ed sectors [ 3407.262937] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:15 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0e00, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:15 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:15 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x24000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f00000000c0)={0x9, 0x0, 0xc20000, 'queue0\x00', 0x10000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f0000000580)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2e8, 0xfffffffffffffffe) prctl$setmm(0x23, 0x2, &(0x7f0000fff000/0x1000)=nil) keyctl$dh_compute(0x17, &(0x7f0000000040)={r1, r1, r1}, &(0x7f0000000440)=""/240, 0xf0, 0x0) 03:46:15 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x15, 0xa, 0xfffffffffffffffd}, 0x14}}, 0xfffffffffffff000) 03:46:15 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x7a00000000000000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) [ 3407.742622] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:46:15 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:15 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x15, 0xa, 0xfffffffffffffffd}, 0x14}}, 0xec0) 03:46:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000b80)="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", 0x30e, 0xfffffffffffffffe) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)="0001", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r0, r0, r0}, &(0x7f0000000240)=""/240, 0x6ec, 0x0) [ 3407.834258] FAT-fs (loop5): bogus number of reserved sectors [ 3407.853576] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3407.916819] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3407.946970] FAT-fs (loop5): bogus number of reserved sectors [ 3407.952854] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:15 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x40000, 0x0) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0xf, 0x1, 0x100, 0x84000, r1}) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000040)) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f00000000c0)=""/178) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x15, 0xa, 0xfffffffffffffffd}, 0x14}}, 0x0) [ 3407.965975] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:46:16 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:16 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0700, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:16 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x8000000000000000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) [ 3408.138712] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3408.199626] FAT-fs (loop5): bogus number of reserved sectors [ 3408.206357] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3408.263288] FAT-fs (loop5): bogus number of reserved sectors [ 3408.285445] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:16 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff1500, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:16 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)="0001", 0x2, 0xfffffffffffffffd) r3 = dup3(r0, r0, 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000140)={0xe0, 0x2, 0x4}) keyctl$dh_compute(0x17, &(0x7f0000000040)={r1, r1, r2}, &(0x7f0000000440)=""/240, 0xf0, 0x0) 03:46:16 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000040)={&(0x7f0000c78ff4), 0xc, &(0x7f0000000000)={&(0x7f0000000080)={0xfe8c, 0x15, 0xa, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x25dfdbfb}, 0x14}}, 0x0) 03:46:16 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:16 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x4800000000000000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:46:16 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff1100, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) [ 3408.695595] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:46:16 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:16 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x1b7001, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000150afdff00000000f4ff0000000000007494e7aa81ac18737bc69ed21749dc0431d34c3f9df52f72eaee08cf222f05b89f26d4bbb8544079e3c8e18358a94fe651f1988e25d2e1850cfba3c01e064578434811da0752134e4cb1d6e7e1a0b515fe1878e12b28a5cb45d57a6fd6865d321137b13d7e682bcc0e1a"], 0x14}}, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4802, 0x0) syz_open_pts(r1, 0x200000) [ 3408.796708] FAT-fs (loop5): bogus number of reserved sectors [ 3408.802574] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3408.904975] FAT-fs (loop5): bogus number of reserved sectors [ 3408.930585] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3408.941000] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:17 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x5, 0xa, 0xfffffffffffffffd}, 0x14}}, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x400, 0x2) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000080)={r2, 0x20}) 03:46:17 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:17 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xedc000000000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:46:17 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x1b73c97f, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:17 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcb880000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) [ 3409.296653] FAT-fs (loop5): bogus number of reserved sectors [ 3409.320157] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3409.413454] FAT-fs (loop5): bogus number of reserved sectors [ 3409.425686] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:17 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[0x7]}) getpgrp(0x0) r2 = gettid() r3 = getpgid(r2) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) rt_sigtimedwait(&(0x7f00000001c0)={0x100000001}, &(0x7f0000000240), &(0x7f0000000280)={0x0, 0x989680}, 0x8) rt_tgsigqueueinfo(r3, r4, 0x1, &(0x7f0000000180)={0x22, 0x9, 0x4, 0x4}) r5 = add_key$user(&(0x7f0000000580)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)="0001", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r5, r5, r6}, &(0x7f0000000440)=""/240, 0xf0, 0x0) 03:46:17 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x8040, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f0000b04cf4)={0xffffffffffffff19, 0x15, 0xa, 0xfffffffffffffffd, 0x0, 0x0, {0x1000000000000}}, 0x14}}, 0x0) 03:46:17 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000011036915fa2c1ec28656aaa79bb94b46fe0000000700020800008c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) 03:46:17 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x4a040000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:46:17 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcb910000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:17 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:17 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2440, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x21010, r1, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x15, 0xa, 0xfffffffffffffffd}, 0x14}}, 0x0) [ 3409.712123] FAT-fs (loop5): bogus number of reserved sectors [ 3409.738313] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:17 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:17 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xb9060000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) [ 3409.813791] FAT-fs (loop5): bogus number of reserved sectors [ 3409.846474] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:17 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x15, 0xa, 0xfffffffffffffffd}, 0x14}}, 0x0) 03:46:17 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x1f000000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:46:17 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000007036915fa2c1ec28656aaa79bb94b46fe0000000700020800008c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) 03:46:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000580)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000140)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000100)="0001", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r0, r1}, &(0x7f0000000440)=""/240, 0xf0, 0x0) 03:46:18 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x15, 0xa, 0xfffffffffffffffd}, 0x14}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) [ 3410.036869] FAT-fs (loop5): bogus number of reserved sectors [ 3410.049247] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:18 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000500036915fa2c1ec28656aaa79bb94b46fe0000000700020800008c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) [ 3410.139362] FAT-fs (loop5): bogus number of reserved sectors [ 3410.170690] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:18 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)=ANY=[@ANYBLOB="14000000060a000000000000"], 0x14}}, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x20100c0, 0x0) connect$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x2, 0x4, 0x80, 0x7, "b77674a06931d8a363706162063d67d8cccd82112a4598ff96b498d2966c88f8cdf60f2fe3a6c998d8a1f30c779814b38eca1965a4253adb17007d9a1ba6de", 0x3f}, 0x60) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x40040, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x6) 03:46:18 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0b0000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:18 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:18 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x2260000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:46:18 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x9, 0x8, 0x9}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e20, 0x0, @loopback, 0x4}}, [0x1, 0x5, 0x998000000000000, 0x7ff, 0x1, 0x401, 0x200000000000000, 0xd8a0, 0xffffffff, 0x64d, 0x3fb, 0xffffffff00000000, 0x4, 0x7fff, 0x2]}, &(0x7f0000000180)=0x100) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x15, 0xa, 0xfffffffffffffffd}, 0x14}}, 0x0) [ 3410.663498] FAT-fs (loop5): bogus number of reserved sectors [ 3410.701088] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:18 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000200036915fa2c1ec28656aaa79bb94b46fe0000000700020800008c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) 