224] FAT-fs (loop1): Can't find a valid FAT filesystem [ 547.939406][T24222] FAT-fs (loop4): bogus number of reserved sectors [ 547.956968][T24222] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:01 executing program 0: fstat(0xffffffffffffffff, &(0x7f0000000040)) readv(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000300)=""/175, 0xaf}, {&(0x7f0000000480)=""/178, 0xb2}, {&(0x7f0000000640)=""/248, 0xf8}, {&(0x7f00000003c0)=""/50, 0x32}], 0x4) 16:35:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0x500, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x800, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r2, 0xc0285629, &(0x7f0000000100)={0x0, 0xfffffffffffeffff, 0x7, [], &(0x7f00000000c0)=0x3}) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000140)=0x0) r4 = getpgid(r3) waitid(0x1, r4, &(0x7f00000001c0), 0x100000f, &(0x7f0000000240)) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 16:35:01 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0}) setgid(r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) 16:35:01 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:01 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001e5, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:35:01 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:01 executing program 3: ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) r0 = open(&(0x7f0000000180)='./file0\x00', 0x40040, 0x6) ioctl(0xffffffffffffffff, 0xffffffffffffffb2, &(0x7f0000000040)) syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0xffffffffffffffc1, 0x80000) r1 = socket$inet6(0xa, 0x4, 0x2) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000240)={0x0, 0x2, 0xfffffffffffffff9, 0x5, 0x2, 0x9, 0x1, 0x3ff, {0x0, @in6={{0xa, 0x4e22, 0x31e30db3, @rand_addr="338610b8b9bde72ed4dc6d9e01ee3e41", 0x2}}, 0x8, 0x5, 0x9, 0x800, 0x7}}, &(0x7f0000000300)=0xb0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000340)={r2, @in={{0x2, 0x4e20, @empty}}, 0x8000, 0x5, 0x9, 0x0, 0x9}, &(0x7f0000000000)=0x98) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x800, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYBLOB="07000200f0ff0400"], 0xc) [ 548.427040][T24242] FAT-fs (loop4): bogus number of reserved sectors [ 548.433700][T24238] FAT-fs (loop1): bogus number of reserved sectors 16:35:01 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:35:01 executing program 0: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0xff, 0x200000) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000300)=""/175, 0xaf}, {&(0x7f0000000080)=""/178, 0xb2}, {&(0x7f0000000640)=""/248, 0xf8}, {&(0x7f00000003c0)=""/50, 0x32}], 0x4) [ 548.469375][T24238] FAT-fs (loop1): Can't find a valid FAT filesystem [ 548.469601][T24242] FAT-fs (loop4): Can't find a valid FAT filesystem [ 548.566223][T24252] FAT-fs (loop1): bogus number of reserved sectors [ 548.598141][T24252] FAT-fs (loop1): Can't find a valid FAT filesystem 16:35:02 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) [ 548.628324][T24242] FAT-fs (loop4): bogus number of reserved sectors [ 548.652294][T24242] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:02 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:35:02 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000300)=""/175, 0xaf}, {&(0x7f0000000480)=""/178, 0xb2}, {&(0x7f0000000640)=""/248, 0xf8}, {&(0x7f00000003c0)=""/50, 0x32}], 0x4) setxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=@sha1={0x1, "2373c8193eef3c6ff1e75970862f8aee1b860aa9"}, 0x15, 0x2) 16:35:02 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:02 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001e6, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:35:02 executing program 3: r0 = inotify_init1(0x0) r1 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) accept4(r2, 0x0, &(0x7f00000001c0), 0x80800) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f00000000c0)={0x2, 0x2, 0x81}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) fstatfs(r0, &(0x7f0000000100)=""/94) socket$inet(0x2, 0x4, 0xffff) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) [ 548.877351][T24270] FAT-fs (loop1): bogus number of reserved sectors [ 548.890206][T24270] FAT-fs (loop1): Can't find a valid FAT filesystem [ 548.902046][T24278] Unknown ioctl 1074835060 16:35:02 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:35:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffffffffffb2, &(0x7f00000000c0)="8672fb1d23c02e746ff6c59cf570c9579bd6b60dfb23e86a40206e27e3bed6615f60a3308a8920fea239a11d32d64e5a8fdc091646af3a6473735ca9bfadf82634af85c75f7fc3e1089fbcff97e9fae5d78cbaddfb9eae20aa61bd3250c1dbd0d6cfe9def134410ba6bbd60856") r1 = msgget$private(0x0, 0x44) r2 = open(&(0x7f0000000000)='./file0\x00', 0x181002, 0x8) r3 = geteuid() getresgid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)=0x0) fchownat(r2, &(0x7f0000000140)='./file0\x00', r3, r4, 0x1000) ioctl$TUNSETOWNER(r2, 0x400454cc, r3) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000380), &(0x7f00000003c0)=0x4) msgctl$MSG_STAT(r1, 0xb, &(0x7f00000001c0)=""/193) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000400)=0x5, 0x4) [ 548.926866][T24280] FAT-fs (loop4): bogus number of reserved sectors [ 548.928024][T24282] Unknown ioctl 1074835060 [ 548.933985][T24280] FAT-fs (loop4): Can't find a valid FAT filesystem [ 549.008029][T24285] FAT-fs (loop1): bogus number of reserved sectors [ 549.019481][T24285] FAT-fs (loop1): Can't find a valid FAT filesystem [ 549.028065][T24280] FAT-fs (loop4): bogus number of reserved sectors [ 549.034894][T24280] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:02 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001e7, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:35:02 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r5, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) 16:35:02 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:02 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:02 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dsp\x00', 0x100, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000140)) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x20) r1 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@empty, @in6=@local, 0x4e20, 0x0, 0x4e22, 0x3, 0xa, 0xa0, 0x80, 0x0, 0x0, r2}, {0x2, 0x0, 0x0, 0x100000000, 0x4, 0x51e, 0x2, 0x40}, {0x1ff, 0x2, 0x3f, 0x299}, 0x6, 0x6e6bb1, 0x2, 0x0, 0x2, 0x3}, {{@in6=@remote, 0x4d2, 0x2b}, 0xa, @in=@rand_addr=0x8, 0x0, 0x2, 0x1, 0x5, 0x7b, 0x1a9, 0xffffffff}}, 0xe8) fchmod(r1, 0x100) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x4) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r3, 0x2) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f00000000c0)=""/17) [ 549.240293][T24298] FAT-fs (loop1): bogus number of reserved sectors [ 549.250576][T24303] FAT-fs (loop4): bogus number of reserved sectors [ 549.275305][T24303] FAT-fs (loop4): Can't find a valid FAT filesystem [ 549.275942][T24298] FAT-fs (loop1): Can't find a valid FAT filesystem 16:35:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 16:35:03 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x6) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000), 0x4) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3, 0x2) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x1, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)={&(0x7f0000000100)='./file0\x00', r2}, 0x10) readv(r1, &(0x7f0000000740)=[{&(0x7f0000000300)=""/175, 0xfffffffffffffea7}, {&(0x7f0000000040)=""/178, 0xb2}, {&(0x7f0000000640)=""/248, 0xf8}, {&(0x7f00000003c0)=""/50, 0x32}], 0x7) 16:35:03 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r5, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) 16:35:03 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001e8, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:35:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x1f, 0x2000) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f00000002c0)=@assoc_value={0x0, 0x80}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000300)={r2, 0x80000000, 0x30}, &(0x7f0000000340)=0xc) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) setxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000100)='TRUE', 0x4, 0x2) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000380)) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x4080, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f00000001c0)={0x0, 0x13000}) getsockname$packet(r3, &(0x7f0000001500)={0x11, 0x0, 0x0}, &(0x7f0000001540)=0x14) sendmmsg(r3, &(0x7f0000002c80)=[{{&(0x7f0000001580)=@ll={0x11, 0xf8, r4, 0x1, 0xffffffffffffffc3, 0x6, @local}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001600)="b360be652d113f6b096c1cfa3b126eab4b945e983dae2d61e239a6f56ae3386d09ea99b6897831586e1697e6312bbd313abd5b2b88936188d69e61c4e44511a7e9d142ed10b4004bce6d4d10099186b17509ced7483378a64bad9aab06eaa9fad2eba7765f22001c59c9d86593c0a77aefb26b6dc03c3bccefec120179ad32ec01cb90e48204a407ccb9f86dd0011235eab5ec5c29a27a92cf7028f833395e13", 0xa0}, {&(0x7f00000016c0)="879403efd28e7a6272a9dc2bf6c2da93d03aba7f93832647d4dd7d2eae010204886286e7ef44cd012043bcb2573b9132be0dac7c43a9ec1340503c899df4c5a6409e869fef1a2842b2634f688e7570d4ad56b64927ff68757217a301b845ab63e7ca1b070e3d52c7c6079f0b7f82b2d89b68e9cec609eb409f35af21b48b3a7aa5af045af965379837875c14cd64b9bf5dc082445965f0eeae6c35dbe95d71f9dbd7a48415d4ebe56e5a290ab242082ac67aba4837e57d7492b317fc0a7bb1fd4cacfc50543ec9add1d9f50be75daa56c9ba26f41690a5d26f9a203d599ec4eec7de14c8153eeafda0cba9b5bd", 0xed}, {&(0x7f00000017c0)="817d9f8c74cd5468ad7ced17458279e3dffbb1aaaeb3fbb92504188c82de65020bc13322ba5f9caf05dc7fd338f9240040742eedaced85cc31dcef6df0ffbbb33eae8770233d0646ee532e0ef78a77d5910b487a1549814a0600ef3451b9545425c44f6509a5f4e92aea", 0x6a}], 0x3}, 0x6}, {{&(0x7f0000001880)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0xe9, @ipv4={[], [], @rand_addr=0x40}, 0x8}}, 0x80, &(0x7f0000001900), 0x0, &(0x7f0000001940)=[{0x20, 0x13f, 0x101, "77b31b4464f69a65ef72a7"}, {0xc0, 0x11b, 0x1, "9bf0bc4b5b62cacabd13016d58d8ba2652a40278b0a522c2479eda493bfbd95d328ee4bf18b4116314d2f660df41ec7f622d278b039b57527717f9ef765b409d9eb49fafe2e6dc519e8eeaf37b367eea5be11b65713e029e8d4e51502b127358f55c4da7bf0fae135e6d85dc612ec14f7b84370143c683fac3ea6591c07daffadd99008745df0edb6fbb8f9f3642528e3cdd357417ef6664f8ad76d4fe3485db4a86727a7e405e033181a7dce829"}, {0xb8, 0x108, 0x80, "461e6c1720523fd53fbb27c40a7354056566104e24ed1bd486e03f0dd5cc78605c7fd2b722295fd33ec067e133b4add3f43796c1cd6342a10b02ba9d67dc0881e788c99a1b3fc26557e819cd746d68543fcf9e80c54f6aebeeb88252fb6e4a4d6fec9dd641a6802f3ee5a1ae60c6d74e81197ff94055d2c26a271c4674c9dfc7ce915321618645e4531bd5f8397741afe910d5c61be055728a990e090bf18f93a6"}, {0x1010, 0x10e, 0x7fff, "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"}, {0x28, 0x102, 0x101, "63133e9dc536a0386555f58efa268d56a0"}, {0x100, 0x0, 0x20, "69475821fe20d7c2c21693347c6062b4ec33241257a9c091b9af6b3019dbdc534714dec22d3187eb14507036db7041ab469b5e52ace2b19c0e49359940ebdbd4f8545d8911bd9a74d535341a6f7764549c5c1fd693216b70ebf060eec385487aa538c5948d1119bf28f9832ec9ea1df7afe960b29ec6e8c7400c879fb2c2ce34eba0a55b951472c5d737d54745160a6b00b0646f3d6cb5e088ff8b0e8a4c23c295c415e427d9e1d5bf0b9a278bcbe274ba2490654771567ed1e2267a3ed74279c0d1879fc2cf8cc1ad11bb9dd0b11451df994cfa8ed1e89996be5f317d9c0e84b16db298807d66f9eef876eccf"}, {0x38, 0x11f, 0x626, "dae1e36caa9e9af9db72f4410e4dae928c2ab033c4bb3354a6aed3b9d8b5bd5964d73c12db9edbca"}, {0x38, 0x11f, 0x8, "e4179b00a1aeb1b78d709ec542fb0603ba679e1f88951e5976d52d413ef411382aa7d177b057"}], 0x1340}, 0x5}], 0x2, 0x80) ioctl$VIDIOC_S_AUDIO(r3, 0x40345622, &(0x7f0000000200)={0xc9, "38ffe5621c30633469da7fb5593a2659604863cd7421f45fad5cdfdfa8d61f7f", 0x2, 0x1}) 16:35:03 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:03 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) [ 549.774377][T24323] FAT-fs (loop4): bogus number of reserved sectors [ 549.779442][T24320] FAT-fs (loop1): bogus number of reserved sectors [ 549.787705][T24320] FAT-fs (loop1): Can't find a valid FAT filesystem 16:35:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f0000000240)={"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"}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x20000, 0x0) setsockopt$rose(r2, 0x104, 0x3, &(0x7f0000000040)=0x9, 0x4) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f00000001c0)={{0x0, 0x5}, {0x9, 0x10000}, 0x8, 0x4, 0x401}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x101000, 0x0) inotify_add_watch(r3, &(0x7f00000000c0)='./file0\x00', 0x92000004) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f0000000640)) ioctl(r0, 0xffffffffffffffb6, &(0x7f0000000100)="3866a891aae805e552f0f2c593543d2294595bd68a3bd694349a79e68e683255455d18883747") [ 549.821063][T24323] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:03 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r5, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) [ 549.861596][T24331] FAT-fs (loop1): bogus number of reserved sectors [ 549.881000][T24331] FAT-fs (loop1): Can't find a valid FAT filesystem 16:35:03 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001e9, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:35:03 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) [ 549.913968][T24323] FAT-fs (loop4): bogus number of reserved sectors [ 549.934839][T24323] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x10001, 0xfffffffffffffe01, 0x2, 0x3, 0x1000, 0x6, 0x3b37, 0x8463}, &(0x7f00000000c0)={0x3, 0x7, 0x7c, 0x100000000, 0x739, 0x6, 0x4a3}, &(0x7f0000000100)={0x2, 0x6, 0xfffffffffffffc64, 0x9, 0x0, 0xffffffffffff7fff, 0x6, 0x7ff}, &(0x7f0000000140)={0x77359400}, &(0x7f0000000200)={&(0x7f00000001c0)={0x65f00000}, 0x8}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) r1 = syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0x0, 0x2) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000280)=0x7) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 16:35:03 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) [ 550.165610][T24350] FAT-fs (loop1): bogus number of reserved sectors [ 550.165643][T24351] FAT-fs (loop4): bogus number of reserved sectors [ 550.193002][T24350] FAT-fs (loop1): Can't find a valid FAT filesystem [ 550.223368][T24351] FAT-fs (loop4): Can't find a valid FAT filesystem [ 550.266539][T24354] FAT-fs (loop1): bogus number of reserved sectors [ 550.281190][T24354] FAT-fs (loop1): Can't find a valid FAT filesystem 16:35:04 executing program 3: r0 = msgget$private(0x0, 0x21) msgctl$MSG_INFO(r0, 0xc, &(0x7f00000000c0)=""/184) r1 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) 16:35:04 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r3, &(0x7f0000000340)={0x2c, 0x80000000005, r5, 0x4, r2}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r4, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) 16:35:04 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000300)=""/175, 0xaf}, {&(0x7f0000000480)=""/178, 0xb2}, {&(0x7f0000000640)=""/248, 0xf8}, {&(0x7f00000003c0)=""/50, 0x32}], 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000080)={0x101, 0x0, 0xffffffffc49766ec, 0x1f, 0x0}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={r2, 0x1}, 0x8) 16:35:04 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:04 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001ea, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:35:04 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:04 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r3, &(0x7f0000000340)={0x2c, 0x80000000005, r5, 0x4, r2}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r4, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) [ 550.896844][T24364] FAT-fs (loop1): bogus number of reserved sectors [ 550.923041][T24368] FAT-fs (loop4): bogus number of reserved sectors [ 550.927551][T24364] FAT-fs (loop1): Can't find a valid FAT filesystem 16:35:04 executing program 3: syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) [ 550.967685][T24368] FAT-fs (loop4): Can't find a valid FAT filesystem [ 551.013613][T24378] FAT-fs (loop1): bogus number of reserved sectors [ 551.028231][T24378] FAT-fs (loop1): Can't find a valid FAT filesystem 16:35:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f00000000c0)=""/84) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 16:35:04 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001eb, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:35:04 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:04 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r3, &(0x7f0000000340)={0x2c, 0x80000000005, r5, 0x4, r2}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r4, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) 16:35:04 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}}, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) [ 551.221742][T24395] FAT-fs (loop4): bogus number of reserved sectors [ 551.235270][T24395] FAT-fs (loop4): Can't find a valid FAT filesystem [ 551.247945][T24393] FAT-fs (loop1): bogus number of reserved sectors [ 551.299915][T24393] FAT-fs (loop1): Can't find a valid FAT filesystem [ 551.326208][T24395] FAT-fs (loop4): bogus number of reserved sectors [ 551.353013][T24395] FAT-fs (loop4): Can't find a valid FAT filesystem [ 551.431048][T24404] FAT-fs (loop1): bogus number of reserved sectors [ 551.437745][T24404] FAT-fs (loop1): Can't find a valid FAT filesystem 16:35:05 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x524e, 0x2000000) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000100)=""/175, 0x40}, {&(0x7f00000001c0)=""/178, 0x481}, {&(0x7f0000000640)=""/248, 0xfffffdc3}, {&(0x7f00000003c0)=""/50, 0x32}], 0x130) 16:35:05 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:35:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x9, 0x4000) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000005c0)='tls\x00', 0x4) syz_mount_image$minix(&(0x7f0000000200)='minix\x00', &(0x7f0000000240)='./file0\x00', 0x5, 0x2, &(0x7f0000000480)=[{&(0x7f00000002c0)="377e5b057a70b3e1957a76f66b531fc2f73510282015c71c18bb8ea2038679c6b9365174dc6f276cd7c697", 0x2b, 0x8}, {&(0x7f0000000400)="1dc144b8d9b2e293ac6409061d4bce5332ff010deab6b2bc5d6809fd7a00c32bc0b5c9e28fca3627194fddf631d734c61a98bb3363205b39a6f75037b48d80ea0f2b712b9424029ec9f81f521777af67a504c9118e126d8cc594d8ef6606a6389e3f3be1fdfede87af", 0x69, 0x3}], 0x40000, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, &(0x7f0000000600)={0x7, 0x4}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x80000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000004c0)=ANY=[@ANYBLOB="0600008a0c22b11a492300979cb4cb6f6812f1ecb137f4cba7e878328e6ff84203b95652fba40000000000000093202c024d9bffd2890f78d4c869d65bff3a54cc159b6c08a898436eeb08992860f77445277174d4739557efaf39e3effb4c07bc3aa6ab93b8b6318de5595ff0", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000300)=0x1c) fcntl$setsig(r0, 0xa, 0x39) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000340)={r3, @in={{0x2, 0x4e24, @remote}}}, 0x84) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x2) ioctl$KDADDIO(r2, 0x4b34, 0x40) r4 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x10001, 0x10000) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f00000000c0)={0x4, 0x1, 0x0, 0x0, 0xffff, 0x80000001, 0x5, 0x101, 0x9, 0x999, 0x7, 0x200000000, 0x0, 0x4, 0x3, 0x293, 0x9, 0x7, 0x3}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f00000001c0)={0x3, 0x2000}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x9}, {0x0, 0x8000000000}, 0x8, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 16:35:05 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:05 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:05 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001ec, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) [ 551.946474][T24414] FAT-fs (loop4): bogus number of reserved sectors [ 551.959362][T24414] FAT-fs (loop4): Can't find a valid FAT filesystem [ 551.982806][T24418] FAT-fs (loop1): bogus number of reserved sectors [ 552.000536][T24418] FAT-fs (loop1): Can't find a valid FAT filesystem 16:35:05 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:35:05 executing program 3: syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/bnep\x00') ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x6}, {0xfffffffffffffffa, 0x8001}, 0xffff, 0x1, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000300)={0xf, @win={{0x18b, 0x1, 0x1}, 0x5700325682d7505f, 0x6, &(0x7f0000000240)={{0x7, 0xf96a, 0x80000001, 0x1}, &(0x7f0000000140)={{0xfffffffffffffffb, 0x2, 0x2, 0x400}}}, 0x81, &(0x7f0000000280)="8145ec3baf9683a4dda5173c2118ba6d14794a04a16f2ce19085fb4d51f8c6a725256c301d2005dcbe24a2f613be350515692a913026bb6bcb7bcd24a518617cabbaf9d857b3183111e2d5511e83a7bf87591484be7e16e46c44ae1a826e9ff402c4b9b7fbd4a70c596e9c49f927bad0a7bf7ae37a", 0x8000}}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x55, 0x8, 0x5, {0xcc, 0xfff}, {0x1adb, 0x8}, @rumble={0x2, 0x40}}) 16:35:05 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001ed, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) [ 552.118783][T24414] FAT-fs (loop4): bogus number of reserved sectors [ 552.131687][T24428] FAT-fs (loop1): bogus number of reserved sectors [ 552.135697][T24414] FAT-fs (loop4): Can't find a valid FAT filesystem [ 552.148559][T24428] FAT-fs (loop1): Can't find a valid FAT filesystem 16:35:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x7f}, {}, 0x8}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000000)=0x4) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000000c0)="a30d63d50897cffd981ae464593206163bf65fccf72bc046c55d1ee63b473d0e305e0dfff791c2cd6ee3d43830560073d5a62e3000d88840a40c6a4807c72a0c1f56cacada5b234f4693e9ca3bb37047c118b02c165ee4fd513bb7f039470e16d8b8c0baf319cdbf99bac078db4a6db88fd91b91a307df3013b7f94de89994144e89190ffe9695", 0x87) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000002c0)={0x0, 0x71, "1e62453eb50ada9e0ebd9a310faee707bfd2961fc54c663ca858d1d0b26bd0a270b2004734e10b9c2b59e38819d38c7c8f45926de506c98e36bb5d0a252217da62ba65e2721ae45ad1c68a3ff47fa7bc0bd55eff1e1472b9641c4ada30744552234c87a321fddce45833d065721f5c4d64"}, &(0x7f0000000240)=0x79) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000340)={0x1, 0x1f, 0x8002, 0x80, 0xbd65, 0x2, 0x0, 0x1, 0x0}, &(0x7f0000000380)=0x20) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000003c0)={r2, 0x400, 0x47b, 0x2, 0x8000, 0x0, 0x2, 0x3, {r3, @in6={{0xa, 0x4e21, 0x0, @mcast2, 0x7fffffff}}, 0xffffffffffff7fff, 0x3, 0x7fff, 0x6, 0x1000}}, &(0x7f0000000480)=0xb0) perf_event_open(&(0x7f00000001c0)={0x7, 0x70, 0x9, 0x2, 0x6, 0x5, 0x0, 0x7f31, 0x1009, 0x2, 0x4, 0x8001, 0x3, 0xeb1a, 0x40, 0x0, 0x40, 0x59, 0xfff, 0x4, 0x401, 0x0, 0xfff, 0x5, 0x8001, 0x8399, 0x9, 0x3ff, 0x7, 0x5, 0x0, 0x2, 0x4, 0x10b, 0x7f, 0x9, 0x7, 0x5, 0x0, 0xfc48, 0x0, @perf_config_ext={0x1, 0x4}, 0x4001, 0x7, 0x7, 0x0, 0xffffffff7fffffff, 0x101, 0x8001}, 0xffffffffffffffff, 0x2, r1, 0x2) 16:35:05 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:05 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) [ 552.372037][T24440] FAT-fs (loop4): bogus number of reserved sectors [ 552.398038][T24440] FAT-fs (loop4): Can't find a valid FAT filesystem [ 552.489101][T24440] FAT-fs (loop4): bogus number of reserved sectors [ 552.496536][T24440] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:06 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xdaa9, 0x12100) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000080)=0x1) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="c248f309bb9d3c212177f8731ab996ab", 0x10) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) readv(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000300)=""/175, 0xaf}, {&(0x7f0000000480)=""/178, 0xb2}, {&(0x7f0000000640)=""/248, 0xf8}, {&(0x7f00000003c0)=""/50, 0x32}], 0x10000000000000fe) 16:35:06 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0xea48, 0x20000) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x3}, {}, 0x8}) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r1 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000140)={0x3ff, 0x9}) recvmsg(r1, &(0x7f00000003c0)={&(0x7f0000000200)=@un=@abs, 0x80, &(0x7f0000000380)=[{&(0x7f0000000280)=""/206, 0xce}], 0x1}, 0x40000001) fanotify_mark(r1, 0x20, 0x40000000, r1, &(0x7f00000001c0)='./file0\x00') r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7fff80000000, 0x20000) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x9, 0x2, 0xb000}, 0x4) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 16:35:06 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001ee, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:35:06 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:35:06 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) [ 553.005652][T24457] FAT-fs (loop4): bogus number of reserved sectors 16:35:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x2000, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x2000) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0)) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$SIOCRSGCAUSE(r1, 0x89e0, &(0x7f0000000200)) sendto$rxrpc(r2, &(0x7f0000000180)="0f90a1b98f65f3d7", 0x8, 0x0, &(0x7f00000001c0)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x511, @mcast1, 0x3}}, 0x24) 16:35:06 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) [ 553.049653][T24459] FAT-fs (loop1): bogus number of reserved sectors [ 553.059044][T24457] FAT-fs (loop4): Can't find a valid FAT filesystem [ 553.076069][T24459] FAT-fs (loop1): Can't find a valid FAT filesystem 16:35:06 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x2000) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000300)=""/175, 0xaf}, {&(0x7f0000000480)=""/178, 0xb2}, {&(0x7f0000000640)=""/248, 0xf8}, {&(0x7f00000003c0)=""/50, 0x32}], 0x4) 16:35:06 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:06 executing program 3: syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000002c0)=0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/snmp6\x00') perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x8, 0x0, 0x7, 0x62a, 0x0, 0x0, 0x0, 0x2, 0xed6e, 0x7fffffff, 0x3ff, 0x0, 0x0, 0x62000000000000, 0x1, 0x8, 0x8, 0x3ff, 0x2, 0x2, 0x36, 0x8001, 0x27, 0x8, 0xfff, 0x9, 0x5, 0xc140, 0x80000001, 0x3, 0x4, 0x4, 0x0, 0x80000001, 0x1, 0x1, 0x0, 0x7, 0x3, @perf_bp={&(0x7f0000000200), 0x1}, 0x20, 0xffffffffffff0001, 0x100000001, 0x6, 0x6, 0xb7, 0x1}, r0, 0x9, r1, 0x1) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x0, 0x414002) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000140)=0x5, &(0x7f00000001c0)=0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f00000000c0)={{0x9, 0x10001}, {0x4, 0x1}, 0x37518bf0, 0x2, 0x8}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) [ 553.210219][T24473] FAT-fs (loop1): bogus number of reserved sectors [ 553.242374][T24473] FAT-fs (loop1): Can't find a valid FAT filesystem 16:35:06 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:35:06 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8, 0x0, 0x6}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x8000, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000000c0)={[0x40, 0x4, 0xffff, 0x1, 0x1, 0x4, 0x81, 0x8, 0x3, 0x3f, 0x800, 0x0, 0x6, 0x8, 0x100000001, 0x10001], 0x10000, 0x40}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 16:35:06 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001ef, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) [ 553.358698][T24482] FAT-fs (loop4): bogus number of reserved sectors [ 553.383675][T24482] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:06 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:35:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x80, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000100)=0xe8) r3 = getgid() fchownat(r1, &(0x7f00000000c0)='./file0\x00', r2, r3, 0x1800) [ 553.444508][T24482] FAT-fs (loop4): bogus number of reserved sectors [ 553.460834][T24482] FAT-fs (loop4): Can't find a valid FAT filesystem [ 553.479897][T24487] FAT-fs (loop1): bogus number of reserved sectors [ 553.504570][T24487] FAT-fs (loop1): Can't find a valid FAT filesystem 16:35:06 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:06 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x101000, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000001c0)="fb0b466dff9e249e9337c404a5152ec5673f3d2a06209e0777951ac71426cb87b2ca1732817539cc79fef86ce946bd1f7c5f378b5795ad5e9548eaaac14d620a8865ad24b635c51484a23da1ed02ef533bc232079b8d5d66ffcb4dbf770b22a0be"}, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfffffffffffffffd, 0x80) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f00000000c0)=0x400) [ 553.621852][T24499] FAT-fs (loop1): bogus number of reserved sectors [ 553.656604][T24499] FAT-fs (loop1): Can't find a valid FAT filesystem 16:35:07 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) [ 553.679930][T24503] FAT-fs (loop4): bogus number of reserved sectors [ 553.700322][T24503] FAT-fs (loop4): Can't find a valid FAT filesystem [ 553.790845][T24503] FAT-fs (loop4): bogus number of reserved sectors [ 553.806772][T24503] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x2000) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 16:35:07 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:07 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) r1 = inotify_add_watch(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x800) inotify_rm_watch(r0, r1) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f00000000c0)) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) readv(r2, &(0x7f0000000740)=[{&(0x7f0000000300)=""/175, 0xaf}, {&(0x7f0000000480)=""/178, 0xb2}, {&(0x7f0000000640)=""/248, 0xf8}, {&(0x7f00000003c0)=""/50, 0x32}], 0x4) 16:35:07 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:07 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001f0, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:35:07 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:35:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x10000, 0x0) getpeername$llc(r1, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000002c0)=0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000640)={0x10, 0x30, 0xfa00, {&(0x7f0000000100), 0x0, {0xa, 0x4e22, 0x0, @local, 0x804}, r2}}, 0x38) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x1, 0x0) ioctl$BLKFRASET(r3, 0x1264, &(0x7f00000000c0)=0x7abd1ae2) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000003c0)={{{@in, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@dev}}, &(0x7f00000004c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000500)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in=@empty}}, &(0x7f0000000600)=0xe8) mount$9p_rdma(&(0x7f0000000300)='127.0.0.1\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x82000, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e21,euid<', @ANYRESDEC=r4, @ANYBLOB="2c9a33de90b9e341e5364b052dcfbaafffc91768fdefe3f4650d070000", @ANYRESDEC=r5, @ANYBLOB=',smackfstransmute=,obj_role=/proc/capi/capi20\x00,\x00']) [ 554.230483][T24523] FAT-fs (loop4): bogus number of reserved sectors [ 554.256496][T24523] FAT-fs (loop4): Can't find a valid FAT filesystem [ 554.259288][T24520] FAT-fs (loop1): bogus number of reserved sectors 16:35:07 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0x80000000005, r5, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r4, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) [ 554.296462][T24520] FAT-fs (loop1): Can't find a valid FAT filesystem 16:35:07 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\xff', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) [ 554.400942][T24535] FAT-fs (loop1): bogus number of reserved sectors [ 554.417358][T24535] FAT-fs (loop1): Can't find a valid FAT filesystem 16:35:07 executing program 3: epoll_create1(0x80000) r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 16:35:07 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001f1, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:35:07 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0x80000000005, r5, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r4, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) 16:35:07 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:07 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000100)) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000140)={'b4Y\xe7w\xbb\x06\x00\x00\x00\x00\x00\x00\x00\xf8\xc2', 0x8}) ioctl(r2, 0xffffffffffffffb2, &(0x7f0000000040)) [ 554.755261][T24555] FAT-fs (loop1): bogus number of reserved sectors [ 554.779649][T24555] FAT-fs (loop1): Can't find a valid FAT filesystem [ 554.838908][T24559] FAT-fs (loop1): bogus number of reserved sectors [ 554.846250][T24559] FAT-fs (loop1): Can't find a valid FAT filesystem 16:35:08 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x7, 0x4000) ioctl$NBD_DO_IT(r1, 0xab03) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x3, 0x4000) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000300)=""/175, 0xaf}, {&(0x7f0000000480)=""/178, 0xb2}, {&(0x7f0000000640)=""/248, 0xf8}, {&(0x7f00000003c0)=""/50, 0x32}], 0x4) 16:35:08 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0x80000000005, r5, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r4, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) 16:35:08 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:08 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001f2, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:35:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x400, 0x400000) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 16:35:08 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) [ 555.237307][T24569] FAT-fs (loop1): bogus number of reserved sectors [ 555.249704][T24570] FAT-fs (loop4): bogus number of reserved sectors 16:35:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x9, 0x23ffc) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x16902, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x400200, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000300)="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") 16:35:08 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r3, &(0x7f0000000340)={0x2c, 0x80000000005, r5, 0x4}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r4, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) [ 555.288274][T24569] FAT-fs (loop1): Can't find a valid FAT filesystem [ 555.302934][T24570] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:08 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x8ca, 0x440) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x8, &(0x7f00000000c0)=[{0x4, 0x6, 0x3, 0x6}, {0x100, 0x8, 0x7, 0x800}, {0x2, 0xff, 0x7, 0x8}, {0x5, 0x5, 0x3b6, 0x2}, {0x800080000000, 0x7, 0x0, 0x8}, {0xfffffffffffffffc, 0x7ff, 0x20, 0x5}, {0x3, 0x4b39, 0x2, 0x7fff}, {0x7ff, 0x3, 0x0, 0x6}]}) r1 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) [ 555.422809][T24582] FAT-fs (loop1): bogus number of reserved sectors [ 555.440149][T24582] FAT-fs (loop1): Can't find a valid FAT filesystem [ 555.440550][T24570] FAT-fs (loop4): bogus number of reserved sectors [ 555.453948][T24570] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:08 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\xff', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:08 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r3, &(0x7f0000000340)={0x2c, 0x80000000005, r5, 0x4}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r4, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) 16:35:08 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) [ 555.689378][T24596] FAT-fs (loop4): bogus number of reserved sectors [ 555.709115][T24596] FAT-fs (loop4): Can't find a valid FAT filesystem [ 555.824343][T24596] FAT-fs (loop4): bogus number of reserved sectors [ 555.831258][T24596] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:09 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000300)=""/175, 0xaf}, {&(0x7f0000000480)=""/178, 0xb2}, {&(0x7f0000000640)=""/248, 0xf8}, {&(0x7f00000003c0)=""/50, 0x32}], 0x4) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000080)={0x5, 0x4, 0xbb, 0x56225996, 0xfff}) 16:35:09 executing program 3: syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x1, 0x2) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x3, 0x40) ioctl(r0, 0xffffffffffffffb2, &(0x7f00000000c0)) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f00000000c0)) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x80000001, 0x200000) 16:35:09 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r3, &(0x7f0000000340)={0x2c, 0x80000000005, r5, 0x4}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r4, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) 16:35:09 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001f3, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:35:09 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:09 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:09 executing program 3: r0 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x8000, 0x0) accept$alg(r1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) [ 556.282596][T24614] FAT-fs (loop4): bogus number of reserved sectors [ 556.302947][T24614] FAT-fs (loop4): Can't find a valid FAT filesystem [ 556.314924][T24615] FAT-fs (loop1): bogus number of reserved sectors 16:35:09 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) [ 556.333098][T24615] FAT-fs (loop1): Can't find a valid FAT filesystem [ 556.425683][T24614] FAT-fs (loop4): bogus number of reserved sectors [ 556.444757][T24628] FAT-fs (loop1): bogus number of reserved sectors [ 556.447852][T24614] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{}, {0x0}]}) r2 = open(&(0x7f0000000240)='./file0\x00', 0x6000, 0x0) ioctl$SIOCX25GSUBSCRIP(r2, 0x89e0, &(0x7f0000000280)={'nr0\x00', 0x8, 0x6}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000200)={r1, &(0x7f00000001c0)=""/48}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r3 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x9, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f00000000c0)) [ 556.483880][T24628] FAT-fs (loop1): Can't find a valid FAT filesystem 16:35:09 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:09 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:35:09 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) [ 556.671370][T24638] FAT-fs (loop4): bogus number of reserved sectors [ 556.692613][T24638] FAT-fs (loop4): Can't find a valid FAT filesystem [ 556.720005][T24642] FAT-fs (loop1): bogus number of reserved sectors [ 556.731426][T24642] FAT-fs (loop1): Can't find a valid FAT filesystem [ 556.764970][T24638] FAT-fs (loop4): bogus number of reserved sectors [ 556.772334][T24638] FAT-fs (loop4): Can't find a valid FAT filesystem [ 556.842557][T24645] FAT-fs (loop1): bogus number of reserved sectors [ 556.855461][T24645] FAT-fs (loop1): Can't find a valid FAT filesystem 16:35:10 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000300)=""/175, 0xaf}, {&(0x7f0000000480)=""/178, 0xb2}, {&(0x7f0000000640)=""/248, 0xf8}, {&(0x7f00000003c0)=""/50, 0x32}], 0x4) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x94) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e22, 0x40, @mcast1, 0x8}}}, &(0x7f0000000180)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x2, 0xfd2, 0x0, 0x80000000, 0x9, 0x6, 0x0, 0xe1, r2}, &(0x7f0000000200)=0x20) bind$tipc(r1, &(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e20}}, 0x10) 16:35:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x918, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 16:35:10 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001f4, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:35:10 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:35:10 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:10 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\xff', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffffffffffb2, &(0x7f00000000c0)="c47d7ff233bcf54e71df5c22328a8f85bdfd53cd4b6facba9a07b29aea0dc09a3b5371cc7c1fac0d28199d55ccca0eb2d84e16e963f60deff7703f7009959dbd4431919dcb6a732a1cb25b0c890944b3e8702224d6ec08684bbc45a3f4a9484c0db6417d1e10b324bdb1d27f6c3de9ba6be2c792afac57bfbb2b025ee28e2502b8eba96b2a0bf4b1641b67a34e432e340e9f1104f6062b1557ce8412a8d595decebf159ac0a96f5b4db1fdf2661f2b2b69d075") 16:35:10 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r3, &(0x7f0000000340)={0x2c, 0x80000000005, r5, 0x4, r2}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r4, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) [ 557.312591][T24658] FAT-fs (loop4): bogus number of reserved sectors [ 557.340281][T24658] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x200000, 0x0) bind$ax25(r1, &(0x7f00000000c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 16:35:10 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001f5, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:35:10 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\xff', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) [ 557.484896][T24658] FAT-fs (loop4): bogus number of reserved sectors [ 557.492145][T24658] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:10 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) [ 557.687128][T24685] FAT-fs (loop4): bogus number of reserved sectors [ 557.712427][T24685] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:11 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000300)=""/175, 0xaf}, {&(0x7f0000000480)=""/178, 0xb2}, {&(0x7f0000000640)=""/248, 0xf8}, {&(0x7f00000003c0)=""/50, 0x32}], 0x4) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x40, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000080)=0x9, 0x4) 16:35:11 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r3, &(0x7f0000000340)={0x2c, 0x80000000005, r5, 0x4, r2}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r4, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) 16:35:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x20002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x7, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x7}, {0xa, 0x4e20, 0x2, @mcast1, 0x9}, r2, 0x60a17c34}}, 0x48) socketpair(0x1, 0x4, 0xbfa2, &(0x7f0000000000)) 16:35:11 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:11 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001f6, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:35:11 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\xff', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r1 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000140)={'hsr0\x00', {0x2, 0x9, @local}}) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000001c0)=ANY=[@ANYBLOB="1f000000000000001d0000000000000004000000070000000900000000000000db070000000000001f000000000000000900000000000000000000000000000000000000000000000200000000000000000000000000000001000000000000000b0d000000000000070000000000000000000000000000000000000000000000020100000000000000000000000000000400000000000000000f00000000000006000000000000000000000000000000000000000000000004000000000000000000000000000000050000000000000008000000000000000300000000000000000000000000000000000000000000000200000000000000000000000000000009000000000000000600000000000000ff00000000000000000000000000000000000000000000000400000000000000000000000000000000020000000000002200000000000000f00e000000000000000000000000000000000000000000000025000000000000000000000000000002000000000000000400000000000000030000000000000000000000000000000000000000000000052200000000000000000000000000002ec4000000000000000000001800000007000000000000000000000000000000000000000000000000100000000000000000000000000000ff0f000000000000090000000000000030d60000000000000000000000000000000000000000000008000000000000000000000000000000"]) r2 = socket$netlink(0x10, 0x3, 0x8) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x80000, 0x0) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x20000, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) 16:35:11 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r3, &(0x7f0000000340)={0x2c, 0x80000000005, r5, 0x4, r2}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r4, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) [ 558.324034][T24698] FAT-fs (loop1): bogus number of reserved sectors [ 558.342920][T24698] FAT-fs (loop1): Can't find a valid FAT filesystem 16:35:11 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001f7, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) [ 558.395546][ T26] audit: type=1400 audit(1552754111.682:82): avc: denied { create } for pid=24714 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_iscsi_socket permissive=1 16:35:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {0x0, 0x8}, 0x8}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 16:35:11 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\xff', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) [ 558.443997][ T26] audit: type=1400 audit(1552754111.682:83): avc: denied { setopt } for pid=24714 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_iscsi_socket permissive=1 16:35:11 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) [ 558.699525][T24730] FAT-fs (loop4): bogus number of reserved sectors [ 558.706073][T24730] FAT-fs (loop4): Can't find a valid FAT filesystem [ 558.814012][T24730] FAT-fs (loop4): bogus number of reserved sectors [ 558.829288][T24730] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:12 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000080)={0x1, 0x62}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) readv(r1, &(0x7f0000000740)=[{&(0x7f0000000300)=""/175, 0xaf}, {&(0x7f0000000480)=""/178, 0xb2}, {&(0x7f0000000640)=""/248, 0xf8}, {&(0x7f00000003c0)=""/50, 0x32}], 0x4) 16:35:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 16:35:12 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:35:12 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001f8, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:35:12 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\xff', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:12 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) [ 559.270263][T24747] FAT-fs (loop4): bogus number of reserved sectors 16:35:12 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xffffffffffffffff, 0x642082) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x4000) r1 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x518, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl(r1, 0xffffffffffffffb2, &(0x7f00000001c0)="e2bbf3dc60380068c4c51848c614290cfcd2647f9ba5397422c1ab1522a47971d33aa019f0e4bc31b18375d6150ec98b0d3deda60d433fdecac398cbceeb276a367194d45ce9a0c33758e178eadda90f24acb00cc3fb13d9a10389e5b8eeba6e09a654df10299bcaede6ce04cc9be1e46cd16dc68e19a21629c2214757b201dec0e2c06b0885daca0252695273b0483058e93efd13965b5317cec7d0c26659e766ba4950a9a0e0a8160269c25ab50f9ec066e7858efd003ae6d915e19cd980aef24beae23c6eb4b33de3938634db5f1b06") 16:35:12 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) [ 559.323378][T24747] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000100)) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000240)={{0x6, 0x1, 0x2, 0x6}, 'syz0\x00', 0x36}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'rose0\x00', 0x0}) bind$xdp(r1, &(0x7f00000005c0)={0x2c, 0x4, r2, 0x29, r1}, 0x10) getdents(r1, &(0x7f00000001c0)=""/97, 0x61) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f00000000c0)=r1) 16:35:12 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001f9, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:35:12 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) [ 559.451708][T24747] FAT-fs (loop4): bogus number of reserved sectors [ 559.465624][T24747] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:12 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) [ 559.586392][T24771] FAT-fs (loop1): bogus number of reserved sectors [ 559.600827][T24771] FAT-fs (loop1): Can't find a valid FAT filesystem [ 559.703631][T24778] FAT-fs (loop1): bogus number of reserved sectors [ 559.736661][T24778] FAT-fs (loop1): Can't find a valid FAT filesystem 16:35:13 executing program 0: syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x418000) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000300)=""/175, 0xaf}, {&(0x7f0000000480)=""/178, 0xb2}, {&(0x7f0000000640)=""/248, 0xf8}, {&(0x7f00000003c0)=""/50, 0x32}], 0x4) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x80000, 0x0) 16:35:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0x1, &(0x7f0000000040)) 16:35:13 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:13 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001fa, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:35:13 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:35:13 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\xff', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) [ 560.294143][T24784] FAT-fs (loop4): bogus number of reserved sectors [ 560.310020][T24784] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:13 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0xf2657c2291853e76, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000200)=""/74) r1 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000280)={0x2, 0x8}) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0xffffffffffffffff, 0x30201) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f00000000c0), 0x4) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'icmp\x00'}, &(0x7f0000000140)=0x1e) 16:35:13 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) [ 560.443268][T24784] FAT-fs (loop4): bogus number of reserved sectors [ 560.474218][T24784] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x6a062887, 0x900) bind$pptp(r1, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 16:35:13 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001fb, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:35:13 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:13 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) [ 560.709781][T24819] FAT-fs (loop1): bogus number of reserved sectors [ 560.745368][T24819] FAT-fs (loop1): Can't find a valid FAT filesystem [ 560.828906][T24823] FAT-fs (loop1): bogus number of reserved sectors [ 560.841947][T24823] FAT-fs (loop1): Can't find a valid FAT filesystem 16:35:14 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000300)=""/175, 0xaf}, {&(0x7f0000000480)=""/178, 0xb2}, {&(0x7f0000000640)=""/248, 0xf8}, {&(0x7f00000003c0)=""/50, 0x32}], 0x4) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x6, 0x109740) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e22, 0x0, @empty, 0x10000000000}, {0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xdb}, 0x3c006387, [0x3b, 0x10000, 0x5, 0x7, 0x1, 0x8, 0x200, 0x9768]}, 0x5c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000100)={{0x2, 0x2}, 'port1\x00', 0xa1, 0x8, 0x2a7f, 0xfffffffffffffffd, 0x4, 0x1000, 0x0, 0x0, 0x4, 0x8000}) r2 = dup(r1) ioctl$KVM_PPC_GET_PVINFO(r2, 0x4080aea1, &(0x7f00000001c0)=""/145) 16:35:14 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x800000, 0xfffffffffffffffc) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x40002, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0x0, @time, 0x6f8489a7, {0x2, 0x1175}, 0xffffffff, 0x3, 0xffffffffffffffb7}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) fcntl$getown(r0, 0x9) 16:35:14 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') recvmsg(r0, &(0x7f0000000380)={&(0x7f0000000000)=@l2, 0x80, &(0x7f0000000240)=[{&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000000c0)=""/110, 0x6e}, {&(0x7f0000000140)=""/119, 0x77}], 0x3, &(0x7f0000000280)=""/212, 0x9f}, 0x40) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r2 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x653aed700761b981) r3 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x7, 0x111000) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000c80)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, r1, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000580)={0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r3, &(0x7f0000000340)={0x2c, 0x80000000005, r5, 0x4, r2}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r4, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) 16:35:14 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001fc, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:35:14 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\xff', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x6, 0x454041) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00000000c0)={0x3, 0x8001, 0x3, 'queue0\x00', 0xdba2}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) [ 561.442083][T24828] FAT-fs (loop4): bogus number of reserved sectors [ 561.479753][T24828] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:14 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') recvmsg(r0, &(0x7f0000000380)={&(0x7f0000000000)=@l2, 0x80, &(0x7f0000000240)=[{&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000000c0)=""/110, 0x6e}, {&(0x7f0000000140)=""/119, 0x77}], 0x3, &(0x7f0000000280)=""/212, 0x9f}, 0x40) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r2 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x653aed700761b981) r3 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x7, 0x111000) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000c80)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, r1, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000580)={0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r3, &(0x7f0000000340)={0x2c, 0x80000000005, r5, 0x4, r2}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r4, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) 16:35:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000000c0)=ANY=[@ANYBLOB="0400000000000000050000000000000006000000080000000200000000000000010000000000000007000000000000007c0000000000000000000000000000000000000000000000050400000000000000000000000000000400000000000000060000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000"]) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x40000, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f00000001c0)=0x3) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 16:35:14 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) [ 561.639966][T24828] FAT-fs (loop4): bogus number of reserved sectors [ 561.646507][T24828] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:15 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:15 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') recvmsg(r0, &(0x7f0000000380)={&(0x7f0000000000)=@l2, 0x80, &(0x7f0000000240)=[{&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000000c0)=""/110, 0x6e}, {&(0x7f0000000140)=""/119, 0x77}], 0x3, &(0x7f0000000280)=""/212, 0x9f}, 0x40) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r2 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x653aed700761b981) r3 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x7, 0x111000) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000c80)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000940)=ANY=[@ANYBLOB="14050001000000830000006316601cf2864349eaff0002f2ddffffffddc94dc512cb51184c6c38a87866535f2c10ea79c60782b60e19da7316d4e2a4978b22129c6b8b5584c2fffbffffffffffff3906000000a50000000000d061000000000004a60107c422387f01a78570244af5cb288ebd975d530baebf773b9e107c66d376d03cdd3ff57331e29e9023367371508971b072e509fca44df45ebe199ff813e2b83d63795df2fbbbf7a90100000000000000390dcba068f0e2f04ed7c3e0da10af8b998c0bc1b2fb70762419f3a676966de10b8998de9b517f978d1ecd0319d1d5e2ee90cbf8d2e801c78ef4c87cafc8954c30af6eb4b81a75c9e29c7f050bd7c97b43199682f09fd12dd9539f0eeb163b8fdb88f5ca311dab5e460bb0c82ea380660067a12ad9e36a478bef647bf958a55ce8b30185952b58391da6cb8ef2326aed17b30d79bbe08b1781b16ae5bfeb82480d44b5fa2eb710e370226f5108c1f29675339e3c0a59a9588639ee1f359c3fc1554233a1bb78dbbcfccbc637a4bd964d26b614397e7bfb624801085ff9677274c09f4cab88cb552c5130fafeb16b9c4ce52787402dfedd6836c4c19e4ee34eb3117637f53fbe14f867ab0cc6e53371bc0e7d826da559b42ddeaffc42d7b26b3ff54aafee5e0f5ee83f55a0fa49bef5c9b59d6f2d650b74a615686a72030000000000005b00000000000079150f499ca43b18caf6099cfc9c45fabd65350a41e7e25a4c1419706a7323738b8ac5ad062857e9dc4c393eb240a5610e00000000000000000000000000000000008d431a9d27db75200bb0071a9ca7b841c0dc250400325c3d20941457a887548b239791fbbcf6600bd1f2307724644a5c260d8d7b"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, r1, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000580)={0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r3, &(0x7f0000000340)={0x2c, 0x80000000005, r5, 0x4, r2}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r4, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) [ 561.771955][T24853] FAT-fs (loop1): bogus number of reserved sectors [ 561.791126][T24853] FAT-fs (loop1): Can't find a valid FAT filesystem [ 561.891836][T24863] FAT-fs (loop1): bogus number of reserved sectors [ 561.899846][T24861] FAT-fs (loop4): bogus number of reserved sectors [ 561.906092][T24863] FAT-fs (loop1): Can't find a valid FAT filesystem [ 561.913473][T24861] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:15 executing program 0: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x142) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000780)={0xa, 0x0, [{0x8000000f, 0x4, 0x7, 0x5, 0x2, 0x5, 0x8000000000000000}, {0x0, 0x7f, 0x7, 0x2, 0x0, 0x8, 0x10000}, {0x80000001, 0x5, 0x1, 0x4, 0xb18a, 0x5, 0x6}, {0xc000000f, 0x0, 0x0, 0x80000000, 0x5, 0xa100000000000000, 0x7}, {0x2, 0x5, 0x2, 0x6, 0x9, 0xffffffff00000000, 0x7}, {0x80000001, 0x9, 0x4, 0xfff, 0x9, 0x400}, {0x40000007, 0x8000, 0x1, 0x6, 0xbaf, 0x8, 0x100000001}, {0x0, 0x3, 0x4, 0x8, 0x200, 0x6, 0x40a}, {0x40000001, 0x5, 0x2, 0x0, 0x40, 0x1}, {0x80000007, 0xdb46, 0x0, 0x6, 0x400, 0x7ff, 0x3}]}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f00000000c0)=""/158) readv(r1, &(0x7f0000000740)=[{&(0x7f0000000300)=""/175, 0xaf}, {&(0x7f0000000480)=""/178, 0xb2}, {&(0x7f0000000640)=""/248, 0xf8}, {&(0x7f00000003c0)=""/50, 0x32}], 0x4) r2 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x40, 0x800) utimensat(r2, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{0x0, 0x7530}, {0x77359400}}, 0x0) recvfrom$rxrpc(r1, &(0x7f0000000040)=""/41, 0x29, 0x2001, &(0x7f0000000080)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x100000000, @dev={0xfe, 0x80, [], 0xc}, 0x4}}, 0x24) 16:35:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) flock(r0, 0x2) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x4, 0x141400) 16:35:15 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001fd, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:35:15 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r3, &(0x7f0000000340)={0x2c, 0x80000000005, r5, 0x4, r2}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r4, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) 16:35:15 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\xff', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:15 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) [ 562.466442][T24874] FAT-fs (loop4): bogus number of reserved sectors 16:35:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x28d23061, 0x200081) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x1cbf}, {0x0, 0x80000}, 0x200008, 0x7}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) [ 562.517404][T24874] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:15 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r3, &(0x7f0000000340)={0x2c, 0x80000000005, r5, 0x4, r2}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r4, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) 16:35:16 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) [ 562.691306][T24874] FAT-fs (loop4): bogus number of reserved sectors 16:35:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000440)=0x0) r3 = geteuid() r4 = getegid() r5 = getpid() fstat(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getgid() fcntl$getownex(r0, 0x10, &(0x7f0000000780)={0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000007c0)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@initdev}}, &(0x7f00000008c0)=0xe8) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000001340)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000001380)={{{@in=@multicast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6}}, &(0x7f0000001480)=0xe8) stat(&(0x7f00000014c0)='./file0\x00', &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = fcntl$getown(r0, 0x9) lstat(&(0x7f0000001580)='./file0\x00', &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000002e40)=0x0) getresuid(&(0x7f0000002e80)=0x0, &(0x7f0000002ec0), &(0x7f0000002f00)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000002f40)={0x0, 0x0, 0x0}, &(0x7f0000002f80)=0xc) r20 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000002fc0)=0x0) r22 = geteuid() stat(&(0x7f0000003000)='./file0\x00', &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000005b00)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f0000005c00)=0xe8) fstat(r0, &(0x7f0000005c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r27 = gettid() r28 = geteuid() getgroups(0x5, &(0x7f0000005cc0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xee00, 0x0]) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000005d00)={0x0}, &(0x7f0000005d40)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005d80)={{{@in6=@ipv4={[], [], @dev}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@initdev}}, &(0x7f0000005e80)=0xe8) getgroups(0x5, &(0x7f0000005ec0)=[0xee00, 0xee01, 0xee00, 0x0, 0xffffffffffffffff]) r33 = geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000005f00)={0x0, 0x0, 0x0}, &(0x7f0000005f40)=0xc) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000005f80)=0x0) r36 = geteuid() fstat(r0, &(0x7f0000005fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r38 = fcntl$getown(r0, 0x9) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000006040)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000006140)=0xe8) lstat(&(0x7f0000006180)='./file0\x00', &(0x7f00000061c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f00000063c0)=[{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f00000001c0)="f6f893d8da914c9ea68c4e58b678ee05ee7fc5b60b8af7c8f0a328a29ce4fd02f0fb3e24cd22032ef0b6134e139ae71363389ac86cac9302d0ff8b9bd07bec6aaa487fc765b623c488c5cc1f7a4ce3d8bba9ee1c39c092c53fbed3c4707605de5c44ba353fcd0df22adbf63710bf204397235bf662f12d3f1348c8b94791f183ebe983f90d1a31de", 0x88}, {&(0x7f0000000280)="13d2a1f7cf710c3874c260a0436f1c82a734517cb684a46d5f6847b337c443afa68a0a4951a2db9c91b61a4bb1623322e7d98ae156aa6d43f8a9c2f44379a917bc3608cd0ecb5dd0fd9691c0e6239ea6f352e6c9989fb45f889d48258fd14fe840bca1f9b2c6d87446efe3c96985f3cd51e72ea8c4124bd877", 0x79}, {&(0x7f0000000300)="fd23c3070842265d38ed3f396bacf9c615589218671ed47f69a533680a8a4452dad94e623aa86353145d2c82be293c67fd084f2671a8786490db184a773f241e31e7c3c8377ca94d7eef7752c1e1ce38f0daaf1b8ad647c2f46e3acc3a9b2790d428d5d253bb4a8da73aa6c24501ddc372485600ae6757d913e42f35d15ca6c787056c0e1e925ed0f2eb1d6cd04af9992706ff60e39c545bf7a4e0de6914c17d070d5c0cb799fe5dae1054697acaaac64531c1b658c27338d6ac7df648016f3b0d45064d8dab5a8ffa9b3b2aeaf06db45f1f8e872f9be4", 0xd7}, {&(0x7f0000000140)="d79ee8e4790cc360eab479f75af184f9cfa54e64da4b58c587364af7da0153f85a737b19d0035b09f3bab2b65a5090cd5fb4b003b98a5d415d34dee4da45", 0x3e}], 0x4, &(0x7f0000000500)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @rights={0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r0, r0]}], 0xb0}, {&(0x7f00000005c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000640)="a379ca8f67040bb3285ca414484e6a3c4c7ff7a27defa997869008df9a7fc97a3b6ae4d2876dbd21ecd31edb30802c17a092fc1829a687bcc5e0217d2d9edcbaf2ca8aa848d89df02128f8c618e2b7d0fa077459392fae4f550ec0941f9cde7ae41e353704224b196099a15ad092b4cf94764c604985bc7cdfe292e8cb", 0x7d}, {&(0x7f00000006c0)="29662f0e951712109c742ec154412ba32f95ec2a956481658f2bdb933c98b1fbfe10585d73f8fd0307591a6be6b2e9110899196ef0cb01ef00b52ed0cb4c7cee9da9d75b865ec33f300046615343dda47dc74085a5b2ff3ef596c137c0e3c1fd2bd0021506456cf265a4e5929e608c1f82b0eefc2519", 0x76}], 0x2, &(0x7f00000009c0)=[@cred={0x20, 0x1, 0x2, r8, r9, r10}, @rights={0x18, 0x1, 0x1, [r0]}], 0x38, 0x80}, {&(0x7f0000000a00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000010c0)=[{&(0x7f0000000a80)="2cc6a0bf5e97d1085ef522f3749a516dcd983fb97baf929834ddc8bb451760b40f8c860b4ae64622d6601ef1f69bff2fd9d0ff01b7b4bb642c52f3f08fca9850ef7f319d495219c07d3eae2c8a58af72e06122c68cc9d8ec9a2be6292120cb92e1fab85c5d44d152cdf0358d18d72125ddee99d172c76cdcb986eecc934c3728fa48cb28581d918f88b54f453a", 0x8d}, {&(0x7f0000000b40)="81fee7fd8e62dab42f252abdd175be43f73c35d2b689c6674b3e3b5596d5fef1425a56a80e0931b048779211748e5de08106ce90a3ae4f9a82ca6ce40b553b5a0ff917f17a5200f07a120af66b7840a21a77af89f885ce748dd34cb03021a540e6208984d2cb8452e10949788cd7d1b52864a7953dbe6dabc6ccd9bb2a753b41b97ef40c9edcc0dada61bb6ea4e9ce4245922b2e3bf3ff09076c961538e8912a44779191bf73", 0xa6}, {&(0x7f0000000c00)="1faf892e421af7d256c0a9993d45c343c6d1bd6acb357c2276edefbf3626379baebedb442bebac8b0907a98352aafa6ac8c9c3e314ea55", 