03:46:18 executing program 0: rt_sigaction(0x9, &(0x7f0000000080)={&(0x7f0000000000)="66400fab9d0d000000c463f97e03ebc4c1b72ab0655666660f01db0f1bffc44191622af365266665d0dfc401fe6f30407502c462f934bb48b2aa83", {0x4800000000}, 0x1, &(0x7f0000000040)="c4421d37d92e360f0fefa4c482499e383ef0216301c44245bd600b43ac0fd5360f2b3ec46165fdb50000000067f047834a0111"}, &(0x7f0000000140)={&(0x7f00000000c0)="2b5c5005685879c17b26450f59ca0ffed265c17c570b02c4837d086600c444e0bfdf87cde8ace4c4234d06e907c481f951d0", {}, 0x0, &(0x7f0000000100)="c4e17be62c750000802036dcf10f2daeef000000d2610066420f69f8c4c1e8556200c4623da7078fa9489bdec4428d96273e660f380304eb"}, 0x8, &(0x7f0000000180)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x15, 0xa, 0xfffffffffffffffd}, 0x14}}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhci\x00', 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000200)={0x43, 0x6, 0x0, {0x1, 0x5, 0x1a, 0x0, 'eth0em0userselinuxvboxnet1'}}, 0x43) 03:46:18 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x8573c77f, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000580)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0x0) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000100)="0001", 0x2, r1) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r0, r2}, &(0x7f0000000440)=""/240, 0xf0, 0x0) 03:46:18 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3410.800447] FAT-fs (loop5): bogus number of reserved sectors [ 3410.831834] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:18 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x15, 0xa, 0xfffffffffffffffd}, 0x14}}, 0x0) r1 = socket(0xf, 0x804, 0x60000000000) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000080)={0x4, [0x1f, 0x1, 0x1ff, 0x0]}, &(0x7f00000000c0)=0xc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000140)={0x4}, 0xc) 03:46:18 executing program 4: 03:46:18 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xa, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:46:18 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x6a920000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:18 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000004c00036915fa2c1ec28656aaa79bb94b46fe0000000700020800008c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) 03:46:19 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x4000, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000240)={'veth1\x00', @local}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x22, &(0x7f0000000400)}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x100, 0x0, 0x6, 0x0, 0x100000000, 0x0, 0x0, 0x1f, 0x0, 0x2, 0x6, 0x0, 0x4, 0x75, 0x0, 0xba7c, 0x0, 0x0, 0x600000, 0x0, 0x6e, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0x1f, 0x0, 0x2, 0x1000, 0x0, 0x0, 0xd, 0x7, @perf_bp={&(0x7f0000000280)}, 0x1, 0x7, 0x0, 0x6, 0x5, 0x2fd, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_mems\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x29, 0x80000000002, 0x0) r2 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000e80)="230000004300815291bc655067d7aee4050c0000116017edcaa30000000000008b1832", 0x23}], 0x1, &(0x7f0000000a00)}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x200, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000480)={'team0\x00', 0x1000}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000800)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f2, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x0, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x4, 0x12) close(r2) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00'}, 0x10) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000000)) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x3d6) ioctl$TUNGETFEATURES(r5, 0x800454cf, &(0x7f0000000300)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r8, 0x4068aea3, &(0x7f0000000040)={0x7b}) 03:46:19 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80040, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x15, 0xa, 0xfffffffffffffffd}, 0x14}}, 0x0) 03:46:19 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3411.106191] FAT-fs (loop5): bogus number of reserved sectors [ 3411.112307] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:19 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3411.191535] FAT-fs (loop5): bogus number of reserved sectors [ 3411.226666] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:19 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0300, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:19 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000f309fdff000000000000000000000000006a7245619e7e4095f8566aaec754aa16ccbe95a993e4b37abfa31ad9142e569f07f11910a0d28788a4bd41b5157035100cd676f4996546916af479cdc20116e8478dd32cbd3adb627757a4e737a82373068e53424bf9aabc44225edd91c7c5167f8844bb9a48cd49fcb9c74a5c9b172aab6764b3edbc8f35dacf7f6ad10c6f7a7da76f3aea9753da7eab08daee6a175f12485b2ecd5e67385d9211c08d37f296631cdc80871630817af4a177e3bb26605745c70d59"], 0x14}}, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f00000000c0)={'filter\x00', 0x0, 0x0, 0x0, [], 0x4, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}]}, 0xb8) 03:46:19 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xfffffdfd, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:46:19 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff01000000050000000000004c036915fa2c1ec28656aaa79bb94b46fe0000000700020800008c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) 03:46:19 executing program 4: syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x800) 03:46:19 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0011, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) [ 3411.724155] __nla_parse: 16 callbacks suppressed [ 3411.724165] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:46:19 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x15, 0xa, 0xfffffffffffffffd}, 0x14}}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x101000, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x2) 03:46:19 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x2, 0x800) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040)}, 0x8026}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) modify_ldt$read_default(0x2, &(0x7f0000000540)=""/4096, 0x1000) fstat(r2, &(0x7f0000001540)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket(0x0, 0x0, 0x0) [ 3411.819128] FAT-fs (loop5): bogus number of reserved sectors [ 3411.849127] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3411.855410] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:19 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={&(0x7f0000c78ff4)={0x10, 0x0, 0x0, 0xfffffffffffffffc}, 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)=ANY=[@ANYBLOB="1400000015030000000000000000000000000000"], 0x14}}, 0x0) splice(r0, &(0x7f0000000000), r0, &(0x7f0000000040), 0x3, 0x8) 03:46:19 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff01000000050000000000000f036915fa2c1ec28656aaa79bb94b46fe0000000700020800008c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) 03:46:20 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0034, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) [ 3412.025524] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:46:20 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x5073c87f, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:20 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3412.157129] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3412.186612] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:46:20 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x44b, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:46:20 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2, 0x0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000040)) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x15, 0x2000000000a, 0xfffffffffffffffd}, 0x14}}, 0xfffffffffffffffd) 03:46:20 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000009036915fa2c1ec28656aaa79bb94b46fe0000000700020800008c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) [ 3412.356584] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3412.435887] FAT-fs (loop5): bogus number of reserved sectors [ 3412.441888] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3412.489003] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3412.548938] FAT-fs (loop5): bogus number of reserved sectors [ 3412.555833] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:20 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xb) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x4000, 0x0) getpeername$unix(r2, &(0x7f0000000100), &(0x7f0000000180)=0x6e) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000440), 0x4) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000002c0)={0x0, 0xfff, 0x1ff, 0x7, 0x200, 0x101, 0x6, 0x80000000, {0x0, @in={{0x2, 0x4e23, @broadcast}}, 0x6, 0x7, 0xdd, 0x100000000, 0x9}}, &(0x7f0000000380)=0xb0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000003c0)=ANY=[@ANYRES32=r3, @ANYBLOB="1b000000364535db5db6261e7190260f992c5660eeda77be433c3ac69499a4"], &(0x7f0000000400)=0x23) 03:46:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x2, 0x800) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040)}, 0x8026}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) modify_ldt$read_default(0x2, &(0x7f0000000540)=""/4096, 0x1000) fstat(r2, &(0x7f0000001540)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket(0x0, 0x0, 0x0) 03:46:20 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe00, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) [ 3412.694966] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:46:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xfffffffffffffdf8, &(0x7f0000df6000)={&(0x7f00000001c0)={0x14, 0x15, 0x2a, 0xfffffffffffffffb, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0xfffffcaa}}, 0x1) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000180)=@get={0x1, &(0x7f0000000200)=""/250, 0x6}) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = request_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='$nodev.\x00', 0xfffffffffffffffc) keyctl$get_persistent(0x16, r2, r3) [ 3412.868705] FAT-fs (loop5): bogus number of reserved sectors [ 3412.874627] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3412.939828] FAT-fs (loop5): bogus number of reserved sectors [ 3412.970804] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:21 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff2000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:21 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xee060000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:21 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x2, 0x800) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040)}, 0x8026}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) modify_ldt$read_default(0x2, &(0x7f0000000540)=""/4096, 0x1000) fstat(r2, &(0x7f0000001540)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket(0x0, 0x0, 0x0) 03:46:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) finit_module(r0, &(0x7f0000000000)='wlan0\x00', 0x3) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x15, 0xa, 0xfffffffffffffffd}, 0x14}}, 0x0) 03:46:21 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x4b04, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) [ 3413.173940] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:46:21 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x15, 0xa, 0xfffffffffffffffd}, 0x14}}, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa0000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_getrule={0x20, 0x22, 0x2, 0x70bd27, 0x25dfdbfb, {0x2, 0x80, 0x10, 0x9, 0x2, 0x0, 0x0, 0x3}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4008050}, 0x40000) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth1_to_bridge\x00', r2}) [ 3413.283808] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:46:21 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff01000000050000000000003f036915fa2c1ec28656aaa79bb94b46fe0000000700020800008c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) 03:46:21 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:21 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3413.646664] FAT-fs (loop5): bogus number of reserved sectors [ 3413.655361] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3413.669303] Unknown ioctl 35123 03:46:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002900)='/dev/sequencer2\x00', 0x400400, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000002880)=ANY=[@ANYBLOB="14000000150a000000000000000691f1ffff5d003506f22b96391f8f27469c812409b5d4a1126fc2348c66e865154aba921de40bcac378d2d48b5331dd73fa21847a7e0dc828027895d05f310d3b74dd"], 0x14}}, 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:default_context_t:s0\x00', 0x13, 0x6) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002640)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000002740)=0xe8) syz_mount_image$gfs2(&(0x7f0000001180)='gfs2\x00', &(0x7f00000011c0)='./file0\x00', 0x5, 0x7, &(0x7f0000002580)=[{&(0x7f0000001200)="e15294bce73414a5aae55629a24480", 0xf, 0x7}, {&(0x7f0000001240)="114b483eb15667578a1ba1c743e2eedce67290605838a82c10b2f7522bc411f83f91c326985c6785e0e30518c725f503471719f825d87d64e2c1cecb79c6a2aed53d4e81ce6f0b92cae51606315ec2d84af655a83576ad8078cc2647ebda3f0a8bed4b013e34a08518bffe30c77967385720393f71aafa85df1fb071908296e72266a951e442baa56b4187295f208d3c220bc89ec41189b797c19bc77fe0f01c720971712f1244ecc0a4517afe1ae4caf1f1c093a730cc622734d832689f47865576b5a56f59320be0218b0dd5122d99bb346e8b26", 0xd5, 0x100}, {&(0x7f0000001340)="d8aa6e78b71c69c09a4ae0ea39f8c4542e380e22fa848179153b60c9a5552e793657a507e493ff439a7d7101713719d03a5a2868d4d0fd28f87b57530f7b253e88553d65cd169e246c8d7ed06d7af8dda2542f05bc52f2d88366709be5eb7321e2bbc6d76bbf35e948e573c1cfe3fdc0dbffe8c91aa1956c839f33df4628cf00c7158bb14dc5762da49d2be9700523861290512b5c1be4d899a8cc9ab4132923c8999be41dfe98ffb4851263b307", 0xae}, {&(0x7f0000001400)="f5c733eedfc6ba41c4a85526b6f73f17ae8c7c08be18776f2d0d75c6c3f858125fdbd9ce4dc3d2fa3bbb27d8d9ad147590176ecbafd7d22fc12405be2ba9e7bea137d3b01b3214d3a171a8a99c46e0ae6e5f176f26397ac8e9527b7c41f43f085f9f2a11b3d306e598c128c1e0fabbd168934aa99a671514cad3df9e6d63", 0x7e, 0x2}, {&(0x7f0000001480)="20c5e76361a0644d381f7fc0d3a9bcead095206c274c765688300edea573fe7cb30e696298b0a36a7ba9fe18579fad857651ed7aa75b55f66071bcc2e8d72dc90b784acea63095ed4a3107cbf8fdc40ebad4a68a0bbeddae881b11a6fd1e5ab54f223b9bca347e52221551f4774b5e798bd2b37b391f2710b1b4dc43d716649747e02e2dcda6bb93ef25c44c64d2c5b9c4ddc172226a2d71ac4de7", 0x9b, 0x5}, {&(0x7f0000001540)="be5b074d7f51b0435a51937c5ee70dc102c1b4235f30f9e654e63a11f4abce8743c044bbece1925238a3e4f2791c5cb93e32c1fee4cca70e7f7280e8ce07", 0x3e, 0xc6}, {&(0x7f0000001580)="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", 0x1000, 0x4}], 0x8000, &(0x7f0000002780)={[{@statfs_percent={'statfs_percent', 0x3d, 0x8}}, {@spectator='spectator'}, {@nobarrier='nobarrier'}, {@quota='quota'}, {@statfs_quantum={'statfs_quantum', 0x3d, 0x400000000000000}}, {@localcaching='localcaching'}, {@lockproto_dlm='lockproto=dlm'}], [{@euid_lt={'euid<', r2}}, {@smackfstransmute={'smackfstransmute'}}, {@seclabel='seclabel'}, {@dont_appraise='dont_appraise'}, {@smackfshat={'smackfshat', 0x3d, 'security.selinux\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'security.selinux\x00'}}]}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000002940)="ada1a97c870c79ff3ffdee8f8640f9b0", 0x10) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x100, 0x0) setsockopt$inet_int(r3, 0x0, 0x1, &(0x7f0000002980)=0x3, 0x4) recvfrom$unix(r3, &(0x7f0000000100)=""/4096, 0x1000, 0x2, &(0x7f0000001100)=@file={0x0, './file0\x00'}, 0x6e) [ 3413.718868] FAT-fs (loop5): bogus number of reserved sectors [ 3413.739516] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3413.856036] gfs2: statfs_quantum mount option requires a non-negative numeric argument [ 3413.872362] gfs2: can't parse mount arguments 03:46:22 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff8b0000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x2, 0x800) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040)}, 0x8026}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) modify_ldt$read_default(0x2, &(0x7f0000000540)=""/4096, 0x1000) fstat(r2, &(0x7f0000001540)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket(0x0, 0x0, 0x0) 03:46:22 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:22 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x8cffffff, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:46:22 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto(r1, &(0x7f0000000200), 0x20020, 0x0, &(0x7f00000002c0)=@ethernet={0x0, @remote}, 0x6e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x10, 0x15, 0xc, 0xfffffffffffffffd}, 0x14}}, 0x0) 03:46:22 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0009, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:22 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:22 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000015a3c3ff00000000001300000000000072f16219554eb3521ee6a0073422539260b3a68d40a79af92721147ca331c27edc01bd74f996d9cd348287ad2c74c7abe5a9267869a96c446ff87c08382300e68438dadfbe00526e585fe7477f4799a79cc5d3ec45161bd1daed0891cd7c617df72cd46b3b159c3a78c0c8b65055d5e3deabb2e125f6f5d0b2d120f4e3f3ced4a0aecca782cfc042fa79ab211dfa62102867a7048d331fb52f530a72279eb61fd2a234e71d5d456fe584e84f75d2e905110a7605460eb174cdf7a89af104edcdb03ecd18d866cb2371998c33b5d0776be5"], 0xe5}}, 0x0) 03:46:22 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:22 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000048036915fa2c1ec28656aaa79bb94b46fe0000000700020800008c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) 03:46:22 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000006800036915fa2c1ec28656aaa79bb94b46fe0000000700020800008c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) 03:46:22 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff000a, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) [ 3414.655554] FAT-fs (loop5): bogus number of reserved sectors [ 3414.665297] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3414.745305] FAT-fs (loop5): bogus number of reserved sectors [ 3414.751161] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:22 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xca0b0000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x2, 0x800) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040)}, 0x8026}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) modify_ldt$read_default(0x2, &(0x7f0000000540)=""/4096, 0x1000) fstat(r2, &(0x7f0000001540)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 03:46:22 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:22 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0xc6, "d0b611d2036b74961eeb6a53e7cb3a66d88605c9636bd8418978a22dcffc92e3a245704c4e3c75e45e03b0e70628163098f7603d84fba82376c62884ea3904f064e689a061a3aa988b70090e163d94edfa584ab95eb1d871245fae20c1273b6284d3788ed1de566a14b1a40dbb2f145fda17bc7507fd83a941c13b69b65b272b608ef5dcaf18471cf22a20d762bf72e796465ace337b2a19f427af662a256d715d1ab8afa7df2579eef7692a43a82dfe34051ba11ed53ca50c191a6512d9e7a332a54cd97d54"}, &(0x7f0000000140)=0xce) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r2, 0x1, 0x100000000}, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000150a0004000000000000000000000000de9ecb00e6e521b805632c4a4517e809df71ae29f00098db372b4060b6b552d65dc7cbd89d2fecceea507f960cd4801d047557ead2d39a664e09c0b78c25404617af5defe6957020ec6954d83c55cef196d72bf54cb69d9a18c559edef7ffff4c05fc025e09d01e4654cbb8c7a1834cc429293cac8d84bc7f9c72196355bee422a54ceeca796"], 0x14}}, 0x0) 03:46:22 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xa000000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:46:22 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0010, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:23 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:23 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x15, 0x8, 0xfffffffffffffffd}, 0x1}}, 0x1) 03:46:23 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff01000000050000000000000b036915fa2c1ec28656aaa79bb94b46fe0000000700020800008c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) 03:46:23 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x2, 0x800) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040)}, 0x8026}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) modify_ldt$read_default(0x2, &(0x7f0000000540)=""/4096, 