0x37}, {&(0x7f0000000c40)="564d7e6dca19e6d3ec5e12df957e171d4820c8d52d71d823cd46776b6c60fe6b1641b8b633e959480314ce9e3507ca83a4796e456c9cfa993b33fadcee518d5448e352fdf5289f7f67f8c56aeb1bd8bfd80e9d340c448510430c729fb53ef5ffcc94aa076a05697c56f513ee55c8ffc419e17a082fc0465e86e4082118fda1d573c8298614d6e1172954aee9e6c68cd388c3c861458aa1ed0a76b7a8d3cb2faa1487a263523d652d66daad25293ddf9738d10f714f0181e4e96089c60bbd61aa99f70ace892adaf764c0e20ec81e104793a5", 0xd2}, {&(0x7f0000000d40)="38c4cc8ecf83d9112f99f3e239f48c0e48", 0x11}, {&(0x7f0000000d80)="765c586143c2364c87913e852dbea133759698b944cac3835815ebded733830fdb43c9fae1c1351d3c94a1442b38d7c9875e42b8667e18d4fddb2c027f64c9b397dec75bec919cb5695a7934719886d25cc4417e962a91106e525bdf978323bb5bfe8dbde80ae9b18cb4a5cbe55d2d983f19eb47d9b5a931a07b7aee933351a390449b99fe091d57e9253a901f54aeb67ddeba7053b0fc537bbb2e3754eb0330fca34b195433738bfc8f90d1521236aeff539f2c401c34e291f478aabd1db26199d3972ada9ac04dc2d73ce51caa4a", 0xcf}, {&(0x7f0000000e80)="07342355d1128bd200ec610c774f62a12be1826deaa2", 0x16}, {&(0x7f0000000ec0)="5b5d768b27856623f5e9a895195e2914a31a813d5865a1390276d62f31a0a79f53da2287d844b29e12df37cfd428476b19e6e82d461c43d9dd4c70f9fe76581ff24a6d48bbf86c6e0d727252f4907e7fd863dac1050ca255150f2727b112429f6fc95121337ecc5bead1da805beb909215e23073cafd4870cc889ed3146218", 0x7f}, {&(0x7f0000000f40)="614707cf4654c8e7bb603730f97fbfb1b9498baa1faf6a5ef7fec9f976a8ebc7b700981bfcb0fc9869205f0f9f5923e96757c3841c14c13ad75476c2c028cb31ee26372bd8919da6a87b56defa85b971d27a2f73693fba04fff54380c601bc2fcd60bfd43889d51fd96654f8ca41424f98003f4baa6ccf34e76eb28d9301c032c0935c5883b9298258e1b3cba5da563d75a0e0d56f4ce981bd3058e1c06f9f45078cb3100e750531", 0xa8}, {&(0x7f0000001000)="d403f9ddb9088862856adcdcf27770a1e49a966d9acbd28dcfe34f963ef609f00944e249cd42d1099e07358d1db906f8b6538fb89c30689189e5b485ae020961a69f50e83c78209890d72d9ead082607ed2a15c0d38364e9619501b5964c212c294df724f82b71224b984136891cd99dcbd13eaaf78982d1e9edd716e977ccfba526792850906a9777e3579c8d351f89ba89d4cabc7039b487c69babebcbe7c2c81da0bf4e55a98235b8967aa79059080b83c66a179e6a", 0xb7}], 0xa, 0x0, 0x0, 0x40004}, {&(0x7f0000001180)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001300)=[{&(0x7f0000001200)="3d304f7a335a6096fe4e7e1e051abf80313be96ebbca56ac36f08f00a39d0d5cf5e4de435c762c6873239f33759c8d06b69fc24d596a2cbcf8682687a8384f9ff26eac8e10e91588034044788d9eff31c389fb73e487f87a121a342ffbc4d204299928b688a040c0586a576fc1fc1e35b2d36521caf6aa39da88ce32c3e82a5bde34aa0845f32b0ac350654a2fe90dd67cdc4f4f5843fca900ca802d3a724e268f4b97854940429141e76a8fb9a6b3a9db10691b4ba9a185b98e8e733f02e73d1128de3d4495427972c4e864d2cd29770e910b194d9eb6fa2f3b36fcf892", 0xde}], 0x1, &(0x7f00000016c0)=[@rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r11, r12, r13}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r14, r15, r16}], 0x98, 0x8000}, {&(0x7f0000001780)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000002bc0)=[{&(0x7f0000001800)="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", 0x1000}, {&(0x7f0000002800)="01f2a1f8345ff7c50f6494a8ac4ea1c5b8f2569472564043e3e8240c39964c098cecea1f9eb27b8d5f5a8b630330d0e35a3081ded8785f2e2b7c2ed72325dbecd73e71fc776f623a0e379e82d8b8a73d1ac91f8a6f867f451dedb69e3c6f3a9068d7d2e85ca90f651898ec66843650cf75538bf7c9cc8dec5d034783f6f005d850ceee6624893ef9f2e1d91416754431efda99c61872", 0x96}, {&(0x7f00000028c0)="c3251fbfd2aade47459827fa9a6a34bf07616f4afe2b1fa6eb60d6cbedd59ca2da6c0cbac98743f38edb879f0584abf8f203df522bb9a6091284ff6e72de1032ccf336187d7314d42a98849ab2176aa318a9998286ddbdf028725c1221e5c6c25b41b6c09f0a00792e48afe1fb35f5f7db2410c4eb489c8ad435baecb3d287ceb9a84391d7857eb20c8fff4b95323c44c167e1fe45619dcf1768f887be81ebc87c25d674318e15b22fe8491b51043005ad7adac9095044c1236ec14b402da2c3abb0d4c6bdee9556f22ca50e9ebccc38b088434cf8f7b8616a7fe57cd1e1d5458bfb2e3ef847cc91", 0xe8}, {&(0x7f00000029c0)="ee31363aa42b905b762e7d9b4dcfc54e2551c5b5bc5e47e4400c45283beb6dd22c35603a824ed17de8df83e334523e6d696403b3ec0db75d47aa0888b6c0b61a02e15c56a614bb35d031cd4defa28123e63c9a55a0152f9dac9a6fbce4cb30cd47638598da2c54e9c1a398da0faf5eb73e9e6ddda7bc16d08d48d7ff08c05d68bf52f0cb407ccfc796879490a0494e84b6fc87116fca785b5c13ba2d150763148a6891", 0xa3}, {&(0x7f0000002a80)="ae8fa96c10c3c5909e41a8e2307cf2400e4c6c38dc0c21cfb830eea21168764e55f5e5d35958ed9300e1198babdaef255b3b18549f5237631ba2", 0x3a}, {&(0x7f0000002ac0)='=\aWT]', 0x5}, {&(0x7f0000002b00)="a787ad869efb4ee2a0b55dbcc2d9990184a54c891e97f85e4130d1eefe5e0edca1fd136b5f1b4d6061b7d302b480521a54dabfcc3cbd888cd3ec5be1209ce74a5ff25a76dd59ab7b7d2739ed0dec236febba073a9b1679ca1c4bd8733b94987a7edb42b87fe690cdb959ee98b226d5091e1cdd08a6ac24358d377a294613f1cb5e967d", 0x83}], 0x7, 0x0, 0x0, 0x4000}, {&(0x7f0000002c40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002e00)=[{&(0x7f0000002cc0)="e4082c61ceb9687deb6897285595ee93a5ac8989901dcb871e7bd0ee8a3aa7800372a9ca8716bac43f9a07d286", 0x2d}, {&(0x7f0000002d00)="68bf71c70d1d81e4ed5d1538f4bf4dd3949cd991d24af5cc35942bca51d469d4c3b7041594efd4d2873643e2dd4e81a3b51435202760f129266c1e0855f4cad4f6af9be534a7e635b317acd1342d8b26611d3ebb083b37d19b0d4411dc19e327bd55a76230ec248ed1e55c87b11f7d650f31aecbbdd196dc774881177deb2a4f7f9d2fa7de8b7da1511eff847b1578b32eb07c3905e4dbd1553aecb66cf84f10a84607b234db650b0b63e5a6b11dcb71e4ea490fe0a37157ede22c2df772d9f2ec7e5e69", 0xc4}], 0x2, &(0x7f00000030c0)=[@cred={0x20, 0x1, 0x2, r17, r18, r19}, @rights={0x30, 0x1, 0x1, [r0, r20, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r21, r22, r23}], 0x70, 0x4}, {&(0x7f0000003140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003240)=[{&(0x7f00000031c0)="fd8d92fdeb1d419fa950927e9b9c297f741bd6baf9de6560f06e2d6f9234e28e06318a80a870e78f950ea53e4452456bacc5525855b464a97e666f69abf4e44759a0543d32b3ee8159", 0x49}], 0x1, &(0x7f0000003280)=[@rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r0, r0]}], 0x38, 0x40}, {&(0x7f00000032c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000046c0)=[{&(0x7f0000003340)="a7d3fb52106133044ed8bdfad35db52d10eb7256d30768811ddf5883aecb3a7fe1964566c1117d621f76c301f3117e8245", 0x31}, {&(0x7f0000003380)="61fbf84b16b91ee9b58446c64dcd9ffb509db80b61c0e2a96af91eb477aa3a6957632a0abd6cfa2bb98872a798add8f90c86551d61f6216929d76b46834013082fc37c889832464bdb5fb1c7c2bf79244731546a1d21b9a7a1f1795b513cd0649fec85183969a467fdaa8e81fcbc0c3a1f4227356624bb53810bd44556d91c0fb968b19ef0ecc4443486e5636318f7f6a8efa6cea0395c0611e8abf7547f6c4c62d4295809da8b4d1401383e1a3f003cf5eab17cedcc1e8e071cc245117928e07c0b5ccc4865b3a4c494", 0xca}, {&(0x7f0000003480)="bf8b952711864a3a5e9c409625571fe042b92ffaf796e71cfbaaf1285e83174b4fa77a910ad8048f61f1359d92f2f8d589f97652e69f4e487cfd742071768db4f3b35b9cf8d7709397d19bd5dfd3c5647d757d87cd3e092a60455dbfe2ad4c64f3e3404d33348045a922662408981aeea0600cd471926081469dd286f4495030cd", 0x81}, {&(0x7f0000003540)="a01a696ac55f3ebdb5529e462128cb7c61389f6f6de038472e2f3688ce70c3a3eea3b6774ea962bd596ac81e61301811616166d7e9bdc5056da17ca63833d66d2423db3f90a3ee69c5cf7b96746f5dec7c8e363e08889212113b9bb4fdb2d8f25a65bda41f2e62aeb1f6c8e986a6dae63fe73e0feab73bd0a6c612d89015c509fc7f77a3035f920924856fdcf152bf77b518b8d4ba070c2726ba66c41f870c7465a35c3974505f56d2dcea86", 0xac}, {&(0x7f0000003600)="5fd9637958cc94a4231fec670b2016300098f8c21f0ff210d21ade01f821bad3b7c0c518047e3a2c1efe107a995fd085debad28ce2e75b18bb7510bd37d74ab747b6b5515f9d2dd1315f877ab13406211d51d4b1d7454790e405778e37ce97b1efa5ec312389ae14c2037ca06be51d7968346d996051174a3266e3a7e1c237c827cef96122717a63ea2f010376f65b3d9e667fc25df853e79c71b3", 0x9b}, {&(0x7f00000036c0)="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", 0x1000}], 0x6, &(0x7f0000004740)=[@rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}], 0x58}, {&(0x7f00000047c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005ac0)=[{&(0x7f0000004840)="8388cd9bf05ab13fd1e608df159fb7f574898d0e4be9e9cc90ad522e94fe0c26373c5bd10227f01cfd3db3042b65109716f7d7841437a5f9625f3a59394e5e8a5167b90af156b485d09d98a1e0eca0191857ac0928ec771bb78718b7d97f9bd1d0d637f15202c33f446c9af7c8630da4f19d35823394378fa36671f41b86f69809c14e11460ca996cabd0f8858a261f6464d82bea61ccb7ffc1b9e315b4bfd433a5dc2a36f3c5fffaabfcc20839dfcdc3c3e5b6c145596721ad6da87aab514824b7ca2511e1c127ebbbf87d771df72037acfe2b800225ad5da9a204c44dd40", 0xdf}, {&(0x7f0000004940)="9f749b1e538cdb9ebdc964faddc5590c63898def498536643d7bb734a793cfd0f43fe6f40fc8c84a126f33793c6425ee2a3e88889c54069b05c91ba5fe86f1e04c2cf9114701be430bc8ce23f66daa2489a7d421200acfa747069fa1e1bc8c6363bd94b4ef87538638379bc9562f32c25e1111e1423b3e985588775b8a46621dd1ce7c885c99344062e58615ee161295cc5e6892596dc52766175822abaaa6ecd7764e46e7123d37e91641a2098d1b9c31d9988fc71255a3e9f1b5abc3a8864fd63f80587845b9dfde137d54419c99b8acdb", 0xd2}, {&(0x7f0000004a40)="fa0f2f8e3b643e0c83278823f860710ec86cef3ae590f1c482d575d413f648bc6edaadcaae9fc933ba0a066ed864ea6c097a497c5fa3f683424eed8820d9e5dd1db3a6b17afefb1a0a354fc3f2eb55cfea6286c674637b91c2b90b99c398a936c02564cca09bbb22ab90101dc49a28ba1984ab268b500e6dfb3a2ff41073f6", 0x7f}, {&(0x7f0000004ac0)="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", 0x1000}], 0x4, &(0x7f0000006240)=[@rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r24, r25, r26}, @cred={0x20, 0x1, 0x2, r27, r28, r29}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r30, r31, r32}, @cred={0x20, 0x1, 0x2, 0xffffffffffffffff, r33, r34}, @cred={0x20, 0x1, 0x2, r35, r36, r37}, @cred={0x20, 0x1, 0x2, r38, r39, r40}, @rights={0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0]}], 0x158, 0x40010}], 0x9, 0x10) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) [ 562.742261][T24874] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:16 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) [ 562.834438][T24896] FAT-fs (loop1): bogus number of reserved sectors [ 562.860714][T24896] FAT-fs (loop1): Can't find a valid FAT filesystem 16:35:16 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r3, &(0x7f0000000340)={0x2c, 0x80000000005, r5, 0x4, r2}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r4, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) [ 562.952758][T24906] FAT-fs (loop1): bogus number of reserved sectors [ 562.962166][T24904] FAT-fs (loop4): bogus number of reserved sectors [ 562.985885][T24906] FAT-fs (loop1): Can't find a valid FAT filesystem [ 563.005328][T24904] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:16 executing program 0: lsetxattr$trusted_overlay_origin(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.origin\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x1) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7f, 0x40000) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/mls\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000240)='memory.swap.current\x00', 0x0, 0x0) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000080)=""/175, 0xaf}, {&(0x7f0000000480)=""/178, 0xb2}, {&(0x7f0000000640)=""/248, 0xf8}, {&(0x7f00000003c0)=""/50, 0x32}], 0x4) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f0000000280)='syz1\x00') 16:35:16 executing program 3: r0 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000200)={0x9, 0x200, 0x5, 0xb7, &(0x7f00000000c0)=""/183, 0x20, &(0x7f0000000000)=""/32, 0xb, &(0x7f00000001c0)=""/11}) r1 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) 16:35:16 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001fe, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:35:16 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:16 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:16 executing program 2: r0 = syz_open_procfs(0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) [ 563.485636][T24921] FAT-fs (loop4): bogus number of reserved sectors [ 563.499545][T24921] FAT-fs (loop4): Can't find a valid FAT filesystem [ 563.506652][T24919] FAT-fs (loop1): bogus number of reserved sectors 16:35:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000000c0)={'broute\x00', 0x0, 0x0, 0x0, [], 0x3, &(0x7f0000000000)=[{}], 0x0, [{}, {}, {}]}, 0xa8) [ 563.544654][T24919] FAT-fs (loop1): Can't find a valid FAT filesystem [ 563.574494][T24921] FAT-fs (loop4): bogus number of reserved sectors [ 563.598998][T24921] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/create\x00', 0x2, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) getpgid(0x0) r1 = getpgid(0x0) r2 = syz_open_procfs(r1, &(0x7f0000000000)='smaps_rollup\x00') ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000100)={{0xfff, 0xff}, {0x0, 0xa20}, 0x4527, 0x7, 0x8}) 16:35:17 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\xf9', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:17 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:17 executing program 2: r0 = syz_open_procfs(0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:35:17 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000201, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) [ 563.826774][T24944] FAT-fs (loop4): bogus number of reserved sectors [ 563.865670][T24944] FAT-fs (loop4): Can't find a valid FAT filesystem [ 563.994066][T24944] FAT-fs (loop4): bogus number of reserved sectors [ 564.004322][T24944] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:17 executing program 0: readv(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000300)=""/175, 0xaf}, {&(0x7f0000000480)=""/178, 0xb2}, {&(0x7f0000000640)=""/248, 0xf8}, {&(0x7f00000003c0)=""/50, 0x32}], 0x4) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x15, 0x8100) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in=@multicast2, @in6=@remote}}, {{}, 0x0, @in=@dev}}, &(0x7f0000000140)=0xe8) fsetxattr$trusted_overlay_opaque(r0, &(0x7f00000001c0)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000180)={0x90e, "76d9bcd2a66794b1b462632dda7c30a29cb41b7bed5f3eb7a0c2800b71d00739", 0x2}) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 16:35:17 executing program 3: syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x60000) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000002c0)={0x2b, @local, 0x4e23, 0x0, 'sed\x00', 0x0, 0x8, 0x74}, 0x2c) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000140)={0x100000000, 0xfff}) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000001c0)={0x457b, 0x7ff, 0x3, {0xb, @sdr={0x0, 0x3}}}) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]) 16:35:17 executing program 2: r0 = syz_open_procfs(0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:35:17 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\xfc', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:17 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:17 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000202, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) [ 564.450927][T24963] FAT-fs (loop4): bogus number of reserved sectors [ 564.476593][T24963] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:17 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x40, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x450000, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) 16:35:17 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/udp6\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1f8, 0x0) lseek(r0, 0x0, 0x0) 16:35:17 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:17 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:35:18 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\xfd', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:18 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x8) write$P9_RSYMLINK(r0, &(0x7f00000000c0)={0x14, 0x11, 0x2, {0x2, 0x4, 0x3}}, 0x14) r1 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) read(r1, &(0x7f00000001c0)=""/203, 0xcb) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000100)) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) bind$bt_rfcomm(r0, &(0x7f0000000140)={0x1f, {0xde0, 0x7, 0x0, 0x0, 0x9, 0xffffffff}, 0x9}, 0xa) [ 564.739906][T24986] FAT-fs (loop4): bogus number of reserved sectors [ 564.763093][T24986] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:18 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:35:18 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000203, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) [ 564.857361][T24986] FAT-fs (loop4): bogus number of reserved sectors [ 564.886615][T24986] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:18 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:35:18 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x7f', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:18 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:18 executing program 0: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() socketpair(0x0, 0x0, 0x18, 0x0) getsockname$netlink(0xffffffffffffffff, &(0x7f00000003c0), 0x0) ioprio_get$pid(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00m\x10\x1bDv\xe5j@\xca\x98\"X\xc7k\xb9u\x17w\xed*\xb23\xa9#\xcb\x12\x97\xe9U\x18\xd4\x8d\b\xfc\x845j\x18z\r\xd6\xea\xacE\xd3G\xa9Ki(\xf3\xa3\xfa\xf1\x11(b\am\xd21\x91Q\xbe}\xa3\x8b\r\xc2TR\xa9\tm\x1f\x12hf\xc6\xfa!\x8eK\xd9\x90K\xfa\xc1\x1d\xa9i\x17\a\xdb+\x95Z /\xc9\xafk\xb3!\x05\x17\xcb\x05\tX\x9c~\x85O\x97\x8f\xcc\xcc\xe4\xcb=\xdb\xdf\x1a\x81N\x01>\xdb7\xe3\xe3\xae;3\x8fF\x18\xa4Y `nu\xab!\x9dG\xea\x06\xa7\x83\t\x9b<\x10\xad\a\xb5Ia\xb4f\x97\xb7a4!\xe5h\xabk\x7f\xc4\x9d8\xdb>') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000500)=""/112, 0x70}], 0x1, 0x4c000000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000002c0), 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) 16:35:18 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000204, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:35:18 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000380)={&(0x7f0000000000)=@l2, 0x80, &(0x7f0000000240)=[{&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000000c0)=""/110, 0x6e}, {&(0x7f0000000140)=""/119, 0x77}], 0x3, &(0x7f0000000280)=""/212, 0x9f}, 0x40) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x653aed700761b981) r4 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x7, 0x111000) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f0000000c80)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, r2, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000580)={0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:35:18 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8000}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) [ 565.245019][T25015] FAT-fs (loop4): bogus number of reserved sectors [ 565.275853][T25015] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:18 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000205, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:35:18 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x8c', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) [ 565.385535][T25015] FAT-fs (loop4): bogus number of reserved sectors [ 565.407704][T25015] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:18 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000280)='/dev/snd/controlC#\x00', 0x9, 0x204002) ioctl$int_in(r0, 0x5452, &(0x7f00000002c0)=0x8) r1 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x2, 0x0) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @multicast1}, &(0x7f00000001c0)=0x10) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000200)={0xbf, @loopback, 0x4e20, 0x3, 'ovf\x00', 0x24, 0x8, 0x34}, 0x2c) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt(r3, 0x4e, 0x3, &(0x7f00000000c0)=""/80, &(0x7f0000000000)=0x50) 16:35:18 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000380)={&(0x7f0000000000)=@l2, 0x80, &(0x7f0000000240)=[{&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000000c0)=""/110, 0x6e}, {&(0x7f0000000140)=""/119, 0x77}], 0x3, &(0x7f0000000280)=""/212, 0x9f}, 0x40) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x653aed700761b981) r4 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x7, 0x111000) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f0000000c80)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, r2, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000580)={0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:35:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 16:35:18 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:19 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\xf4', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) [ 565.749702][T25049] FAT-fs (loop4): bogus number of reserved sectors [ 565.756438][T25049] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:19 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000380)={&(0x7f0000000000)=@l2, 0x80, &(0x7f0000000240)=[{&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000000c0)=""/110, 0x6e}, {&(0x7f0000000140)=""/119, 0x77}], 0x3, &(0x7f0000000280)=""/212, 0x9f}, 0x40) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x653aed700761b981) r4 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x7, 0x111000) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f0000000c80)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, r2, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000580)={0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:35:19 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000206, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:35:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) getsockname$tipc(r1, &(0x7f00000000c0)=@name, &(0x7f0000000100)=0x10) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 16:35:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) sendfile(r3, r2, 0x0, 0x10001) [ 565.897667][T25049] FAT-fs (loop4): bogus number of reserved sectors [ 565.918931][T25049] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x28800, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000100)=""/247, &(0x7f0000000200)=0xf7) 16:35:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) sendfile(r3, r2, 0x0, 0x10001) 16:35:19 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x7f', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:19 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\xf5', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:19 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:35:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000)="770f43231d13a5") 16:35:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) sendfile(r3, r2, 0x0, 0x10001) 16:35:19 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:35:19 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\xe0', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:19 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000207, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:35:19 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\xf6', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$nfc_llcp(r1, 0x118, 0x4, &(0x7f00000000c0)=""/29, 0x1d) 16:35:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) sendfile(r3, r2, 0x0, 0x10001) 16:35:19 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:35:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x400400) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x401, 0x80) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000000c0)=0x1, 0x4) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000100)={0x0, @aes256, 0x1, "e4547125ae3480ae"}) syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x40000) 16:35:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x10001) 16:35:20 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\xff', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:20 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\xfb', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:20 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:35:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x240000, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000000c0)=0xa, 0x4) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000)) 16:35:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x10001) 16:35:20 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000208, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:35:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 16:35:20 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:35:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x10001) 16:35:20 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x2, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:20 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/hash_stats\x00', 0x0, 0x0) tee(r0, r0, 0x4, 0x0) socket$l2tp(0x18, 0x1, 0x1) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x10, r1, 0x80000000) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) readv(r0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/223, 0xdf}], 0x1) 16:35:20 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:35:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x10001) [ 567.127728][T25158] FAT-fs (loop4): bogus number of reserved sectors [ 567.134516][T25158] FAT-fs (loop4): Can't find a valid FAT filesystem [ 567.178838][T25161] FAT-fs (loop1): bogus number of reserved sectors [ 567.191515][ T26] audit: type=1400 audit(1552754120.482:84): avc: denied { map } for pid=25162 comm="syz-executor.3" path="/selinux/avc/hash_stats" dev="selinuxfs" ino=26 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:security_t:s0 tclass=file permissive=1 [ 567.199326][T25161] FAT-fs (loop1): Can't find a valid FAT filesystem 16:35:20 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000209, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:35:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x10001) [ 567.248527][T25158] FAT-fs (loop4): bogus number of reserved sectors [ 567.267246][T25158] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:20 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x3, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:20 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:35:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x10001) [ 567.473997][T25176] FAT-fs (loop1): bogus number of reserved sectors [ 567.488026][T25179] FAT-fs (loop4): bogus number of reserved sectors [ 567.503115][T25176] FAT-fs (loop1): Can't find a valid FAT filesystem 16:35:20 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x100000000000020a, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:35:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) sendfile(r2, r1, 0x0, 0x10001) [ 567.522021][T25179] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:20 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:20 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) [ 567.643458][T25179] FAT-fs (loop4): bogus number of reserved sectors [ 567.656484][T25179] FAT-fs (loop4): Can't find a valid FAT filesystem [ 567.780088][T25192] FAT-fs (loop1): bogus number of reserved sectors [ 567.800361][T25192] FAT-fs (loop1): Can't find a valid FAT filesystem 16:35:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x10100, 0x0) ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f00000000c0)=""/96) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000140)={0x2, 0xfff7fffffffffff7, 0x1, 0x1f, 0x10001, 0xd02a585, 0x1000, 0x10000, 0x1, 0x3, 0x4}, 0x1ad) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 16:35:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) sendfile(r2, r1, 0x0, 0x10001) 16:35:21 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x4, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:21 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x100000000000020b, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:35:21 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) [ 567.978153][T25196] FAT-fs (loop1): bogus number of reserved sectors [ 567.997111][T25196] FAT-fs (loop1): Can't find a valid FAT filesystem 16:35:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) sendfile(r2, r1, 0x0, 0x10001) 16:35:21 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) [ 568.085215][T25203] FAT-fs (loop4): bogus number of reserved sectors 16:35:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f00000000c0)={{0x2}, 0x8, 0x3, 0x1f}) [ 568.142953][T25203] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:21 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) sendfile(r2, r1, 0x0, 0x10001) 16:35:21 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:35:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x5, 0x200001) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000340)={0x4, @win={{0x7ff, 0x1, 0xffff, 0x2}, 0x7, 0x2, &(0x7f0000000240)={{0x80000000, 0x1, 0xa2, 0x3}, &(0x7f0000000200)={{0x2, 0x81, 0xaa, 0x7}, &(0x7f00000001c0)={{0x0, 0x8, 0x7fff, 0xfffffffffffffffd}}}}, 0x7, &(0x7f0000000280)="d448c79cbb9044cdd687b9f21e4b8558440ab6fd030ab86ee6134adf1c08c7cf330ea0f57424fda17c151a46d8f2824d0c293c29cb22316d1833379ee3c989d2e949813cc4d6f61e5cb7e5bee69faa827c06ae859e75d2c79ec39d0e20add74fcca9d18b3a26f1d2b399918ce17c9a86a1762ee1612a4dc734eba390cc640477b8c1a8b6484a22ad76f4cb7e899daaed95d3767b965a658e4778f6eec512cc42da9ef68a21f7e3d4b16cf3e9e1e122c2c781ab4f5da4b0ba867e", 0x80000000}}) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000480)) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) accept4$inet(r2, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x800) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000440)) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r2, 0x800443d3, &(0x7f00000004c0)={{0x100000001, 0x3a0, 0xfffffffffffff001, 0x6, 0x7fff, 0xeb10}, 0x2, 0x49886c2e, 0xffc000000000000}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) [ 568.225247][T25203] FAT-fs (loop4): bogus number of reserved sectors [ 568.245923][T25203] FAT-fs (loop4): Can't find a valid FAT filesystem [ 568.255030][T25216] FAT-fs (loop1): bogus number of reserved sectors [ 568.284418][T25216] FAT-fs (loop1): Can't find a valid FAT filesystem 16:35:21 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x100000000000020c, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:35:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x101000, 0x0) bind$nfc_llcp(r1, &(0x7f00000000c0)={0x27, 0x1, 0x0, 0x3, 0x5, 0x5ac, "6f2050128f4dadc375c966fc8c5c65e47b0d2da4199b80723c6e7c85ab2bb194bc72842a6bbaba9bd4a5dc2bdc7eacebf9cf0f2f2ac1292642e4f8f43e1594", 0x17}, 0x60) 16:35:21 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x5, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:21 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) sendfile(r2, r1, 0x0, 0x10001) [ 568.393507][T25230] FAT-fs (loop1): bogus number of reserved sectors [ 568.429318][T25230] FAT-fs (loop1): Can't find a valid FAT filesystem 16:35:21 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:35:21 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) [ 568.522069][T25235] FAT-fs (loop4): bogus number of reserved sectors 16:35:21 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x1, 0x8, 0x100000000, 'queue1\x00', 0x4}) r1 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f00000001c0)={0x3, 0x5}) [ 568.575124][T25235] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:21 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) sendfile(r2, r1, 0x0, 0x10001) 16:35:21 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) [ 568.702334][T25246] FAT-fs (loop1): bogus number of reserved sectors [ 568.709054][T25235] FAT-fs (loop4): bogus number of reserved sectors [ 568.728228][T25246] FAT-fs (loop1): Can't find a valid FAT filesystem [ 568.742520][T25235] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:22 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) sendfile(r2, r1, 0x0, 0x10001) 16:35:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 16:35:22 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x100000000000020d, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) [ 568.849750][T25257] FAT-fs (loop1): bogus number of reserved sectors 16:35:22 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x6, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:22 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) [ 568.901727][T25257] FAT-fs (loop1): Can't find a valid FAT filesystem 16:35:22 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) sendfile(r2, r1, 0x0, 0x10001) 16:35:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x301, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000200)={0x6, 0x6a03, 0x80, 0x0, 0x4, 0x3f, 0x7fff, 0xffffffffffffffdf, 0x7fe0, 0x4e, 0x100000000, 0x5, 0x0, 0x7, 0x8, 0xd28, 0x7ff, 0x81, 0x34dfdc11}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e22, 0x3, @mcast1, 0x4}, @in6={0xa, 0x4e24, 0x2, @mcast2, 0xd0}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2b}}, @in6={0xa, 0x4e20, 0x5, @mcast1, 0x5}, @in6={0xa, 0x4e24, 0x4, @rand_addr="1e34e1c99cc15336ddeb08ecd913c9c0", 0x9}], 0xb0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 16:35:22 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\xff', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) [ 569.079823][T25267] FAT-fs (loop4): bogus number of reserved sectors [ 569.086369][T25267] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:22 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) sendfile(r2, r1, 0x0, 0x10001) 16:35:22 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x100000000000020e, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:35:22 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:35:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x44, 0x2233, 0x5, 0x98, 0x3}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) [ 569.232297][T25267] FAT-fs (loop4): bogus number of reserved sectors [ 569.247631][T25267] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:22 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) sendfile(r2, r1, 0x0, 0x10001) 16:35:22 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x7, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x200, 0xffffffffffffffff) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xbe, 0x400) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000100)={0x1, 0x9}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 16:35:22 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:22 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:35:22 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) sendfile(r2, r1, 0x0, 0x10001) 16:35:22 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x100000000000020f, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) [ 569.497556][T25298] FAT-fs (loop4): bogus number of reserved sectors [ 569.515671][T25298] FAT-fs (loop4): Can't find a valid FAT filesystem [ 569.537484][T25306] FAT-fs (loop1): bogus number of reserved sectors 16:35:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x0, 0x200000) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) r1 = getpid() r2 = syz_open_procfs(r1, &(0x7f0000000000)='net/ip6_tables_targets\x00') ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000100)={0x0, @bt={0x100000000, 0x40, 0x1, 0x2, 0x3, 0x0, 0x677e40ca, 0x3, 0x1000, 0x3, 0xfff, 0x401, 0x4b, 0x7fff, 0xc, 0x20}}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) splice(r2, &(0x7f00000001c0), r2, &(0x7f0000000240), 0x1f, 0x8) ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f00000000c0)={0x3, 0x0, [0x7, 0x5, 0x1, 0x4, 0x4, 0x7, 0xfffffffffffffffb, 0xffffffffffffff7f]}) write$P9_RFSYNC(r2, &(0x7f0000000280)={0x7, 0x33, 0x1}, 0x7) [ 569.561742][T25306] FAT-fs (loop1): Can't find a valid FAT filesystem [ 569.592547][T25298] FAT-fs (loop4): bogus number of reserved sectors 16:35:22 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) [ 569.612704][T25298] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:22 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) sendfile(r2, r1, 0x0, 0x10001) [ 569.661940][T25314] FAT-fs (loop1): bogus number of reserved sectors [ 569.693972][T25314] FAT-fs (loop1): Can't find a valid FAT filesystem 16:35:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) sendfile(r3, r2, 0x0, 0x10001) 16:35:23 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80000, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 16:35:23 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:23 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000210, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:35:23 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:35:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x3) 16:35:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) sendfile(r3, r2, 0x0, 0x10001) [ 569.896319][T25329] FAT-fs (loop4): bogus number of reserved sectors [ 569.903130][T25332] FAT-fs (loop1): bogus number of reserved sectors [ 569.910609][T25329] FAT-fs (loop4): Can't find a valid FAT filesystem [ 569.923497][T25332] FAT-fs (loop1): Can't find a valid FAT filesystem 16:35:23 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) [ 570.028535][T25340] FAT-fs (loop1): bogus number of reserved sectors [ 570.045831][T25329] FAT-fs (loop4): bogus number of reserved sectors [ 570.061538][T25340] FAT-fs (loop1): Can't find a valid FAT filesystem 16:35:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) sendfile(r3, r2, 0x0, 0x10001) 16:35:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x4000) write$nbd(r1, &(0x7f0000000240)={0x67446698, 0x1, 0x3, 0x4, 0x1, "c894fbf3a35bcf9b13b567817fc91fb0a683c281887a1b43d425ce6bcb37459225d52b795a00cdc64888377e5e7eab3e70387bd08fafbf9ce1694d99bf260a2ed20ca6c33cf7c4848c227c33283407518c373b66d616e92599de5e1ca6892c13d6e13ec538e0588333f6c131686a7bc5eb3ad468b7f65b3c4b35ca9fb8b2e62d737298f96f137652c279b0ed0daa7d008713d1d9c14c8560d130c5e5fbd4d71dd7ee7c566084f3a30a3151b75f54e457b26bd38df060a1eb20896752b370d7cb4c47b1c43f30de20287a9c5dbbb0380c20b9f2f905f5dd9ec8143d03"}, 0xec) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x182, 0x0) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000340)=""/77) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000200)) ioctl(r0, 0x8, &(0x7f00000000c0)="09f369a459c2836fe1ca6ad192cd3c6f8f5f72d7e42ae21a5c89a343c5b6e5b46c5e39834af6b02d54564221a4e96958a8c9f4f56148cb15b96c696c1833385a63237eb1259213f4736b2cf2a764998e96d4b7") [ 570.080285][T25329] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:23 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:23 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x9, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:23 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:35:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x7, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x1}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x8000}, &(0x7f00000000c0)=0x8) sysfs$1(0x1, &(0x7f0000000140)='/dev/dri/card#\x00') setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000100)={r2, 0x9}, 0x8) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 16:35:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) sendfile(r3, r2, 0x0, 0x10001) 16:35:23 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000211, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) [ 570.345052][T25356] FAT-fs (loop1): bogus number of reserved sectors [ 570.357510][T25365] FAT-fs (loop4): bogus number of reserved sectors 16:35:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) sendfile(r3, r2, 0x0, 0x10001) 16:35:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x10007, 0x0) connect$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x541512cd, {0x5, 0x6, 0x0, 0x1, 0x3, 0x101}, 0x6, 0x9}, 0xe) poll(&(0x7f0000000000)=[{r0, 0x80}], 0x1, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) [ 570.388998][T25356] FAT-fs (loop1): Can't find a valid FAT filesystem [ 570.390684][T25365] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:23 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:35:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8, 0x4}) open_by_handle_at(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6000) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) inotify_init() 16:35:23 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) [ 570.507119][T25373] FAT-fs (loop1): bogus number of reserved sectors [ 570.514530][T25365] FAT-fs (loop4): bogus number of reserved sectors 16:35:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) sendfile(r3, r2, 0x0, 0x10001) [ 570.554127][T25365] FAT-fs (loop4): Can't find a valid FAT filesystem [ 570.560917][T25373] FAT-fs (loop1): Can't find a valid FAT filesystem 16:35:23 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:24 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xa, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) sendfile(r3, r2, 0x0, 0x10001) 16:35:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0x0, &(0x7f0000000040)) 16:35:24 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) [ 570.793505][T25391] FAT-fs (loop1): bogus number of reserved sectors [ 570.806356][T25391] FAT-fs (loop1): Can't find a valid FAT filesystem [ 570.809626][T25396] FAT-fs (loop4): bogus number of reserved sectors 16:35:24 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000212, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:35:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) sendfile(r3, r2, 0x0, 0x10001) 16:35:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000200)={{0xed16}, {}, 0x8, 0x4}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x14f200, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r1, 0x800443d3, &(0x7f0000000040)={{0x0, 0x907, 0x8, 0x2, 0x0, 0x7506a0cc}, 0x8, 0xffffffffffffffc0, 0x100000001}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f00000000c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={r2, 0x6}, &(0x7f00000001c0)=0x8) ioctl(r0, 0x80, &(0x7f0000000280)="8bc484ba96965a117682f524083afcd1732ecb125cadae7ab724b6312b7009994d133fef0f9da385e10a44f1d1bd8702f19860996483432921457a2bf9fb403ecd80f893f8a6b06d04f1b8d2205c62dee2fd05b07b2cebf8362918a8b9eb321717c78945d633c70886016e9bec32bb8a117ec3395b08b0fcbfd4cb84ccb0efe7c966be249e8cbbb2f346cd1e06710bfca6a4f9d4b4de6f9b96305ea8035d937a89ef1f49532dfcab02") [ 570.845489][T25396] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:24 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:35:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) sendfile(r3, r2, 0x0, 0x10001) [ 570.919420][T25402] FAT-fs (loop1): bogus number of reserved sectors [ 570.940149][T25396] FAT-fs (loop4): bogus number of reserved sectors [ 570.963939][T25402] FAT-fs (loop1): Can't find a valid FAT filesystem [ 570.977744][T25396] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x80) pwritev(r0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="0260e091145f841e8a648172d73c3a23cd5d9caec8d5655a36d62b9759abf6b9072ba6b284a132479ed17dde31b56d9aec1e53f24cd2efebe5f46ceb2fe816376098230833823f9433c00a1d", 0x4c}, {&(0x7f0000000140)="bd14ddcb713e30bdeff0a0b4eeda4ade665dcc6089d40a", 0x17}, {&(0x7f0000000180)="2cf10ea534497a0e5b113516c34dc098335e00b1de71d14fb0f552fa0d1199b6fc27515bcacab284dd041c49a08ec22277242f3d2e9d42e2ab0efc891f56551a8c05bc99f1646651cd6d12760a4834bdf4a9b0219780914383f2fd06ea7b5eb556df26b9146d733759f40228644a0e79b80764344900e72035709d671782d542db03db99c59f92e8122063cee3c2630a88eb365a86d2ed773969", 0x9a}, {&(0x7f0000000240)="a0cb6eeb20acee630355", 0xa}, {&(0x7f0000000280)="2e5e5ba911b7f4c7e8d7cc7c591386f4f1aebb7439dade925119590cc02dbae06aa6d7a2c0864659158f39f4c52e899d723aa2962a3819f2101f5aa9409da063adc486d14a4866e631bd2e7098f421e5", 