0x1000) fstat(r2, &(0x7f0000001540)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) [ 3415.422136] FAT-fs (loop5): bogus number of reserved sectors [ 3415.439091] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:23 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x50) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0xb0, "7256ee6063c403659e2d39146a0e848bbed02bd01d5f1f145afe1e29e80e70f276eb71b39cea2555d4604e54c2463b8e7c95c93fed79e99ba90f54e71e55f1e5fd1561c6bb294555caa6a154d9fe344b29f380e5b8bdda64ce9083d21d454e836591a4769f31a4c0a0855b1e05500d78b9a5838868cf0665c75f3a3b4ed1746c4831716e19ba04259b934f481fe6804c840dc892664241812dc54eacb32e6784895f6318bd9972255305fd317acb927c"}, &(0x7f0000000100)=0xb8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e22, 0x1, @local, 0xfffffffffffff001}}, [0x7fff, 0x7, 0x0, 0x400, 0x10, 0x0, 0x800, 0x4, 0x7, 0x100000001, 0x2, 0x8, 0x8, 0xffff]}, &(0x7f0000000240)=0x100) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x15, 0xa, 0xfffffffffffffffd}, 0x14}}, 0x0) [ 3415.516064] FAT-fs (loop5): bogus number of reserved sectors [ 3415.521937] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:23 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x7b0e0000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:23 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x35890000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:23 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:23 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x40000000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:46:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x2, 0x800) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040)}, 0x8026}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) modify_ldt$read_default(0x2, &(0x7f0000000540)=""/4096, 0x1000) fstat(r2, &(0x7f0000001540)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:46:23 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x15, 0xa, 0xfffffffffffffffd}, 0x14}}, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xfffffffffffff800, 0x0) write$input_event(r1, &(0x7f0000000040)={{0x0, 0x2710}, 0xbc11dbb78b633db1, 0x3, 0x8}, 0x18) 03:46:23 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:23 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x20000, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x0, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000ddff0000000000000000000040800000008b64d32ba7f783a53b99f406c9524e4ac20c69af0600000014fcdf9926cf3d6f009f26dea0f67b9365fd6956647e77bb5643da"], 0x47}}, 0x0) close(r0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x400, 0x0) 03:46:24 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:24 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x2, 0x800) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040)}, 0x8026}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) modify_ldt$read_default(0x2, &(0x7f0000000540)=""/4096, 0x1000) fstat(r2, &(0x7f0000001540)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:46:24 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3416.336844] FAT-fs (loop5): bogus number of reserved sectors [ 3416.365662] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:24 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff000d, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:24 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:24 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x15, 0xa, 0xfffffffffffffffd}, 0x14}}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x4, 0x1ffff) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000140)={0x0, 0x1, 0x0, [], &(0x7f0000000080)={0x98f904, 0x0, [], @ptr=0x2}}) r2 = accept4(r0, 0x0, &(0x7f0000000000), 0x80000) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=0x0, &(0x7f00000001c0)=0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={r3, 0x140000000000000, 0x100}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYBLOB="5c03007f462f9da4a3e7b0ba78cdac4f7424beab3949d72d33ed8821fbbce69a0c35c5ef52daadb9bbf9a52892181d110c28f040549e9090ff429346dff32161e95f75fe03d699f369f8119efefc8b649781d771676a86e6024372ed539fd4304cede0003c2b68890b9c2aefe808482e0fc007812c7eade42e90759b2547a80107dfebb327eeee321121d06234f3423be9f4d20423754767f9fafbff5ec660951a69e4505c5bcdd5ff59b81d80c7c35115c5b5b9297410379392736177d74688b4e7bb523112f8e8f8cde4df2a2c64d860baa895916453ecf03197e33d86287bad8f7d2cfaf83c4b5318ce02d71c2c578ea9158e8be154a04d94f5de6420c3c38e93d9219088ce02e5451f62730c380000000059a66db0aa402a33ee0a188d24cfa970de8305721e0000000000e1"], &(0x7f0000000280)=0xa4) 03:46:24 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x4d04, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:46:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x2, 0x800) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040)}, 0x8026}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) modify_ldt$read_default(0x2, &(0x7f0000000540)=""/4096, 0x1000) fstat(r2, &(0x7f0000001540)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:46:24 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x1a060000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) [ 3416.900091] __nla_parse: 19 callbacks suppressed [ 3416.900104] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:46:24 executing program 0: r0 = memfd_create(&(0x7f0000000080)='security.evm\x00', 0x2) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f00000000c0)={0x1, 0xfffffffffffffffd, {0x800, 0x5, 0x9da9}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr$security_evm(r1, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000040)=@ng={0x4, 0xf, "0cab9f890c1d2cb8439ee7d7e5ae92"}, 0x11, 0x3) 03:46:24 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3417.137199] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:46:25 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3417.319678] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3417.340264] FAT-fs (loop5): bogus number of reserved sectors [ 3417.351953] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x2, 0x800) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040)}, 0x8026}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) modify_ldt$read_default(0x2, &(0x7f0000000540)=""/4096, 0x1000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:46:25 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000013036915fa2c1ec28656aaa79bb94b46fe0000000700020800008c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) [ 3417.417031] FAT-fs (loop5): bogus number of reserved sectors [ 3417.425749] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:25 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000025b3a3ac167a11b294de150afd88cf247711fb7844d6e4716ed0f5340463bc5f98234e0a2b01c5dcd7ed0052c449bced5c6efb741128166aa3844ec38617b0914bc947c71e99176c56c64d55de9c9339bfc95cf5e640d7df49bea4491ecdb942835cf44c6527500987425aa5a04280"], 0x14}}, 0x0) socketpair$inet6(0xa, 0x3, 0x60, &(0x7f0000000000)) [ 3417.471762] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:46:25 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcc75bc7f, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:25 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:25 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0xffffffffffffff36, 0x10, 0xa, 0xfffffffffffffffd}, 0x14}}, 0x0) mount$9p_tcp(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x11, &(0x7f00000000c0)={'trans=tcp,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@noextend='noextend'}, {@uname={'uname'}}, {@access_any='access=any'}], [{@subj_role={'subj_role', 0x3d, '{)eth1:'}}, {@smackfsdef={'smackfsdef', 0x3d, 'vboxnet1/})*'}}]}}) 03:46:25 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x890000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:25 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x4c00000000000000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) [ 3417.796525] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:46:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x2, 0x800) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040)}, 0x8026}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:46:25 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:25 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)=ANY=[@ANYBLOB="14000000950afdff000000000000000000000000"], 0x14}}, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x1, 0x200000) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000080)=""/231) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x7) [ 3417.968788] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:46:26 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:26 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000004036915fa2c1ec28656aaa79bb94b46fe0000000700020800008c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) [ 3418.103590] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:46:26 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x468e0000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) [ 3418.202822] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:46:26 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x1ff) syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x2, 0x800) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040)}, 0x8026}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 3418.296444] FAT-fs (loop5): bogus number of reserved sectors [ 3418.303717] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:26 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1, 0x80) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x15, 0xa, 0xfffffffffffffffd}, 0x14}}, 0x0) 03:46:26 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3418.361604] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3418.452299] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3418.479564] FAT-fs (loop5): bogus number of reserved sectors [ 3418.505461] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:26 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x2f040000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:46:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x2, 0x800) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040)}, 0x8026}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:46:26 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff01000000050000000000000f036915fa2c1ec28656aaa79bb94b46fe0000000700020800008c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) 