0x50}, {&(0x7f0000000300)="001f1b10dbd431cff2971727960c605e56735defd47e486fef511535ab6f64381bd8841cedf4970cefe85444d5fd8df6de84c7820f83fe094582d73b0e308d5339dbd6616734cce1b47f4c279de0ba112147ee7a256a3fdd1a86abccf9660eb64815b4b687a156d1048582fb56135968c95d5bba065a53a40da39c4f02adee5a7c61d503fede98fc5287e98ed15dcf22a1945305155fe449c25f66b396ed13beca8bc9c8ac8ac21539c533445870337b06466f68", 0xb4}], 0x6, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 16:35:24 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:24 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xb, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:24 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:35:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0x1, &(0x7f00000000c0)) 16:35:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) sendfile(r3, r2, 0x0, 0x10001) [ 571.182930][T25422] FAT-fs (loop1): bogus number of reserved sectors [ 571.221345][T25422] FAT-fs (loop1): Can't find a valid FAT filesystem [ 571.254423][T25425] FAT-fs (loop4): bogus number of reserved sectors [ 571.293431][T25425] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:24 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) [ 571.393307][T25425] FAT-fs (loop4): bogus number of reserved sectors [ 571.421040][T25425] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:24 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000213, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:35:24 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xffff, 0x200000) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000000c0)={@local, @dev}, &(0x7f0000000100)=0xc) r1 = syz_open_dev$dri(&(0x7f0000001600)='/dev/dri/card#\x00', 0x10001, 0x10000004a0040) ioctl$sock_netdev_private(r0, 0x89f4, &(0x7f0000000200)="427fab47124cacb171eaac13bc73df89cb9e895728e1bc010f2a5b76e14913b6397fc8a35335774e50206b02805a830b62251e579280a16c4b4e7c1d9ed9f9323b0d363e3433f88b5b7c2577bc2159") syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0x1, &(0x7f0000001540)="8a48d8650c9077931bc597311d942eb063da8be0ff7f00001e03a00f82578a5316917b1f486c7c2b94676769a7bccb5d8c00262a9fb1e8e3be18b9c602497d33105c19171cbf218d18dc98e8f2ccd5745445df79a85e3f672a87c33a43a8196c451d532f9346146507fb3de79ebc66743a73570467dee9c759c5f937c752a3226c9bc3f0370e6948007d8f506e98944fc75c1729c96ec3c08960d08cc9b0a4fae0e4584e3b18c40165") listxattr(&(0x7f00000013c0)='./file0\x00', &(0x7f0000001400)=""/61, 0x3d) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f00000002c0)="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", 0x1000) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f00000001c0)={0x0, 0x8, 0x9a6, &(0x7f0000000140)=0xfffffffffffffbff}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0xffffff78, 0xfa00, {0x4, &(0x7f0000001640)={0xffffffffffffffff}, 0x13f, 0xf}}, 0x1b5) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000001380)={0x1, 0x10, 0xfa00, {&(0x7f00000012c0), r2}}, 0x18) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000280)=0x7) ioctl$KVM_RUN(r0, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000014c0)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001440)="56a02497fc6fc986549fb71614aeccdb466f337988f51988d6a4a2e6bd3257298c786c4241cc90140bc0ca6509bf58d8a51ab4be0848eafb1567a4f556b7b2631b4aec74c019808265d5e2d1f598f526455ac8891570327cecacdeb90e720f5864ed89426ed7", 0x66, r0}, 0x68) 16:35:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) sendfile(r3, r2, 0x0, 0x10001) 16:35:24 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:24 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:35:24 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x1, 0xe3}, {}, 0xa}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x321002, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f00000000c0)={0x4, 0x6, 0x9, 0x900, 'syz0\x00', 0x5}) renameat(r1, &(0x7f0000000140)='./file0\x00', r1, &(0x7f00000001c0)='./file0\x00') openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x200) [ 571.622291][T25441] FAT-fs (loop1): bogus number of reserved sectors [ 571.635892][T25441] FAT-fs (loop1): Can't find a valid FAT filesystem [ 571.649688][T25451] FAT-fs (loop4): bogus number of reserved sectors 16:35:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) sendfile(r3, r2, 0x0, 0x10001) 16:35:25 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) [ 571.697360][T25451] FAT-fs (loop4): Can't find a valid FAT filesystem [ 571.727300][T25454] FAT-fs (loop1): bogus number of reserved sectors [ 571.742471][T25454] FAT-fs (loop1): Can't find a valid FAT filesystem 16:35:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) r1 = accept$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000000)=0x6e) accept(r1, &(0x7f00000001c0)=@hci, &(0x7f0000000140)=0x80) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) r2 = syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x2, 0x800) ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000280)=0x93) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) [ 571.774848][T25451] FAT-fs (loop4): bogus number of reserved sectors [ 571.806799][T25451] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) sendfile(r3, r2, 0x0, 0x10001) 16:35:25 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:25 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000214, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:35:25 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) r1 = getpgrp(0x0) r2 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="dd779d3ba66d5a3b4452ab67e76731d1fb44db978e1cb0f0d61320596c38be768c8d855bb55a4f105617f2823887b6ac63b90f58b01b15005ab68417770d63369343431aafe0b6b9e617d59ef8b67cc32a2a619f59ea217a809edccb2cbc4c750a05a754d898922c3bc468ad255c3224b82fd270839f9cef", 0x78, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000002c0)={r2, 0x3, 0x1d}, 0x0, &(0x7f0000000300)="9ce68e92260a7a7517aed1c29bbe0be19e3d3a77414d669d087a606d5e9486671d56cad797fe99f27d194a354095b19165cecd6660226b0e0ffdfa5c753407de9450b3a0e9f4cf62e708b2f0a1ae3db3f61d6ced4b8aae98235f37d4db335d207df694c93706904b2370034098f295f8d3bc017a4542360247cfa0ecb6f53e83efdb25f15689836b2e4a6968b5356d75d057c660bb78845db29637473329def52f1e9793096f98d1c65e06f0410d130c40cb4ddd59d7dacd5335e68bb7f06c342484d11477110c593667011c63032767", &(0x7f0000000400)=""/106) wait4(r1, &(0x7f0000000000), 0x80000001, &(0x7f00000000c0)) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 16:35:25 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:35:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) sendfile(r3, r2, 0x0, 0x10001) [ 571.996183][T25472] FAT-fs (loop1): bogus number of reserved sectors [ 572.024758][T25472] FAT-fs (loop1): Can't find a valid FAT filesystem 16:35:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x4, 0x20000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f00000000c0)) prctl$PR_GET_CHILD_SUBREAPER(0x25) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x8}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0', [{}, {0x20, ':\xbevmnet0'}, {0x20, '/eth1@\''}, {0x20, 'nodev'}, {0x20, '&trusted'}], 0xa, "7a622e3f5d759b0310753ccdb3bf06317b92123adac89cdd100d5fa05c3d7e665811bb7e2fadd826a98ee512f5a92bfe70cd838842d60b969725fa4c4ec47caf597212dc8ab61df06e36b545fc8bf86e026c7c834f721ef3739f8d0a3e70700d8ece42b6104a642eca94d8e24b931283c3f9a7ba0d59c6f030aa1a855f542df1b70bdc46c6478b0a3aeaf5a141a71e31b96191f8e2a43d5f129d6149b2b2b779b4"}, 0xcd) [ 572.046483][T25481] FAT-fs (loop4): bogus number of reserved sectors [ 572.073934][T25481] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:25 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) [ 572.113319][T25485] FAT-fs (loop1): bogus number of reserved sectors 16:35:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) sendfile(r3, r2, 0x0, 0x10001) [ 572.159758][T25485] FAT-fs (loop1): Can't find a valid FAT filesystem [ 572.177290][T25481] FAT-fs (loop4): bogus number of reserved sectors [ 572.193921][T25481] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:25 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000080), 0x8) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000040)=@srh, 0x8) 16:35:25 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x23, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:25 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) [ 572.468744][T25500] FAT-fs (loop1): bogus number of reserved sectors [ 572.487554][T25500] FAT-fs (loop1): Can't find a valid FAT filesystem [ 572.497579][T25507] FAT-fs (loop4): bogus number of reserved sectors 16:35:25 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000215, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:35:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b0") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) sendfile(r3, r2, 0x0, 0x10001) 16:35:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x1, 0xe3}, {}, 0xa}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x321002, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f00000000c0)={0x4, 0x6, 0x9, 0x900, 'syz0\x00', 0x5}) renameat(r1, &(0x7f0000000140)='./file0\x00', r1, &(0x7f00000001c0)='./file0\x00') openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x200) 16:35:25 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) [ 572.516061][T25507] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b0") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) sendfile(r3, r2, 0x0, 0x10001) 16:35:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b0") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) sendfile(r3, r2, 0x0, 0x10001) 16:35:25 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) [ 572.616079][T25507] FAT-fs (loop4): bogus number of reserved sectors [ 572.634569][T25507] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:26 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x48, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b0") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) sendfile(r3, r2, 0x0, 0x10001) 16:35:26 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:35:26 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:35:26 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000216, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) [ 572.819345][T25527] FAT-fs (loop1): bogus number of reserved sectors [ 572.846255][T25527] FAT-fs (loop1): Can't find a valid FAT filesystem [ 572.891814][T25534] FAT-fs (loop4): bogus number of reserved sectors 16:35:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) sendfile(r3, r2, 0x0, 0x10001) 16:35:26 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000380)={&(0x7f0000000000)=@l2, 0x80, &(0x7f0000000240)=[{&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000000c0)=""/110, 0x6e}, {&(0x7f0000000140)=""/119, 0x77}], 0x3, &(0x7f0000000280)=""/212, 0x9f}, 0x40) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x653aed700761b981) r4 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x7, 0x111000) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f0000000c80)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, r2, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000580)={0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:35:26 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) [ 572.941880][T25541] FAT-fs (loop1): bogus number of reserved sectors [ 572.946954][T25534] FAT-fs (loop4): Can't find a valid FAT filesystem [ 572.965076][T25541] FAT-fs (loop1): Can't find a valid FAT filesystem 16:35:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) sendfile(r3, r2, 0x0, 0x10001) [ 573.046951][T25534] FAT-fs (loop4): bogus number of reserved sectors [ 573.053566][T25534] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:26 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000217, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:35:26 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:26 executing program 3: r0 = syz_open_procfs(0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:35:26 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x4c, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) sendfile(r3, r2, 0x0, 0x10001) 16:35:26 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) [ 573.290548][T25556] FAT-fs (loop1): bogus number of reserved sectors [ 573.319774][T25556] FAT-fs (loop1): Can't find a valid FAT filesystem [ 573.336823][T25564] FAT-fs (loop4): bogus number of reserved sectors 16:35:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) sendfile(r2, r1, 0x0, 0x10001) [ 573.367265][T25564] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:26 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000218, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:35:26 executing program 3: r0 = syz_open_procfs(0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:35:26 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:35:26 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) [ 573.452369][T25564] FAT-fs (loop4): bogus number of reserved sectors [ 573.472173][T25564] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) sendfile(r2, r1, 0x0, 0x10001) 16:35:26 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x60, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) [ 573.617865][T25580] FAT-fs (loop1): bogus number of reserved sectors [ 573.654009][T25580] FAT-fs (loop1): Can't find a valid FAT filesystem 16:35:26 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000219, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:35:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) sendfile(r2, r1, 0x0, 0x10001) [ 573.688490][T25586] FAT-fs (loop4): bogus number of reserved sectors [ 573.707172][T25586] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:27 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:35:27 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r3, &(0x7f0000000340)={0x2c, 0x80000000005, r5, 0x4, r2}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r4, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) [ 573.747413][T25588] FAT-fs (loop1): bogus number of reserved sectors [ 573.782409][T25588] FAT-fs (loop1): Can't find a valid FAT filesystem 16:35:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, 0x0, 0x2, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) sendfile(r3, r2, 0x0, 0x10001) 16:35:27 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) [ 573.857434][T25586] FAT-fs (loop4): bogus number of reserved sectors [ 573.889758][T25586] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:27 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:35:27 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x68, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, 0x0, 0x2, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) sendfile(r3, r2, 0x0, 0x10001) 16:35:27 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x100000000000021a, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:35:27 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0x80000000005, r5, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r4, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) 16:35:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, 0x0, 0x2, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) sendfile(r3, r2, 0x0, 0x10001) [ 574.094717][T25604] FAT-fs (loop1): bogus number of reserved sectors [ 574.101927][T25607] FAT-fs (loop4): bogus number of reserved sectors [ 574.109471][T25604] FAT-fs (loop1): Can't find a valid FAT filesystem [ 574.125901][T25607] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:27 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) [ 574.175876][T25617] FAT-fs (loop1): bogus number of reserved sectors [ 574.193908][T25617] FAT-fs (loop1): Can't find a valid FAT filesystem 16:35:27 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x100000000000021b, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:35:27 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:35:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r3 = socket$kcm(0x29, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x10001) 16:35:27 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:27 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) [ 574.330574][T25607] FAT-fs (loop4): bogus number of reserved sectors [ 574.337293][T25607] FAT-fs (loop4): Can't find a valid FAT filesystem 16:35:27 executing program 3 (fault-call:2 fault-nth:0): r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 16:35:27 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x6c, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r3 = socket$kcm(0x29, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x10001) [ 574.462504][T25631] FAT-fs (loop1): bogus number of reserved sectors 16:35:27 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x100000000000021c, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) [ 574.525724][T25639] FAULT_INJECTION: forcing a failure. [ 574.525724][T25639] name failslab, interval 1, probability 0, space 0, times 0 [ 574.534939][T25631] FAT-fs (loop1): Can't find a valid FAT filesystem [ 574.563506][T25639] CPU: 0 PID: 25639 Comm: syz-executor.3 Not tainted 5.0.0+ #25 [ 574.571171][T25639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 574.581262][T25639] Call Trace: [ 574.584571][T25639] dump_stack+0x172/0x1f0 [ 574.588917][T25639] should_fail.cold+0xa/0x15 [ 574.593523][T25639] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 574.599342][T25639] ? ___might_sleep+0x163/0x280 [ 574.604205][T25639] __should_failslab+0x121/0x190 [ 574.609152][T25639] should_failslab+0x9/0x14 [ 574.613663][T25639] __kmalloc+0x2dc/0x740 [ 574.617945][T25639] ? drm_ioctl+0x45c/0xa50 [ 574.628285][T25639] drm_ioctl+0x45c/0xa50 [ 574.632536][T25639] ? drm_mode_create_dumb+0x310/0x310 [ 574.637927][T25639] ? drm_version+0x3d0/0x3d0 [ 574.642521][T25639] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 574.648354][T25639] ? ___might_sleep+0x163/0x280 [ 574.653230][T25639] ? drm_version+0x3d0/0x3d0 [ 574.657838][T25639] do_vfs_ioctl+0xd6e/0x1390 [ 574.662443][T25639] ? ioctl_preallocate+0x210/0x210 [ 574.667572][T25639] ? selinux_file_mprotect+0x620/0x620 [ 574.673040][T25639] ? __fget+0x381/0x550 [ 574.677209][T25639] ? ksys_dup3+0x3e0/0x3e0 [ 574.681634][T25639] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 574.687888][T25639] ? fput_many+0x12c/0x1a0 [ 574.692321][T25639] ? tomoyo_file_ioctl+0x23/0x30 [ 574.697278][T25639] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 574.703534][T25639] ? security_file_ioctl+0x93/0xc0 [ 574.708666][T25639] ksys_ioctl+0xab/0xd0 [ 574.712841][T25639] __x64_sys_ioctl+0x73/0xb0 [ 574.717449][T25639] do_syscall_64+0x103/0x610 [ 574.722058][T25639] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 574.727955][T25639] RIP: 0033:0x458079 [ 574.731854][T25639] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 574.751470][T25639] RSP: 002b:00007f10883b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 574.759891][T25639] RAX: ffffffffffffffda RBX: 00007f10883b3c90 RCX: 0000000000458079 [ 574.767867][T25639] RDX: 0000000020000040 RSI: ffffffffffffffb2 RDI: 0000000000000003 16:35:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r3 = socket$kcm(0x29, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x10001) [ 574.775838][T25639] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 574.783812][T25639] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f10883b46d4 [ 574.791786][T25639] R13: 00000000004bf1d9 R14: 00000000004d0b68 R15: 0000000000000004 16:35:28 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:35:28 executing program 3 (fault-call:2 fault-nth:1): r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) [ 574.884938][T25645] FAT-fs (loop4): bogus number of reserved sectors [ 574.893284][T25648] FAT-fs (loop1): bogus number of reserved sectors [ 574.913440][T25645] FAT-fs (loop4): Can't find a valid FAT filesystem [ 574.927948][T25648] FAT-fs (loop1): Can't find a valid FAT filesystem 16:35:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x10001) [ 574.949404][T25656] FAULT_INJECTION: forcing a failure. [ 574.949404][T25656] name failslab, interval 1, probability 0, space 0, times 0 [ 574.980962][T25656] CPU: 0 PID: 25656 Comm: syz-executor.3 Not tainted 5.0.0+ #25 [ 574.988641][T25656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 574.998751][T25656] Call Trace: [ 575.002071][T25656] dump_stack+0x172/0x1f0 [ 575.006426][T25656] should_fail.cold+0xa/0x15 [ 575.011034][T25656] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 575.016956][T25656] ? ___might_sleep+0x163/0x280 [ 575.021826][T25656] __should_failslab+0x121/0x190 [ 575.026799][T25656] should_failslab+0x9/0x14 [ 575.031327][T25656] kmem_cache_alloc_trace+0x2d1/0x760 [ 575.036718][T25656] ? drm_dev_exit+0x22/0x60 [ 575.041262][T25656] ? find_held_lock+0x35/0x130 [ 575.046118][T25656] __vgem_gem_create+0x49/0x100 [ 575.050999][T25656] vgem_gem_dumb_create+0xd7/0x260 [ 575.056130][T25656] drm_mode_create_dumb+0x288/0x310 [ 575.061354][T25656] drm_mode_create_dumb_ioctl+0x26/0x30 [ 575.066919][T25656] drm_ioctl_kernel+0x23e/0x2e0 [ 575.071794][T25656] ? drm_mode_create_dumb+0x310/0x310 [ 575.077278][T25656] ? drm_setversion+0x8c0/0x8c0 [ 575.082144][T25656] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 575.088397][T25656] ? _copy_from_user+0xdd/0x150 [ 575.093259][T25656] drm_ioctl+0x545/0xa50 [ 575.097519][T25656] ? drm_mode_create_dumb+0x310/0x310 [ 575.102909][T25656] ? drm_version+0x3d0/0x3d0 [ 575.107512][T25656] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 575.113340][T25656] ? ___might_sleep+0x163/0x280 [ 575.118206][T25656] ? drm_version+0x3d0/0x3d0 [ 575.122811][T25656] do_vfs_ioctl+0xd6e/0x1390 [ 575.127420][T25656] ? ioctl_preallocate+0x210/0x210 [ 575.132538][T25656] ? selinux_file_mprotect+0x620/0x620 [ 575.138001][T25656] ? __fget+0x381/0x550 [ 575.142181][T25656] ? ksys_dup3+0x3e0/0x3e0 [ 575.146610][T25656] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 575.152862][T25656] ? fput_many+0x12c/0x1a0 [ 575.157302][T25656] ? tomoyo_file_ioctl+0x23/0x30 [ 575.162353][T25656] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 575.168617][T25656] ? security_file_ioctl+0x93/0xc0 [ 575.173772][T25656] ksys_ioctl+0xab/0xd0 [ 575.177958][T25656] __x64_sys_ioctl+0x73/0xb0 [ 575.182561][T25656] do_syscall_64+0x103/0x610 [ 575.187166][T25656] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 575.193059][T25656] RIP: 0033:0x458079 [ 575.196955][T25656] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 575.216572][T25656] RSP: 002b:00007f10883b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 575.224997][T25656] RAX: ffffffffffffffda RBX: 00007f10883b3c90 RCX: 0000000000458079 [ 575.232978][T25656] RDX: 0000000020000040 RSI: ffffffffffffffb2 RDI: 0000000000000003 [ 575.240960][T25656] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 16:35:28 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x100000000000021d, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) [ 575.248959][T25656] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f10883b46d4 [ 575.256937][T25656] R13: 00000000004bf1d9 R14: 00000000004d0b68 R15: 0000000000000004 16:35:28 executing program 3 (fault-call:2 fault-nth:2): r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 16:35:28 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:28 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x74, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:28 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:35:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x10001) [ 575.395936][T25662] FAULT_INJECTION: forcing a failure. [ 575.395936][T25662] name failslab, interval 1, probability 0, space 0, times 0 [ 575.443252][T25662] CPU: 1 PID: 25662 Comm: syz-executor.3 Not tainted 5.0.0+ #25 [ 575.450937][T25662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 575.461087][T25662] Call Trace: [ 575.464406][T25662] dump_stack+0x172/0x1f0 [ 575.468767][T25662] should_fail.cold+0xa/0x15 [ 575.473378][T25662] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 575.479200][T25662] ? ___might_sleep+0x163/0x280 [ 575.484068][T25662] __should_failslab+0x121/0x190 [ 575.489024][T25662] should_failslab+0x9/0x14 [ 575.493538][T25662] kmem_cache_alloc_trace+0x2d1/0x760 [ 575.498920][T25662] ? drm_dev_exit+0x22/0x60 [ 575.503434][T25662] ? find_held_lock+0x35/0x130 [ 575.508213][T25662] __vgem_gem_create+0x49/0x100 [ 575.513085][T25662] vgem_gem_dumb_create+0xd7/0x260 [ 575.518211][T25662] drm_mode_create_dumb+0x288/0x310 [ 575.523442][T25662] drm_mode_create_dumb_ioctl+0x26/0x30 [ 575.528999][T25662] drm_ioctl_kernel+0x23e/0x2e0 [ 575.533868][T25662] ? drm_mode_create_dumb+0x310/0x310 [ 575.539261][T25662] ? drm_setversion+0x8c0/0x8c0 [ 575.544122][T25662] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 575.550375][T25662] ? _copy_from_user+0xdd/0x150 [ 575.555237][T25662] drm_ioctl+0x545/0xa50 [ 575.559504][T25662] ? drm_mode_create_dumb+0x310/0x310 [ 575.564895][T25662] ? drm_version+0x3d0/0x3d0 [ 575.569491][T25662] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 575.575318][T25662] ? ___might_sleep+0x163/0x280 [ 575.580184][T25662] ? drm_version+0x3d0/0x3d0 [ 575.584788][T25662] do_vfs_ioctl+0xd6e/0x1390 [ 575.589399][T25662] ? ioctl_preallocate+0x210/0x210 [ 575.594516][T25662] ? selinux_file_mprotect+0x620/0x620 [ 575.599977][T25662] ? __fget+0x381/0x550 [ 575.604155][T25662] ? ksys_dup3+0x3e0/0x3e0 [ 575.608582][T25662] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 575.614837][T25662] ? fput_many+0x12c/0x1a0 [ 575.619282][T25662] ? tomoyo_file_ioctl+0x23/0x30 [ 575.624235][T25662] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 575.630507][T25662] ? security_file_ioctl+0x93/0xc0 [ 575.635641][T25662] ksys_ioctl+0xab/0xd0 [ 575.639812][T25662] __x64_sys_ioctl+0x73/0xb0 [ 575.644421][T25662] do_syscall_64+0x103/0x610 [ 575.649024][T25662] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 575.654932][T25662] RIP: 0033:0x458079 [ 575.658831][T25662] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 575.678453][T25662] RSP: 002b:00007f10883b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 575.686931][T25662] RAX: ffffffffffffffda RBX: 00007f10883b3c90 RCX: 0000000000458079 16:35:29 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x100000000000021e, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) [ 575.694916][T25662] RDX: 0000000020000040 RSI: ffffffffffffffb2 RDI: 0000000000000003 [ 575.702899][T25662] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 575.710884][T25662] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f10883b46d4 [ 575.718864][T25662] R13: 00000000004bf1d9 R14: 00000000004d0b68 R15: 0000000000000004 16:35:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x10001) 16:35:29 executing program 3 (fault-call:2 fault-nth:3): r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) [ 575.777235][T25666] FAT-fs (loop4): bogus number of reserved sectors [ 575.799382][T25666] FAT-fs (loop4): Can't find a valid FAT filesystem [ 575.815792][T25674] FAT-fs (loop1): bogus number of reserved sectors [ 575.836238][T25674] FAT-fs (loop1): Can't find a valid FAT filesystem 16:35:29 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) [ 575.888699][T25680] FAULT_INJECTION: forcing a failure. [ 575.888699][T25680] name failslab, interval 1, probability 0, space 0, times 0 [ 575.920311][T25680] CPU: 0 PID: 25680 Comm: syz-executor.3 Not tainted 5.0.0+ #25 [ 575.928003][T25680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 575.928019][T25680] Call Trace: [ 575.941389][T25680] dump_stack+0x172/0x1f0 [ 575.945743][T25680] should_fail.cold+0xa/0x15 [ 575.950366][T25680] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 575.956199][T25680] ? ___might_sleep+0x163/0x280 [ 575.961157][T25680] __should_failslab+0x121/0x190 [ 575.967614][T25680] ? shmem_destroy_callback+0xc0/0xc0 [ 575.967630][T25680] should_failslab+0x9/0x14 [ 575.967646][T25680] kmem_cache_alloc+0x2b2/0x6f0 [ 575.967669][T25680] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 575.987992][T25680] ? shmem_destroy_callback+0xc0/0xc0 [ 575.993384][T25680] shmem_alloc_inode+0x1c/0x50 [ 575.998162][T25680] alloc_inode+0x66/0x190 [ 576.002550][T25680] new_inode_pseudo+0x19/0xf0 [ 576.007236][T25680] new_inode+0x1f/0x40 [ 576.011311][T25680] shmem_get_inode+0x84/0x780 [ 576.015998][T25680] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 576.022251][T25680] __shmem_file_setup.part.0+0x7e/0x2b0 [ 576.028502][T25680] shmem_file_setup+0x66/0x90 [ 576.033196][T25680] drm_gem_object_init+0x3b/0xb0 [ 576.038149][T25680] __vgem_gem_create+0x6f/0x100 [ 576.043019][T25680] vgem_gem_dumb_create+0xd7/0x260 [ 576.048232][T25680] drm_mode_create_dumb+0x288/0x310 [ 576.053461][T25680] drm_mode_create_dumb_ioctl+0x26/0x30 [ 576.059035][T25680] drm_ioctl_kernel+0x23e/0x2e0 [ 576.063900][T25680] ? drm_mode_create_dumb+0x310/0x310 [ 576.069274][T25680] ? drm_setversion+0x8c0/0x8c0 [ 576.074980][T25680] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 576.081244][T25680] ? _copy_from_user+0xdd/0x150 [ 576.086114][T25680] drm_ioctl+0x545/0xa50 [ 576.090362][T25680] ? drm_mode_create_dumb+0x310/0x310 [ 576.095755][T25680] ? drm_version+0x3d0/0x3d0 [ 576.100347][T25680] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 576.106162][T25680] ? ___might_sleep+0x163/0x280 [ 576.111021][T25680] ? drm_version+0x3d0/0x3d0 [ 576.115617][T25680] do_vfs_ioctl+0xd6e/0x1390 [ 576.120213][T25680] ? ioctl_preallocate+0x210/0x210 [ 576.125321][T25680] ? selinux_file_mprotect+0x620/0x620 [ 576.130783][T25680] ? __fget+0x381/0x550 [ 576.134941][T25680] ? ksys_dup3+0x3e0/0x3e0 [ 576.139361][T25680] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 576.145598][T25680] ? fput_many+0x12c/0x1a0 [ 576.150025][T25680] ? tomoyo_file_ioctl+0x23/0x30 [ 576.154964][T25680] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 576.161209][T25680] ? security_file_ioctl+0x93/0xc0 [ 576.166329][T25680] ksys_ioctl+0xab/0xd0 [ 576.170490][T25680] __x64_sys_ioctl+0x73/0xb0 [ 576.175105][T25680] do_syscall_64+0x103/0x610 [ 576.179698][T25680] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 576.185603][T25680] RIP: 0033:0x458079 [ 576.189498][T25680] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 576.209107][T25680] RSP: 002b:00007f10883b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 576.217524][T25680] RAX: ffffffffffffffda RBX: 00007f10883b3c90 RCX: 0000000000458079 [ 576.225582][T25680] RDX: 0000000020000040 RSI: ffffffffffffffb2 RDI: 0000000000000003 16:35:29 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x100000000000021f, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:35:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x10001) [ 576.233574][T25680] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 576.241547][T25680] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f10883b46d4 [ 576.249517][T25680] R13: 00000000004bf1d9 R14: 00000000004d0b68 R15: 0000000000000004 16:35:29 executing program 3 (fault-call:2 fault-nth:4): r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) [ 576.289378][T25666] FAT-fs (loop4): bogus number of reserved sectors [ 576.309380][T25666] FAT-fs (loop4): Can't find a valid FAT filesystem [ 576.318803][T25684] FAT-fs (loop1): bogus number of reserved sectors 16:35:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x10001) [ 576.340611][T25684] FAT-fs (loop1): Can't find a valid FAT filesystem [ 576.415886][T25693] FAULT_INJECTION: forcing a failure. [ 576.415886][T25693] name failslab, interval 1, probability 0, space 0, times 0 [ 576.429439][T25693] CPU: 1 PID: 25693 Comm: syz-executor.3 Not tainted 5.0.0+ #25 [ 576.437115][T25693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 576.447180][T25693] Call Trace: [ 576.450498][T25693] dump_stack+0x172/0x1f0 [ 576.454858][T25693] should_fail.cold+0xa/0x15 [ 576.459472][T25693] ? find_held_lock+0x35/0x130 16:35:29 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:29 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x7a, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) [ 576.464259][T25693] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 576.470088][T25693] ? ___might_sleep+0x163/0x280 [ 576.474956][T25693] __should_failslab+0x121/0x190 [ 576.479909][T25693] should_failslab+0x9/0x14 [ 576.484423][T25693] kmem_cache_alloc+0x2b2/0x6f0 [ 576.489294][T25693] ? __put_user_ns+0x70/0x70 [ 576.493900][T25693] ? shmem_alloc_inode+0x1c/0x50 [ 576.498851][T25693] ? rcu_read_lock_sched_held+0x110/0x130 [ 576.504586][T25693] security_inode_alloc+0x39/0x160 [ 576.509713][T25693] inode_init_always+0x56e/0xb50 [ 576.514676][T25693] alloc_inode+0x83/0x190 [ 576.519024][T25693] new_inode_pseudo+0x19/0xf0 [ 576.523712][T25693] new_inode+0x1f/0x40 [ 576.527807][T25693] shmem_get_inode+0x84/0x780 [ 576.532492][T25693] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 576.538788][T25693] __shmem_file_setup.part.0+0x7e/0x2b0 [ 576.544361][T25693] shmem_file_setup+0x66/0x90 [ 576.549058][T25693] drm_gem_object_init+0x3b/0xb0 [ 576.554012][T25693] __vgem_gem_create+0x6f/0x100 [ 576.558877][T25693] vgem_gem_dumb_create+0xd7/0x260 [ 576.564009][T25693] drm_mode_create_dumb+0x288/0x310 [ 576.569226][T25693] drm_mode_create_dumb_ioctl+0x26/0x30 [ 576.574822][T25693] drm_ioctl_kernel+0x23e/0x2e0 [ 576.579690][T25693] ? drm_mode_create_dumb+0x310/0x310 [ 576.585084][T25693] ? drm_setversion+0x8c0/0x8c0 [ 576.589961][T25693] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 576.596224][T25693] ? _copy_from_user+0xdd/0x150 [ 576.601121][T25693] drm_ioctl+0x545/0xa50 [ 576.605373][T25693] ? drm_mode_create_dumb+0x310/0x310 [ 576.610773][T25693] ? drm_version+0x3d0/0x3d0 [ 576.615376][T25693] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 576.621203][T25693] ? ___might_sleep+0x163/0x280 [ 576.626081][T25693] ? drm_version+0x3d0/0x3d0 [ 576.630684][T25693] do_vfs_ioctl+0xd6e/0x1390 [ 576.635291][T25693] ? ioctl_preallocate+0x210/0x210 [ 576.640415][T25693] ? selinux_file_mprotect+0x620/0x620 [ 576.645886][T25693] ? __fget+0x381/0x550 [ 576.650062][T25693] ? ksys_dup3+0x3e0/0x3e0 [ 576.654484][T25693] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 576.660742][T25693] ? fput_many+0x12c/0x1a0 [ 576.665174][T25693] ? tomoyo_file_ioctl+0x23/0x30 [ 576.670298][T25693] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 576.676571][T25693] ? security_file_ioctl+0x93/0xc0 [ 576.681899][T25693] ksys_ioctl+0xab/0xd0 [ 576.686308][T25693] __x64_sys_ioctl+0x73/0xb0 [ 576.691355][T25693] do_syscall_64+0x103/0x610 [ 576.695965][T25693] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 576.701862][T25693] RIP: 0033:0x458079 [ 576.705772][T25693] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 576.725390][T25693] RSP: 002b:00007f10883b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 576.733815][T25693] RAX: ffffffffffffffda RBX: 00007f10883b3c90 RCX: 0000000000458079 [ 576.741914][T25693] RDX: 0000000020000040 RSI: ffffffffffffffb2 RDI: 0000000000000003 [ 576.749899][T25693] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 576.757893][T25693] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f10883b46d4 16:35:30 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:35:30 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000220, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) [ 576.765881][T25693] R13: 00000000004bf1d9 R14: 00000000004d0b68 R15: 0000000000000004 16:35:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x10001) 16:35:30 executing program 3 (fault-call:2 fault-nth:5): r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) [ 576.946308][T25702] FAT-fs (loop1): bogus number of reserved sectors [ 576.964095][T25706] FAT-fs (loop4): bogus number of reserved sectors [ 576.974262][T25702] FAT-fs (loop1): Can't find a valid FAT filesystem 16:35:30 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) 16:35:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) sendfile(r3, r2, 0x0, 0x0) [ 576.993345][T25711] FAULT_INJECTION: forcing a failure. [ 576.993345][T25711] name failslab, interval 1, probability 0, space 0, times 0 [ 577.009508][T25706] FAT-fs (loop4): Can't find a valid FAT filesystem [ 577.029357][T25712] FAT-fs (loop1): bogus number of reserved sectors [ 577.047277][T25711] CPU: 1 PID: 25711 Comm: syz-executor.3 Not tainted 5.0.0+ #25 [ 577.054936][T25711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 577.064999][T25711] Call Trace: [ 577.067698][T25712] FAT-fs (loop1): Can't find a valid FAT filesystem [ 577.068303][T25711] dump_stack+0x172/0x1f0 [ 577.068334][T25711] should_fail.cold+0xa/0x15 [ 577.083816][T25711] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 577.089627][T25711] ? ___might_sleep+0x163/0x280 [ 577.089647][T25711] __should_failslab+0x121/0x190 [ 577.089669][T25711] should_failslab+0x9/0x14 [ 577.103927][T25711] kmem_cache_alloc+0x2b2/0x6f0 [ 577.103941][T25711] ? current_time+0x6b/0x140 [ 577.103963][T25711] ? ktime_get_coarse_real_ts64+0xf0/0x2b0 [ 577.113393][T25711] ? lockdep_hardirqs_on+0x418/0x5d0 [ 577.124500][T25711] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 577.130769][T25711] ? timespec64_trunc+0xf0/0x180 [ 577.135723][T25711] __d_alloc+0x2e/0x8c0 [ 577.139907][T25711] d_alloc_pseudo+0x1e/0x30 [ 577.144427][T25711] alloc_file_pseudo+0xe2/0x280 [ 577.149293][T25711] ? alloc_file+0x4d0/0x4d0 [ 577.153813][T25711] ? lockdep_annotate_inode_mutex_key+0x5b/0x70 [ 577.160081][T25711] __shmem_file_setup.part.0+0x108/0x2b0 [ 577.165756][T25711] shmem_file_setup+0x66/0x90 [ 577.170546][T25711] drm_gem_object_init+0x3b/0xb0 [ 577.175501][T25711] __vgem_gem_create+0x6f/0x100 [ 577.180365][T25711] vgem_gem_dumb_create+0xd7/0x260 [ 577.185492][T25711] drm_mode_create_dumb+0x288/0x310 [ 577.190727][T25711] drm_mode_create_dumb_ioctl+0x26/0x30 [ 577.196302][T25711] drm_ioctl_kernel+0x23e/0x2e0 [ 577.201176][T25711] ? drm_mode_create_dumb+0x310/0x310 [ 577.206597][T25711] ? drm_setversion+0x8c0/0x8c0 [ 577.211481][T25711] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 577.217752][T25711] ? _copy_from_user+0xdd/0x150 [ 577.222621][T25711] drm_ioctl+0x545/0xa50 [ 577.226886][T25711] ? drm_mode_create_dumb+0x310/0x310 [ 577.232291][T25711] ? drm_version+0x3d0/0x3d0 [ 577.236890][T25711] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 577.242718][T25711] ? ___might_sleep+0x163/0x280 [ 577.247595][T25711] ? drm_version+0x3d0/0x3d0 [ 577.252192][T25711] do_vfs_ioctl+0xd6e/0x1390 [ 577.256797][T25711] ? ioctl_preallocate+0x210/0x210 [ 577.261918][T25711] ? selinux_file_mprotect+0x620/0x620 [ 577.267479][T25711] ? __fget+0x381/0x550 [ 577.271649][T25711] ? ksys_dup3+0x3e0/0x3e0 [ 577.276071][T25711] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 577.282320][T25711] ? fput_many+0x12c/0x1a0 [ 577.286755][T25711] ? tomoyo_file_ioctl+0x23/0x30 [ 577.291702][T25711] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 577.297961][T25711] ? security_file_ioctl+0x93/0xc0 [ 577.303080][T25711] ksys_ioctl+0xab/0xd0 [ 577.307255][T25711] __x64_sys_ioctl+0x73/0xb0 [ 577.311944][T25711] do_syscall_64+0x103/0x610 [ 577.316541][T25711] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 577.322430][T25711] RIP: 0033:0x458079 [ 577.326329][T25711] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 16:35:30 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000221, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) [ 577.345965][T25711] RSP: 002b:00007f10883b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 577.354387][T25711] RAX: ffffffffffffffda RBX: 00007f10883b3c90 RCX: 0000000000458079 [ 577.362366][T25711] RDX: 0000000020000040 RSI: ffffffffffffffb2 RDI: 0000000000000003 [ 577.370371][T25711] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 577.378354][T25711] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f10883b46d4 [ 577.386330][T25711] R13: 00000000004bf1d9 R14: 00000000004d0b68 R15: 0000000000000004 16:35:30 executing program 3 (fault-call:2 fault-nth:6): r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 16:35:30 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:30 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:30 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) [ 577.566946][T25722] FAULT_INJECTION: forcing a failure. [ 577.566946][T25722] name failslab, interval 1, probability 0, space 0, times 0 [ 577.617937][T25722] CPU: 0 PID: 25722 Comm: syz-executor.3 Not tainted 5.0.0+ #25 [ 577.625601][T25722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 577.625608][T25722] Call Trace: [ 577.625635][T25722] dump_stack+0x172/0x1f0 [ 577.625657][T25722] should_fail.cold+0xa/0x15 [ 577.647912][T25722] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 577.653728][T25722] ? ___might_sleep+0x163/0x280 [ 577.658601][T25722] __should_failslab+0x121/0x190 [ 577.658622][T25722] should_failslab+0x9/0x14 [ 577.658645][T25722] kmem_cache_alloc+0x2b2/0x6f0 [ 577.672917][T25722] __alloc_file+0x27/0x300 [ 577.677354][T25722] alloc_empty_file+0x72/0x170 [ 577.682124][T25722] alloc_file+0x5e/0x4d0 [ 577.686373][T25722] alloc_file_pseudo+0x189/0x280 [ 577.691318][T25722] ? alloc_file+0x4d0/0x4d0 [ 577.695831][T25722] ? lockdep_annotate_inode_mutex_key+0x5b/0x70 [ 577.702091][T25722] __shmem_file_setup.part.0+0x108/0x2b0 [ 577.707752][T25722] shmem_file_setup+0x66/0x90 [ 577.712446][T25722] drm_gem_object_init+0x3b/0xb0 [ 577.717391][T25722] __vgem_gem_create+0x6f/0x100 [ 577.722247][T25722] vgem_gem_dumb_create+0xd7/0x260 [ 577.727367][T25722] drm_mode_create_dumb+0x288/0x310 [ 577.732597][T25722] drm_mode_create_dumb_ioctl+0x26/0x30 [ 577.738149][T25722] drm_ioctl_kernel+0x23e/0x2e0 [ 577.743005][T25722] ? drm_mode_create_dumb+0x310/0x310 [ 577.748385][T25722] ? drm_setversion+0x8c0/0x8c0 [ 577.753244][T25722] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 577.759494][T25722] ? _copy_from_user+0xdd/0x150 [ 577.764352][T25722] drm_ioctl+0x545/0xa50 [ 577.768604][T25722] ? drm_mode_create_dumb+0x310/0x310 [ 577.773989][T25722] ? drm_version+0x3d0/0x3d0 [ 577.778586][T25722] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 577.784412][T25722] ? ___might_sleep+0x163/0x280 [ 577.789285][T25722] ? drm_version+0x3d0/0x3d0 [ 577.793902][T25722] do_vfs_ioctl+0xd6e/0x1390 [ 577.798508][T25722] ? ioctl_preallocate+0x210/0x210 [ 577.803627][T25722] ? selinux_file_mprotect+0x620/0x620 [ 577.809087][T25722] ? __fget+0x381/0x550 [ 577.813256][T25722] ? ksys_dup3+0x3e0/0x3e0 [ 577.817677][T25722] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 577.823923][T25722] ? fput_many+0x12c/0x1a0 [ 577.828354][T25722] ? tomoyo_file_ioctl+0x23/0x30 [ 577.833300][T25722] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 577.839557][T25722] ? security_file_ioctl+0x93/0xc0 [ 577.844676][T25722] ksys_ioctl+0xab/0xd0 [ 577.848843][T25722] __x64_sys_ioctl+0x73/0xb0 [ 577.853444][T25722] do_syscall_64+0x103/0x610 [ 577.858038][T25722] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 577.863935][T25722] RIP: 0033:0x458079 16:35:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) sendfile(r3, r2, 0x0, 0x0) 16:35:31 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000222, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) [ 577.867843][T25722] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 577.887453][T25722] RSP: 002b:00007f10883b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 577.895880][T25722] RAX: ffffffffffffffda RBX: 00007f10883b3c90 RCX: 0000000000458079 [ 577.903953][T25722] RDX: 0000000020000040 RSI: ffffffffffffffb2 RDI: 0000000000000003 [ 577.911939][T25722] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 577.919944][T25722] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f10883b46d4 [ 577.927927][T25722] R13: 00000000004bf1d9 R14: 00000000004d0b68 R15: 0000000000000004 16:35:31 executing program 3 (fault-call:2 fault-nth:7): r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) [ 577.984977][T25724] FAT-fs (loop4): bogus number of reserved sectors [ 578.009452][T25724] FAT-fs (loop4): Can't find a valid FAT filesystem [ 578.053220][T25738] FAULT_INJECTION: forcing a failure. [ 578.053220][T25738] name failslab, interval 1, probability 0, space 0, times 0 [ 578.073259][T25730] FAT-fs (loop1): bogus number of reserved sectors [ 578.085103][T25724] FAT-fs (loop4): bogus number of reserved sectors [ 578.088376][T25730] FAT-fs (loop1): Can't find a valid FAT filesystem 16:35:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) sendfile(r3, r2, 0x0, 0x0) [ 578.108188][T25724] FAT-fs (loop4): Can't find a valid FAT filesystem [ 578.135513][T25738] CPU: 1 PID: 25738 Comm: syz-executor.3 Not tainted 5.0.0+ #25 [ 578.143181][T25738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 578.153318][T25738] Call Trace: [ 578.156625][T25738] dump_stack+0x172/0x1f0 [ 578.160982][T25738] should_fail.cold+0xa/0x15 [ 578.165593][T25738] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 578.171432][T25738] ? ___might_sleep+0x163/0x280 [ 578.176297][T25738] __should_failslab+0x121/0x190 [ 578.181256][T25738] should_failslab+0x9/0x14 [ 578.185778][T25738] kmem_cache_alloc+0x2b2/0x6f0 [ 578.190640][T25738] ? rcu_read_lock_sched_held+0x110/0x130 [ 578.196374][T25738] ? kmem_cache_alloc+0x32e/0x6f0 [ 578.201425][T25738] security_file_alloc+0x39/0x170 [ 578.206461][T25738] __alloc_file+0xac/0x300 [ 578.210887][T25738] alloc_empty_file+0x72/0x170 [ 578.215662][T25738] alloc_file+0x5e/0x4d0 [ 578.219922][T25738] alloc_file_pseudo+0x189/0x280 [ 578.224873][T25738] ? alloc_file+0x4d0/0x4d0 [ 578.229385][T25738] ? lockdep_annotate_inode_mutex_key+0x5b/0x70 [ 578.236171][T25738] __shmem_file_setup.part.0+0x108/0x2b0 [ 578.241821][T25738] shmem_file_setup+0x66/0x90 [ 578.246511][T25738] drm_gem_object_init+0x3b/0xb0 [ 578.251457][T25738] __vgem_gem_create+0x6f/0x100 [ 578.256404][T25738] vgem_gem_dumb_create+0xd7/0x260 [ 578.261528][T25738] drm_mode_create_dumb+0x288/0x310 [ 578.266751][T25738] drm_mode_create_dumb_ioctl+0x26/0x30 [ 578.272395][T25738] drm_ioctl_kernel+0x23e/0x2e0 [ 578.277264][T25738] ? drm_mode_create_dumb+0x310/0x310 [ 578.282649][T25738] ? drm_setversion+0x8c0/0x8c0 [ 578.287547][T25738] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 578.293799][T25738] ? _copy_from_user+0xdd/0x150 [ 578.298662][T25738] drm_ioctl+0x545/0xa50 [ 578.302919][T25738] ? drm_mode_create_dumb+0x310/0x310 [ 578.308306][T25738] ? drm_version+0x3d0/0x3d0 [ 578.312908][T25738] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 578.318741][T25738] ? ___might_sleep+0x163/0x280 [ 578.323607][T25738] ? drm_version+0x3d0/0x3d0 [ 578.328210][T25738] do_vfs_ioctl+0xd6e/0x1390 [ 578.332824][T25738] ? ioctl_preallocate+0x210/0x210 [ 578.338113][T25738] ? selinux_file_mprotect+0x620/0x620 [ 578.343582][T25738] ? __fget+0x381/0x550 [ 578.347762][T25738] ? ksys_dup3+0x3e0/0x3e0 [ 578.352188][T25738] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 578.358437][T25738] ? fput_many+0x12c/0x1a0 [ 578.362868][T25738] ? tomoyo_file_ioctl+0x23/0x30 [ 578.367817][T25738] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 578.374072][T25738] ? security_file_ioctl+0x93/0xc0 [ 578.379198][T25738] ksys_ioctl+0xab/0xd0 [ 578.383374][T25738] __x64_sys_ioctl+0x73/0xb0 [ 578.388065][T25738] do_syscall_64+0x103/0x610 [ 578.392669][T25738] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 578.398568][T25738] RIP: 0033:0x458079 [ 578.402468][T25738] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 578.422082][T25738] RSP: 002b:00007f10883b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 578.430504][T25738] RAX: ffffffffffffffda RBX: 00007f10883b3c90 RCX: 0000000000458079 [ 578.438488][T25738] RDX: 0000000020000040 RSI: ffffffffffffffb2 RDI: 0000000000000003 [ 578.446468][T25738] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 16:35:31 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) [ 578.454449][T25738] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f10883b46d4 [ 578.462434][T25738] R13: 00000000004bf1d9 R14: 00000000004d0b68 R15: 0000000000000004 16:35:31 executing program 3 (fault-call:2 fault-nth:8): r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 16:35:31 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000223, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:35:31 executing program 0 (fault-call:5 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) sendfile(r3, r2, 0x0, 0x10001) [ 578.547131][T25741] FAT-fs (loop1): bogus number of reserved sectors [ 578.565125][T25741] FAT-fs (loop1): Can't find a valid FAT filesystem 16:35:31 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x300, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) 16:35:31 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}]}) [ 578.630822][T25751] FAULT_INJECTION: forcing a failure. [ 578.630822][T25751] name failslab, interval 1, probability 0, space 0, times 0 [ 578.646804][T25752] FAULT_INJECTION: forcing a failure. [ 578.646804][T25752] name failslab, interval 1, probability 0, space 0, times 0 [ 578.669512][T25751] CPU: 1 PID: 25751 Comm: syz-executor.0 Not tainted 5.0.0+ #25 [ 578.677167][T25751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 578.687224][T25751] Call Trace: [ 578.690532][T25751] dump_stack+0x172/0x1f0 [ 578.694877][T25751] should_fail.cold+0xa/0x15 [ 578.699481][T25751] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 578.705300][T25751] ? ___might_sleep+0x163/0x280 [ 578.710157][T25751] __should_failslab+0x121/0x190 [ 578.715112][T25751] should_failslab+0x9/0x14 [ 578.719626][T25751] kmem_cache_alloc_trace+0x2d1/0x760 [ 578.725027][T25751] ? file_has_perm+0x288/0x3a0 [ 578.729828][T25751] alloc_pipe_info+0xb9/0x430 [ 578.734516][T25751] ? __might_sleep+0x95/0x190 [ 578.739208][T25751] splice_direct_to_actor+0x775/0x970 [ 578.744610][T25751] ? generic_pipe_buf_nosteal+0x10/0x10 [ 578.750183][T25751] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 578.756439][T25751] ? do_splice_to+0x190/0x190 [ 578.761129][T25751] ? rw_verify_area+0x118/0x360 [ 578.765991][T25751] do_splice_direct+0x1da/0x2a0 [ 578.770852][T25751] ? splice_direct_to_actor+0x970/0x970 [ 578.776419][T25751] ? rw_verify_area+0x118/0x360 [ 578.781303][T25751] do_sendfile+0x597/0xd00 [ 578.785754][T25751] ? do_compat_pwritev64+0x1c0/0x1c0 [ 578.791085][T25751] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 578.797428][T25751] ? fput+0x1b/0x20 [ 578.801256][T25751] __x64_sys_sendfile64+0x1dd/0x220 [ 578.806470][T25751] ? __ia32_sys_sendfile+0x230/0x230 [ 578.811781][T25751] ? do_syscall_64+0x26/0x610 [ 578.816465][T25751] ? lockdep_hardirqs_on+0x418/0x5d0 [ 578.821768][T25751] ? trace_hardirqs_on+0x67/0x230 [ 578.826801][T25751] do_syscall_64+0x103/0x610 [ 578.831440][T25751] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 578.837335][T25751] RIP: 0033:0x458079 [ 578.841235][T25751] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 578.860877][T25751] RSP: 002b:00007f319e039c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 578.869302][T25751] RAX: ffffffffffffffda RBX: 00007f319e039c90 RCX: 0000000000458079 [ 578.877287][T25751] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006 [ 578.885277][T25751] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 578.893265][T25751] R10: 0000000000010001 R11: 0000000000000246 R12: 00007f319e03a6d4 [ 578.901257][T25751] R13: 00000000004c4f6e R14: 00000000004d8c98 R15: 0000000000000007 [ 578.909379][T25752] CPU: 0 PID: 25752 Comm: syz-executor.3 Not tainted 5.0.0+ #25 [ 578.917023][T25752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 578.917030][T25752] Call Trace: [ 578.917053][T25752] dump_stack+0x172/0x1f0 [ 578.917074][T25752] should_fail.cold+0xa/0x15 [ 578.917099][T25752] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 578.945590][T25752] ? ___might_sleep+0x163/0x280 [ 578.945612][T25752] __should_failslab+0x121/0x190 [ 578.945632][T25752] should_failslab+0x9/0x14 [ 578.945648][T25752] kmem_cache_alloc_trace+0x2d1/0x760 [ 578.945673][T25752] ? preempt_schedule+0x4b/0x60 [ 578.970178][T25752] ? wait_for_completion+0x440/0x440 [ 578.975498][T25752] drm_vma_node_allow+0x52/0x2f0 16:35:32 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) [ 578.980461][T25752] drm_gem_handle_create_tail+0x194/0x3b0 [ 578.986202][T25752] drm_gem_handle_create+0x55/0x70 [ 578.991417][T25752] vgem_gem_dumb_create+0x10a/0x260 [ 578.996635][T25752] drm_mode_create_dumb+0x288/0x310 [ 579.001846][T25752] drm_mode_create_dumb_ioctl+0x26/0x30 [ 579.007407][T25752] drm_ioctl_kernel+0x23e/0x2e0 [ 579.012278][T25752] ? drm_mode_create_dumb+0x310/0x310 [ 579.017668][T25752] ? drm_setversion+0x8c0/0x8c0 [ 579.022537][T25752] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 579.028812][T25752] ? _copy_from_user+0xdd/0x150 [ 579.033673][T25752] drm_ioctl+0x545/0xa50 [ 579.037924][T25752] ? drm_mode_create_dumb+0x310/0x310 [ 579.043317][T25752] ? drm_version+0x3d0/0x3d0 [ 579.047911][T25752] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 579.053761][T25752] ? ___might_sleep+0x163/0x280 [ 579.058630][T25752] ? drm_version+0x3d0/0x3d0 [ 579.063252][T25752] do_vfs_ioctl+0xd6e/0x1390 [ 579.067865][T25752] ? ioctl_preallocate+0x210/0x210 [ 579.072987][T25752] ? selinux_file_mprotect+0x620/0x620 [ 579.078454][T25752] ? __fget+0x381/0x550 [ 579.082621][T25752] ? ksys_dup3+0x3e0/0x3e0 [ 579.087042][T25752] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 579.093291][T25752] ? fput_many+0x12c/0x1a0 [ 579.097723][T25752] ? tomoyo_file_ioctl+0x23/0x30 [ 579.102690][T25752] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 579.108945][T25752] ? security_file_ioctl+0x93/0xc0 [ 579.114072][T25752] ksys_ioctl+0xab/0xd0 [ 579.118243][T25752] __x64_sys_ioctl+0x73/0xb0 [ 579.122861][T25752] do_syscall_64+0x103/0x610 [ 579.127461][T25752] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 579.133366][T25752] RIP: 0033:0x458079 [ 579.137269][T25752] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 579.156900][T25752] RSP: 002b:00007f10883b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 579.165343][T25752] RAX: ffffffffffffffda RBX: 00007f10883b3c90 RCX: 0000000000458079 [ 579.173327][T25752] RDX: 0000000020000040 RSI: ffffffffffffffb2 RDI: 0000000000000003 [ 579.181314][T25752] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 579.189290][T25752] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f10883b46d4 [ 579.197269][T25752] R13: 00000000004bf1d9 R14: 00000000004d0b68 R15: 0000000000000004 [ 579.277100][T25756] FAT-fs (loop4): bogus number of reserved sectors [ 579.301612][T25761] FAT-fs (loop1): bogus number of reserved sectors [ 579.322649][T25756] FAT-fs (loop4): Can't find a valid FAT filesystem [ 579.336136][T25752] ================================================================== [ 579.344588][T25752] BUG: KASAN: use-after-free in drm_gem_object_release+0xf1/0x110 [ 579.352414][T25752] Read of size 8 at addr ffff8880a0ae4650 by task syz-executor.3/25752 [ 579.360109][T25761] FAT-fs (loop1): Can't find a valid FAT filesystem [ 579.360673][T25752] [ 579.369597][T25752] CPU: 1 PID: 25752 Comm: syz-executor.3 Not tainted 5.0.0+ #25 [ 579.377218][T25752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 579.387281][T25752] Call Trace: [ 579.390582][T25752] dump_stack+0x172/0x1f0 [ 579.394957][T25752] ? drm_gem_object_release+0xf1/0x110 [ 579.400428][T25752] print_address_description.cold+0x7c/0x20d [ 579.406415][T25752] ? drm_gem_object_release+0xf1/0x110 [ 579.411879][T25752] ? drm_gem_object_release+0xf1/0x110 [ 579.417345][T25752] kasan_report.cold+0x1b/0x40 [ 579.422123][T25752] ? vgem_prime_import+0x60/0x60 [ 579.427073][T25752] ? drm_gem_object_release+0xf1/0x110 [ 579.432540][T25752] __asan_report_load8_noabort+0x14/0x20 [ 579.438181][T25752] drm_gem_object_release+0xf1/0x110 [ 579.443478][T25752] vgem_gem_dumb_create+0x205/0x260 [ 579.448688][T25752] drm_mode_create_dumb+0x288/0x310 [ 579.453911][T25752] drm_mode_create_dumb_ioctl+0x26/0x30 [ 579.459467][T25752] drm_ioctl_kernel+0x23e/0x2e0 [ 579.464325][T25752] ? drm_mode_create_dumb+0x310/0x310 [ 579.469704][T25752] ? drm_setversion+0x8c0/0x8c0 [ 579.474665][T25752] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 579.480914][T25752] ? _copy_from_user+0xdd/0x150 [ 579.485783][T25752] drm_ioctl+0x545/0xa50 [ 579.490039][T25752] ? drm_mode_create_dumb+0x310/0x310 [ 579.495420][T25752] ? drm_version+0x3d0/0x3d0 [ 579.500018][T25752] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 579.505839][T25752] ? ___might_sleep+0x163/0x280 [ 579.510709][T25752] ? drm_version+0x3d0/0x3d0 [ 579.515328][T25752] do_vfs_ioctl+0xd6e/0x1390 [ 579.520024][T25752] ? ioctl_preallocate+0x210/0x210 [ 579.525145][T25752] ? selinux_file_mprotect+0x620/0x620 [ 579.530605][T25752] ? __fget+0x381/0x550 [ 579.534788][T25752] ? ksys_dup3+0x3e0/0x3e0 [ 579.539219][T25752] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 579.545473][T25752] ? fput_many+0x12c/0x1a0 [ 579.549924][T25752] ? tomoyo_file_ioctl+0x23/0x30 [ 579.554873][T25752] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 579.561140][T25752] ? security_file_ioctl+0x93/0xc0 [ 579.566274][T25752] ksys_ioctl+0xab/0xd0 [ 579.570467][T25752] __x64_sys_ioctl+0x73/0xb0 [ 579.575092][T25752] do_syscall_64+0x103/0x610 [ 579.579706][T25752] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 579.585611][T25752] RIP: 0033:0x458079 [ 579.589512][T25752] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 579.609124][T25752] RSP: 002b:00007f10883b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 579.617659][T25752] RAX: ffffffffffffffda RBX: 00007f10883b3c90 RCX: 0000000000458079 [ 579.625643][T25752] RDX: 0000000020000040 RSI: ffffffffffffffb2 RDI: 0000000000000003 [ 579.633627][T25752] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 579.641610][T25752] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f10883b46d4 [ 579.649619][T25752] R13: 00000000004bf1d9 R14: 00000000004d0b68 R15: 0000000000000004 [ 579.657618][T25752] [ 579.659957][T25752] Allocated by task 25752: [ 579.664393][T25752] save_stack+0x45/0xd0 [ 579.668746][T25752] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 579.674518][T25752] kasan_kmalloc+0x9/0x10 [ 579.678969][T25752] kmem_cache_alloc_trace+0x151/0x760 [ 579.684532][T25752] __vgem_gem_create+0x49/0x100 [ 579.689394][T25752] vgem_gem_dumb_create+0xd7/0x260 [ 579.694516][T25752] drm_mode_create_dumb+0x288/0x310 [ 579.699728][T25752] drm_mode_create_dumb_ioctl+0x26/0x30 [ 579.705473][T25752] drm_ioctl_kernel+0x23e/0x2e0 [ 579.710337][T25752] drm_ioctl+0x545/0xa50 [ 579.714588][T25752] do_vfs_ioctl+0xd6e/0x1390 [ 579.719185][T25752] ksys_ioctl+0xab/0xd0 [ 579.723366][T25752] __x64_sys_ioctl+0x73/0xb0 [ 579.727967][T25752] do_syscall_64+0x103/0x610 [ 579.732577][T25752] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 579.738463][T25752] [ 579.740796][T25752] Freed by task 25752: [ 579.744880][T25752] save_stack+0x45/0xd0 [ 579.749050][T25752] __kasan_slab_free+0x102/0x150 [ 579.753994][T25752] kasan_slab_free+0xe/0x10 [ 579.758504][T25752] kfree+0xcf/0x230 [ 579.762322][T25752] vgem_gem_free_object+0xbe/0xe0 [ 579.767348][T25752] drm_gem_object_free+0x108/0x260 [ 579.772464][T25752] drm_gem_object_put_unlocked+0x129/0x170 [ 579.778277][T25752] vgem_gem_dumb_create+0x115/0x260 [ 579.783478][T25752] drm_mode_create_dumb+0x288/0x310 [ 579.788774][T25752] drm_mode_create_dumb_ioctl+0x26/0x30 [ 579.794422][T25752] drm_ioctl_kernel+0x23e/0x2e0 [ 579.799281][T25752] drm_ioctl+0x545/0xa50 [ 579.803531][T25752] do_vfs_ioctl+0xd6e/0x1390 [ 579.808127][T25752] ksys_ioctl+0xab/0xd0 [ 579.812285][T25752] __x64_sys_ioctl+0x73/0xb0 [ 579.816880][T25752] do_syscall_64+0x103/0x610 [ 579.821477][T25752] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 579.827356][T25752] [ 579.829685][T25752] The buggy address belongs to the object at ffff8880a0ae4540 [ 579.829685][T25752] which belongs to the cache kmalloc-512 of size 512 [ 579.843750][T25752] The buggy address is located 272 bytes inside of [ 579.843750][T25752] 512-byte region [ffff8880a0ae4540, ffff8880a0ae4740) [ 579.857133][T25752] The buggy address belongs to the page: [ 579.862778][T25752] page:ffffea000282b900 count:1 mapcount:0 mapping:ffff88812c3f0940 index:0x0 [ 579.871633][T25752] flags: 0x1fffc0000000200(slab) [ 579.876582][T25752] raw: 01fffc0000000200 ffffea0002952448 ffffea0001ff0c08 ffff88812c3f0940 [ 579.885176][T25752] raw: 0000000000000000 ffff8880a0ae4040 0000000100000006 0000000000000000 [ 579.893767][T25752] page dumped because: kasan: bad access detected [ 579.900183][T25752] [ 579.902518][T25752] Memory state around the buggy address: [ 579.908150][T25752] ffff8880a0ae4500: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 579.916218][T25752] ffff8880a0ae4580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb 16:35:32 executing program 0 (fault-call:5 fault-nth:1): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) sendfile(r3, r2, 0x0, 0x10001) 16:35:33 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000224, 0x10400003) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 16:35:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, @broadcast, @empty}, &(0x7f0000000540)=0xc) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x80000000005, r6, 0x4, r3}, 0xffffffffffffffe1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(0x0, 0x80800) write$P9_RSETATTR(r0, 0x0, 0xffffffffffffff02) write$P9_RREMOVE(r5, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {0x0}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000180), 0x2) io_setup(0x2, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) [ 579.924297][T25752] >ffff8880a0ae4600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 579.932362][T25752] ^ [ 579.939132][T25752] ffff8880a0ae4680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 579.947203][T25752] ffff8880a0ae4700: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 579.955266][T25752] ================================================================== [ 579.964128][T25752] Disabling lock debugging due to kernel taint [ 579.977011][T25752] Kernel panic - not syncing: panic_on_warn set ... [ 579.983668][T25752] CPU: 1 PID: 25752 Comm: syz-executor.3 Tainted: G B 5.0.0+ #25 [ 579.992681][T25752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 580.002741][T25752] Call Trace: [ 580.006048][T25752] dump_stack+0x172/0x1f0 [ 580.010399][T25752] panic+0x2cb/0x65c [ 580.014346][T25752] ? __warn_printk+0xf3/0xf3 [ 580.018958][T25752] ? drm_gem_object_release+0xf1/0x110 [ 580.024433][T25752] ? preempt_schedule+0x4b/0x60 [ 580.029301][T25752] ? ___preempt_schedule+0x16/0x18 [ 580.034425][T25752] ? trace_hardirqs_on+0x5e/0x230 [ 580.039461][T25752] ? drm_gem_object_release+0xf1/0x110 [ 580.044936][T25752] end_report+0x47/0x4f [ 580.049137][T25752] ? drm_gem_object_release+0xf1/0x110 [ 580.054609][T25752] kasan_report.cold+0xe/0x40 [ 580.059307][T25752] ? vgem_prime_import+0x60/0x60 [ 580.064264][T25752] ? drm_gem_object_release+0xf1/0x110 [ 580.069757][T25752] __asan_report_load8_noabort+0x14/0x20 [ 580.076943][T25752] drm_gem_object_release+0xf1/0x110 [ 580.082243][T25752] vgem_gem_dumb_create+0x205/0x260 [ 580.087464][T25752] drm_mode_create_dumb+0x288/0x310 [ 580.092675][T25752] drm_mode_create_dumb_ioctl+0x26/0x30 [ 580.098261][T25752] drm_ioctl_kernel+0x23e/0x2e0 [ 580.103147][T25752] ? drm_mode_create_dumb+0x310/0x310 [ 580.108529][T25752] ? drm_setversion+0x8c0/0x8c0 [ 580.113391][T25752] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 580.119655][T25752] ? _copy_from_user+0xdd/0x150 [ 580.124518][T25752] drm_ioctl+0x545/0xa50 [ 580.128778][T25752] ? drm_mode_create_dumb+0x310/0x310 [ 580.134158][T25752] ? drm_version+0x3d0/0x3d0 [ 580.138762][T25752] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 580.144590][T25752] ? ___might_sleep+0x163/0x280 [ 580.149451][T25752] ? drm_version+0x3d0/0x3d0 [ 580.154053][T25752] do_vfs_ioctl+0xd6e/0x1390 [ 580.158657][T25752] ? ioctl_preallocate+0x210/0x210 [ 580.163775][T25752] ? selinux_file_mprotect+0x620/0x620 [ 580.169235][T25752] ? __fget+0x381/0x550 [ 580.173404][T25752] ? ksys_dup3+0x3e0/0x3e0 [ 580.177824][T25752] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 580.184074][T25752] ? fput_many+0x12c/0x1a0 [ 580.188495][T25752] ? tomoyo_file_ioctl+0x23/0x30 [ 580.193443][T25752] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 580.199690][T25752] ? security_file_ioctl+0x93/0xc0 [ 580.204809][T25752] ksys_ioctl+0xab/0xd0 [ 580.208967][T25752] __x64_sys_ioctl+0x73/0xb0 [ 580.213557][T25752] do_syscall_64+0x103/0x610 [ 580.218156][T25752] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 580.224049][T25752] RIP: 0033:0x458079 [ 580.227942][T25752] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 580.247547][T25752] RSP: 002b:00007f10883b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 580.255961][T25752] RAX: ffffffffffffffda RBX: 00007f10883b3c90 RCX: 0000000000458079 [ 580.263935][T25752] RDX: 0000000020000040 RSI: ffffffffffffffb2 RDI: 0000000000000003 [ 580.271913][T25752] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 580.279886][T25752] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f10883b46d4 [ 580.287865][T25752] R13: 00000000004bf1d9 R14: 00000000004d0b68 R15: 0000000000000004 [ 580.296579][T25752] Kernel Offset: disabled [ 580.300903][T25752] Rebooting in 86400 seconds..