03:46:26 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0003, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:26 executing program 0: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x110) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x10000, 0x30}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000240)={r1, 0x1e, "71149a9fb8d3b52bd0ac2198e75e63f924ec31e1e9c750c3fd0eefe46745"}, &(0x7f0000000280)=0x26) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$getname(0x10, &(0x7f0000000000)=""/177) r3 = semget$private(0x0, 0x4, 0x8) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f00000000c0)='syzkaller0\x00') semctl$IPC_RMID(r3, 0x0, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x15, 0xa, 0xfffffffffffffffd}, 0x14}}, 0x0) 03:46:26 executing program 0: socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000300)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x5, 0x181000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000700)={&(0x7f0000c78ff4)={0x10, 0x0, 0x0, 0xa000000}, 0xc, &(0x7f0000df6000)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x278}, 0x1, 0x0, 0x0, 0x8000000000000000}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000580)={0x0, 0x1, 0x3, [0x19d1b2a0, 0x1, 0x3]}, &(0x7f00000005c0)=0xe) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000600)={r2, @in={{0x2, 0x4e20, @rand_addr=0x10001}}, 0x400, 0x3}, 0x90) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/autofs\x00', 0x8100, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000340)=@assoc_value={0x0}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000980)={r4, @in={{0x2, 0x4e22, @loopback}}}, 0x2b) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f00000004c0)=[@in6={0xa, 0x4e24, 0x9, @local, 0x5}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e22, @rand_addr=0x1}], 0x4c) r5 = getpgrp(0xffffffffffffffff) ptrace$poke(0x5, r5, &(0x7f00000006c0), 0xca5) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000480)) 03:46:26 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3419.106723] FAT-fs (loop5): bogus number of reserved sectors [ 3419.114425] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:27 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcb110000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:27 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x2, 0x800) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040)}, 0x8026}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:46:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f00000000c0), 0xc, &(0x7f0000df6000)={&(0x7f0000000100)=ANY=[]}}, 0x0) [ 3419.174149] FAT-fs (loop5): bogus number of reserved sectors [ 3419.183945] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:27 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x4f040000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:46:27 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x15, 0xa, 0xfffffffffffffffd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x20, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000080)=0x3000) ioctl(r0, 0xfffffffffffffffd, &(0x7f0000000000)="f6c96d") 03:46:27 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3419.480533] FAT-fs (loop5): bogus number of reserved sectors [ 3419.505421] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3419.567107] FAT-fs (loop5): bogus number of reserved sectors [ 3419.572966] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:27 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x2c880000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x2, 0x800) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040)}, 0x8026}, 0x0, 0x0, 0xffffffffffffffff, 0x8) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:46:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x15, 0xa, 0xfffffffffffffffd}, 0x14}}, 0x0) getitimer(0x0, &(0x7f0000000000)) 03:46:27 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:27 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x3e130000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:27 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x8, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:46:27 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:27 executing program 0: socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x608, 0x228, 0x0, 0x228, 0x448, 0x448, 0x538, 0x538, 0x538, 0x538, 0x538, 0x6, &(0x7f0000000040), {[{{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xa}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x40ec}}}, {{@uncond, 0x0, 0xc8, 0x110}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x26, 0xc, 0x5}}}, {{@ipv6={@loopback, @ipv4={[], [], @remote}, [0xffffff00, 0x0, 0xffffff00, 0xff], [0xff000000, 0xffffffff, 0xffffffff, 0xffffffff], 'ipddp0\x00', 'ifb0\x00', {}, {0xff}, 0x16, 0x2400000000000}, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xf9, 0x401, @ipv4=@multicast2, 0x4e20}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x4}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x7}}}, {{@uncond, 0x0, 0xc8, 0xf0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x668) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x15, 0xa, 0xfffffffffffffffd}, 0x14}}, 0x0) 03:46:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x2, 0x800) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 3419.838759] FAT-fs (loop5): bogus number of reserved sectors [ 3419.856461] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:27 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3419.903020] FAT-fs (loop5): bogus number of reserved sectors 03:46:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x15, 0xa, 0xfffffffffffffffd}, 0x14}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x20, 0x4000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}}, 0x0, 0x1e, 0x7, 0x4, 0x4}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x5}, &(0x7f0000000180)=0x8) [ 3419.944934] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:27 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:28 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff01f4, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:28 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:28 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x74, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:46:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x2, 0x800) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040)}, 0x8026}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:46:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x15, 0xa, 0xfffffffffffffffd}, 0x14}}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x5, 0x200000) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f0000000080)={0x90, 0x7ff, 0x2, [], &(0x7f0000000040)=0x200}) 03:46:28 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x848f0000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:28 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x6) ioctl$int_out(r0, 0x2, &(0x7f0000000040)) 03:46:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x2, 0x800) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040)}, 0x8026}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 3420.667076] FAT-fs (loop5): bogus number of reserved sectors [ 3420.672945] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:28 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000011036915fa2c1ec28656aaa79bb94b46fe0000000700020800008c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) [ 3420.781986] FAT-fs (loop5): bogus number of reserved sectors [ 3420.791444] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000150afdff000000000000000000000000068a0da1c8ff3e029f5346756729b51a9572124b7dbcce6535cd"], 0x14}}, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000000)) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x8) 03:46:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x2, 0x800) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040)}, 0x8026}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:46:29 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000008036915fa2c1ec28656aaa79bb94b46fe0000000700020800008c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) 03:46:29 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x44c, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:46:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x2, 0x800) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040)}, 0x8026}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:46:29 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xdd71cf7f, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:29 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)=ANY=[@ANYBLOB="1400ff00150afdff000098f210613200000000"], 0x14}}, 0x0) 03:46:29 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x70d87f, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x2, 0x800) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040)}, 0x8026}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:46:29 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:29 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x2, 0x15, 0xa, 0xfffffffffffffffd, 0x0, 0x0, {0x2}}, 0x2}}, 0xfffffffffffffffc) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x4, 0x220002) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000040)={0x0, 0xff, {0x8, 0x32, 0x100000001, 0x9}}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1e) [ 3421.618294] FAT-fs (loop5): bogus number of reserved sectors [ 3421.626274] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:29 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:29 executing program 0: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x2, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='setgroups\x00') ioctl$TIOCNXCL(r1, 0x540d) pwrite64(r0, &(0x7f0000000040)="142d6410c3d170425e11123f595e7dd83c7c708330e9461843927dffa7a6341afd945884389de9fc771189", 0x2b, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x15, 0xa, 0xfffffffffffffffd}, 0x14}}, 0x0) 03:46:29 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x900000000000000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:46:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x1ff) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040)}, 0x8026}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(0xffffffffffffffff) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:46:29 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:29 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x3570d77f, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) [ 3421.951746] __nla_parse: 19 callbacks suppressed [ 3421.951757] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3422.030306] FAT-fs (loop5): bogus number of reserved sectors [ 3422.046251] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3422.103313] FAT-fs (loop5): bogus number of reserved sectors [ 3422.109620] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:30 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xd30c0000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:30 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0x0, 0xa, 0x0, [], [{0x80000001, 0x8000000000000, 0xfffffffffffffff7, 0x3, 0x4, 0x7fff}, {0x3ff, 0xfffffffffffffffd, 0x10001, 0xfff, 0x200, 0x7}], [[], [], [], [], [], [], [], [], [], []]}) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000150afdff00000000000000000000ffff9f0bfcc818b5a0d042134a06453d8bdae7eadfc8fae1079439c61e0442cb62f4e4935b603d60c7a084a5f2c6c11cd361404a31dfb4f813380311a6cee3b0068708cdbd4721b0cf85c37fe0cbddd32fe5709b769d587b31362dd040c700000000000000000000000000"], 0x14}}, 0x10000000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/autofs\x00', 0x200, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000400)={0x3, 0x3d1}) 03:46:30 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x2, 0x800) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040)}, 0x8026}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:46:30 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x20000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:46:30 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@mcast2, @in=@multicast1}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f00000004c0)=0xe8) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) sendmsg$nl_netfilter(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xfffffffffffffeb1, &(0x7f0000df6000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c010000150dfdff0000000000000000000000006a8e486b58264833864e1d83022ee0251480ac44e4533f6da8226dae581a478565a282b01578094a86e0a503b5e9ce7bb5a8df1a543f958b944be75c8d80cea0455937847166be98cac773158314b622435ac704f24737bb21bf0bc241d64db4c1deca9094d313523617e128c6810f2c37599b3f064dc8cf9cb28959b69f29b87857b239ebc1d9981b18bc73b45881486b8928fb9ff9d9b62e61314cc628236201d0000000000000000000000000"], 0x12c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 03:46:30 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3422.424928] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3422.457586] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3422.537976] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3422.567577] FAT-fs (loop5): bogus number of reserved sectors [ 3422.573590] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3422.577657] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:46:30 executing program 4: r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x2, 0x800) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040)}, 0x8026}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:46:30 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000000140)=ANY=[@ANYBLOB="141ee11e00000600150a000000ddc26d5ffdbb18f96740910b3f7e05bc6bfd60ce431a99d777c6fef79b4ce03a2186f51da0eaf957d0baad4dd3233de3e7fdf926693536e187de4e46e9"], 0x14}}, 0x0) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '-'}, {0x20, 'cgroupxGPL\'vmnet0'}], 0xa, "fa7192f0efc4b8e9cb0689d6158c47a1c46e7cac902a197eb5003e588803ffac5066830252ec0e2e1cf4ec797044b8365cf88a1ace36ab4d743c8636765801c8341bfccfefac4cef0b99b81e68b8b42f5cf0b9a86fb6c4964b44a27b46a3698a633a7bfdd69b1ad869c5bb6347d9a9e2086461a968a28e454ecc04c645134528c8cfea52464d3494fb39078771ab1ce15ee43b2513e9a3c26c645fd0d3652bfc2ba98957642821c448c2c42779559a6a0d9a4f5c14d413ca9f5b853772683f92019eae22bd97132007e4ad5fe1b1e4b37a37c0c0b06b83289aca647bec9ffbc5e9ecba5a792bf87d6753eae2c28b8d54"}, 0x10f) 03:46:30 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3422.644606] FAT-fs (loop5): bogus number of reserved sectors [ 3422.673953] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3422.731355] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:46:30 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000150afdff000000000000000000000000ce9ffff2168eb27e2d6ad16f6b624d"], 0x14}}, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'veth1\x00', {0x2, 0x4e24, @loopback}}) 03:46:30 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x90000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:31 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xb00e0000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:31 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:31 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x2000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:46:31 executing program 4: r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x800) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040)}, 0x8026}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:46:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x15, 0xa, 0xfffffffffffffffd}, 0x14}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6}}, &(0x7f0000000180)=0xe8) r3 = syz_open_dev$admmidi(&(0x7f0000000840)='/dev/admmidi#\x00', 0xf05, 0x10100) setsockopt$inet_udp_int(r3, 0x11, 0x1, &(0x7f0000000880)=0x4, 0x4) sendmsg$nl_netfilter(r0, &(0x7f0000000800)={&(0x7f0000000040), 0xc, &(0x7f00000007c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000240120000c0055000104000000000000fa2ee925bd722763bbecfc7ff4fc2914cb0dfbf861c9aac66330e9efaf41dfa61798ee7ba4f3bc9f42a41903f93fee7a79f0d729cbb245bada7312c5ca371a17b9c529dead9f784f6d4954f3796a87bfc3ad4ad9f665f68475e7281fb6ce15a88f99a772ee91fa0cdf6403e232bf99fa6774ead7991bf6b04df0b5b923b35d11b5999109ea35ca86dbf4297423e319d0dbebc297deba277610c901cf91e6cc1a715637abc88fb9f96723e42f2b92c7355800db507f2c9b73e87aaec28064cbcf192cf7a52184c629f0da5ea39d927181c23dc32e3090637e8276709b901c25680a9996905d59d99e410d4157b9d500f4d734eb8758999acd55348de215291bb45f4fe59cc9570774df2427fd856d0e428a00000008501093f20e98f3523c7e3c082ee47d8826ac720eda5716ae0343b7880c01594ecff83523641f704294492ee2cc9e2c446f18e6de52f1f2b6f49f049648a65d037da923b746166f95c220c11d7085926e9d5dcd70a78d2aff48381a5d4ba6d7a6fe78280def255a3b8ca755ef24288f0d83cc35f7a5da3373f742ce29f549bfc27b7c7cdf53624c95142382c4c8ddfc4b030a3e45335b02b6ba2b50dafdf6b4c21b67c1527b88dbb2bd69c1e9d296c764acad38021f5f7e963145edc63160af5739833606eafa4029159a43736cb39086b2267d87cf41bb4d8c9021716a13158714005b000000000000000000000000000000000190005b0008008f00c5a3e5497d9d6db882980f9c85b0c3c84344ed06e64ce913bb59a43fd55476b265e50e375fd5d67b38be6f0e59c45100c0d82c40628f00463b2638f313a247274dae330209d2b49c4f57b77fe0837e2910f02b5de81a87707918b9417c74bc9c3bcf66fe5660728988cb28d72889967bb6b2bae9c93376be8b26de456c350b29233aba3da2c17ee281b2a61ba5f06ba9eff672", @ANYRES32=r2, @ANYBLOB="08009300000000001c0081002f70726f632f73656c662f617474722f657865630000000008005300", @ANYRES32=r1, @ANYBLOB="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"], 0x5ec}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f0000000200)=""/19) [ 3423.436617] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:46:31 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x7, 0x10000, 0x3f, 0x7e00000000000000, 0x8, 0x10001, 0xcca, 0x10000}, &(0x7f00000000c0)={0x8001, 0x9b, 0x3, 0x2, 0x9, 0x2af, 0x7, 0x4}, &(0x7f0000000140)={0x8, 0x1, 0x4, 0x5, 0xfffffffffffff59d, 0x0, 0x8000, 0x1}, &(0x7f00000001c0)={r2, r3+30000000}, &(0x7f0000000240)={&(0x7f0000000200)={0x80}, 0x8}) sendmsg$nl_netfilter(r1, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x15, 0xa, 0xfffffffffffffffd}, 0x14}}, 0x0) 03:46:31 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3423.544018] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3423.558827] FAT-fs (loop5): bogus number of reserved sectors [ 3423.580347] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:31 executing program 4: r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040)}, 0x8026}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:46:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000000100)={0x14, 0x15, 0xa, 0xfffffffffffffffd}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000040)={'security\x00'}, &(0x7f00000000c0)=0x54) 03:46:31 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3423.647738] FAT-fs (loop5): bogus number of reserved sectors [ 3423.660562] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:31 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x23870000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:31 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x7ffffffffffff, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) [ 3423.739533] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3423.923268] FAT-fs (loop5): bogus number of reserved sectors [ 3423.930063] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3423.997227] FAT-fs (loop5): bogus number of reserved sectors [ 3424.012350] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:32 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x110e0000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x15, 0xa, 0xfffffffffffffffd}, 0x14}}, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000100)=@get={0x1, &(0x7f0000000000)=""/253, 0xa724}) 03:46:32 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:32 executing program 4: r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040)}, 0x8026}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:46:32 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x2000000000000000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) [ 3424.371104] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:46:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1, 0x22080) ioctl$TIOCNXCL(r1, 0x540d) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000080)) r2 = openat$ppp(0xffffffffffffff9c, 0xfffffffffffffffd, 0x200, 0x0) ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f0000000000)) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x15, 0xa, 0xfffffffffffffffd}, 0x14}}, 0x0) 03:46:32 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3424.509556] FAT-fs (loop5): bogus number of reserved sectors [ 3424.524492] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:32 executing program 4: r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040)}, 0x8026}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:46:32 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3424.615420] FAT-fs (loop5): bogus number of reserved sectors [ 3424.627855] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)=ANY=[@ANYBLOB="14000000150a0200000000000000000000000001"], 0x14}}, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x40000, 0x0) write$apparmor_exec(r1, &(0x7f00000004c0)={'exec ', 'eth0\x00'}, 0xa) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x1000, 0x6, &(0x7f00000003c0)=[{&(0x7f0000000080)="464c7ed0dee05c79c8421eed91d8fac4b9a64b1b798dd27256b94fab95d33afd6b284585bf33adda7a791c46", 0x2c, 0x7ff}, {&(0x7f00000000c0)="8c408b204d8f5308097e6aa385d6d4c9429a00bbbcf39f29b9a20d399d00bd30de6144bd3002cec72f3115fbcf4213d2ea747fb4129fc9f88583d7c12c8d5a7b12c055760f42d68720406a41dd8f57380d16e9b89ad2b56501d7ca1f8761c03ff7530437aa65bc98e94e4533aed95a5fada71c3eda766339c045ba907c8f85c0bdaac91eb675ffdef6c33a3f0a09eb69fe3488d5024f752c59260d0f9ee2118743acb9127e8c73a53926abd8", 0xac, 0x3f}, {&(0x7f0000000180)="31cc8f2740d2595e01aa50", 0xb, 0x6}, {&(0x7f00000001c0)="2dc7304bf791e91e8d90d4debfd0b203f8e07625c046c2b9ee74c9c8f97faeccd2fab319e54043d2e7dc9e8506d06f9b9d9e582c43c301c6e7c24ad1f662ed5a1ccdd74a77ed035b9ccb2a4b7f8e58d5ca2c9bb8a5b0b8619c869757e5f21bf40e1799d409d03c1bafb1d40c4aef6567f225838e3202c44c5874b338a126dda00023d6a48abf716550af30a888544d16f47842381fe863c8a6f0063446c11bffe7a0ac28508a6d5df836da3ba5e39ece4bc79ba0ead9c84135d0c5340c430ab8a3247a8bfb01e5e5ed71f4e4b77e8c2f593a0041f4c0c8df42e2a875973a689075ca384bdecf979d3e5387437b87ef2812b769cbb27d", 0xf6, 0x9}, {&(0x7f00000002c0)="ee1be1211e5ad547", 0x8, 0x200}, {&(0x7f0000000300)="be7be90108e4f46f715f87ee8eaea49e8156774a064bd35a0f7b3fc840db2062fcc4b9c395ddcc5bb44ec356c904c667b6a7e5fd06b617961d391bb5d8016f5f3f08ad892d131638527f451d204a485355cf35a459e10523819641f900609a04dfaccd08db537a54ebb6a981242ac59a9bfb3a2d23efb777878480054f2db2be6dcc3d39d02b896ac51df2903b51f618a7561f73e3e5bdf6bd2d0b41f0c1f13a6144b889ade6c550479e3b597b98", 0xae}], 0x810, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000500)=0xbc0b) getsockopt$netlink(r0, 0x10e, 0x1, &(0x7f0000000580)=""/174, &(0x7f0000000480)=0xae) 03:46:32 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xdd71cf7f, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:32 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff983a, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:32 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:32 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xf5ffffff00000000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:46:32 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:32 executing program 4: r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040)}, 0x8026}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 3424.914441] BFS-fs: bfs_fill_super(): No BFS filesystem on loop0 (magic=01e97bbe) [ 3424.937645] FAT-fs (loop5): bogus number of reserved sectors 03:46:32 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3424.961224] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3424.999537] BFS-fs: bfs_fill_super(): No BFS filesystem on loop0 (magic=01e97bbe) 03:46:33 executing program 4: r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040)}, 0x8026}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:46:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000100)={'bond_slave_0\x00', {0x2, 0x4e21, @loopback}}) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000000000)=ANY=[@ANYBLOB="14062bfb00000015050000000000000000000000000000e9b56b97beec82525aadd5a2fde06f6da9424f0ada676cd210f83446cf26d0601419406ee15a73447e2f556dd0ddd524a5ff56e00f1afce01bfb574db0acca1927c8dd6f0a0ac1fae048d1b2a78122c193bd"], 0x14}}, 0x0) r1 = gettid() ptrace$setregset(0x4205, r1, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)="8347188cc661e81ddcbae04eed7283ba2b88967657", 0x15}) tkill(r1, 0xb) [ 3425.050051] FAT-fs (loop5): bogus number of reserved sectors [ 3425.074174] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:33 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:33 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x6275be7f, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:33 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000000000000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) [ 3425.379381] FAT-fs (loop5): bogus number of reserved sectors [ 3425.397452] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3425.459214] FAT-fs (loop5): bogus number of reserved sectors [ 3425.467560] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:33 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbfff401, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:33 executing program 4: r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040)}, 0x8026}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:46:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000000000), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x15, 0xa, 0xfffffffffffffffd}, 0x14}}, 0x0) 03:46:33 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:33 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xe58e0000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:33 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xa00, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:46:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000001080)=ANY=[@ANYBLOB="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"], 0x1014}}, 0x0) 03:46:33 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:33 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000000036915fa2c1ec28656aaa79bb94b46fe1200000700020800008c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) [ 3425.880802] FAT-fs (loop5): bogus number of reserved sectors [ 3425.893074] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000000040), 0xc, &(0x7f0000df6000)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000150afdff0049bbc83367c2e71c9b0000109b368b6d9b8e608862f178152888481df2defb6f92114d285c182a474926"], 0xffffffffffffffbb}}, 0x0) 03:46:33 executing program 4: r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x8026}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:46:34 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xb90f0000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) [ 3425.995955] FAT-fs (loop5): bogus number of reserved sectors [ 3426.001818] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:34 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0005, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:34 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x15, 0xa, 0xfffffffffffffffd}, 0x14}}, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x22082) 03:46:34 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x6c00000000000000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:46:34 executing program 4: r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:46:34 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x15, 0xa, 0xfffffffffffffffd}, 0x14}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000300)={0xb, @win={{0x2, 0x0, 0x0, 0x48}, 0x7, 0x0, &(0x7f0000000200)={{0x200, 0x9, 0x5, 0x100}, &(0x7f00000001c0)={{0x690, 0x8, 0x8, 0x8001}, &(0x7f0000000180)={{0x98ac, 0x3, 0x9, 0xa30}}}}, 0x101, &(0x7f0000000240)="2b91dc2ec8c93a38c51abd1012f5e14779adb53fcb4641010c166e68e9c9816e9dae38624679811988017e15205e72abb5359b719ecb062211724b720620dbdd5dca19b3c6faba9d9dcca803df79b4adad38ea3d04841ef887a32113cce7e0e0a3cdaf534680670be7fc0254cef4c6868f29a500cb669207173247c247129895426244a5", 0x7}}) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x2000, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x1, 0x9f98}, &(0x7f00000000c0)=0xc) socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000400)={0xbb2e, 0x1, 0x800, 0x1, 0x80}, 0xc) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000100)={r3, 0x100000000}, &(0x7f0000000140)=0x8) 03:46:34 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3426.768858] FAT-fs (loop5): bogus number of reserved sectors [ 3426.786482] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:34 executing program 4: r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:46:34 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:34 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xd576b77f, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) [ 3426.867874] FAT-fs (loop5): bogus number of reserved sectors [ 3426.899245] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x15, 0xc, 0xfffffffffffffffd}, 0x14}}, 0x0) ioctl$TIOCCBRK(r0, 0x5428) 03:46:35 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0007, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:35 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000000036915fa2c1ec28656aaa79bb94b46fe0000003f00020800008c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) 03:46:35 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xf4ffffff00000000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:46:35 executing program 4: syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(0xffffffffffffffff) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:46:35 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x4, 0x7f, 0x7fff, 0x6, 0x1ff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000a8d000)={&(0x7f0000c78ff4)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x15, 0xe, 0xfffffffffffffffd, 0x70bd27}, 0xffffffffffffff9a}, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) 03:46:35 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x23100000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) [ 3427.527428] __nla_parse: 20 callbacks suppressed [ 3427.527440] netlink: 124 bytes leftover after parsing attributes in process `syz-executor1'. 03:46:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0xffffffffffffffcf, 0x15, 0xa, 0xfffffffffffffffd}, 0x14}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x8800, 0x0) r1 = memfd_create(&(0x7f0000000000)='ð1keyringvmnet0cgroupselfcgroup+cpuset.,wlan1![(nodevbdevvboxnet1\a\x00', 0x3) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000080)) 03:46:35 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3427.671963] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3427.699309] FAT-fs (loop5): bogus number of reserved sectors [ 3427.715555] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:35 executing program 4: r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 3427.749551] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:46:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r1, 0x29, 0x3f, &(0x7f0000000080)=@srh={0x3c, 0x4, 0x4, 0x2, 0xffffffffffff8000, 0x20, 0x6, [@remote, @empty]}, 0x28) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x15, 0xa, 0xfffffffffffffffd}, 0x14}}, 0x0) 03:46:35 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0013, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:35 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000000036915fa2c1ec28656aaa79bb94b46fe1100000700020800008c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) [ 3427.810099] FAT-fs (loop5): bogus number of reserved sectors [ 3427.846618] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3427.869586] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:46:36 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0002, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:36 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:36 executing program 4: r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:46:36 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4)={0x10, 0x0, 0x0, 0x100102a0}, 0xc, &(0x7f0000df6000)={&(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0x24}, 0x1, 0x0, 0x0, 0xffffffffffffffff}, 0x0) 03:46:36 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x8000000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:46:36 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbfff401, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:36 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3428.436816] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:46:36 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x15, 0xa, 0xfffffffffffffffd}, 0x14}}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x10000, 0x0) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000040)) [ 3428.533768] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:46:36 executing program 4: r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:46:36 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3428.592716] FAT-fs (loop5): bogus number of reserved sectors [ 3428.616040] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:36 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x15, 0x7, 0xfffffffffffffffd}, 0x14}}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0xc0000, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000080)) getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f00000000c0)=""/253, &(0x7f00000001c0)=0xfd) [ 3428.675843] FAT-fs (loop5): bogus number of reserved sectors [ 3428.681888] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3428.732346] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:46:36 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xde77b27f, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:37 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff1802, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:37 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x4800, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:46:37 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:37 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x80000, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000180)={0x0, 0x3c, "7673eb993071bd52f0e2e542f85a3cec33d6d06bfc22095b1cb46f31848f10b707fa4494875dc2dc4421dd8bbe23141a478f0a3289323a252e6b3f52"}, &(0x7f0000000200)=0x44) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={r2}, &(0x7f0000000100)=0xffffffffffffffb1) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000140)={r3, 0xfffffffffffffc00, 0x8, [0x0, 0x100000000, 0x10000, 0x100, 0x101, 0x2e5, 0x4, 0x1f]}, 0x18) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000080)={r0}) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000000000)=ANY=[@ANYBLOB="74f22fca0a9b53d563d214000000150afdf7000000000000000000000000"], 0x14}}, 0x0) 03:46:37 executing program 4: r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:46:37 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x9930000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) [ 3429.439264] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:46:37 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000000036915fa2c1ec28656aaa79bb94b46fe4c00000700020800008c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) 03:46:37 executing program 0: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/user\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x15, 0xa, 0xfffffffffffffffd}, 0x14}}, 0x0) 03:46:37 executing program 4: r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 3429.536890] FAT-fs (loop5): bogus number of reserved sectors [ 3429.557584] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:37 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000240)='/dev/snd/controlC#\x00', 0x5, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000300)='/dev/dsp#\x00', 0x8, 0x400000) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000340)={0x8, @pix_mp={0x1, 0x73a, 0x7977775f, 0x6, 0xc, [{0x81, 0x8}, {0x8001}, {0x6, 0x4}, {0x2, 0x4}, {0x7, 0x604b9c3e}, {0x9, 0xf8}, {0x52, 0x10001}, {0x100000001, 0xa7}], 0x6, 0x2, 0xb, 0x0, 0x4}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000df6000)={&(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x8}, 0x1, 0x0, 0x0, 0xfffffffffffffffc}, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x80, 0x0) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000280)=0x80) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000180)={0x5}, 0x1) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x200000000000000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000200)={r4}) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x80002, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000080)={'ipvs\x00'}, &(0x7f00000000c0)=0x1e) [ 3429.619444] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3429.636006] FAT-fs (loop5): bogus number of reserved sectors [ 3429.652889] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:37 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:37 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x5204000000000000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) [ 3429.774502] Unknown ioctl -1073191904 [ 3429.787284] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3429.806937] Unknown ioctl -1073191904 03:46:37 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x7c72cc7f, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:37 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:37 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x15, 0xa, 0xfffffffffffffffd}, 0x14}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setitimer(0x2, &(0x7f0000000040)={{r1, r2/1000+10000}, {0x0, 0x7530}}, &(0x7f0000000080)) 03:46:37 executing program 4: r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:46:37 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000000036915fa2c1ec28656aaa79bb94b46fe6000000700020800008c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) [ 3429.953275] FAT-fs (loop5): bogus number of reserved sectors [ 3429.972427] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3430.129720] FAT-fs (loop5): bogus number of reserved sectors [ 3430.145351] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:38 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x1a0f0000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:38 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)=ANY=[@ANYBLOB="14000000150afdff000000000000da0000f72e00"], 0x14}}, 0x0) 03:46:38 executing program 4: r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:46:38 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:38 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x2000000000000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:46:38 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x200000, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000000080)={0x14, 0x15, 0xa, 0xfffffffffffffffd}, 0x14}}, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) r2 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x80000001, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000001}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000002000020026bd7000fbdbdf250a14340300000000010000040000010014000200ff010000000000000000000000000001"], 0x34}, 0x1, 0x0, 0x0, 0x24008800}, 0x4000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x200, 0x0) 03:46:38 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3430.416965] FAT-fs (loop5): bogus number of reserved sectors [ 3430.445713] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3430.491429] FAT-fs (loop5): bogus number of reserved sectors [ 3430.500631] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:38 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcb080000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:38 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:38 executing program 4: r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 03:46:38 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0xd, 0x0, 0x9, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r3, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40041}, 0x200400c0) accept$nfc_llcp(r1, 0x0, &(0x7f0000000240)) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x15, 0xa, 0xfffffffffffffffd}, 0x14}}, 0x0) r4 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x141103) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000400)=""/208) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0xde, "a684902baead5ad948e0f4510fa6710406fedcdd4fbdd4322c5eb693b5abecc2306396e779a980672cb70072a760fd26ab18b36c7bacba478ca0112cdddac1e7182bb30e4c1f92f3ecf17eed5df0e507e48e98194a4a00db9bb33a2d59f70d5f27b592be193bec174966ea7856f625d4747d447f4f96d64cfa2613db84e6a5c8c537ba1df727a06292e3527831368c305c7a0aacc88f9eb9f40773091b901e970fad0bf2280b00b50e5266519e63e6b090f0160f68f743b5cc9053806d1b1dac62eaf1299768ab42595bebb11da542efac570f070f813f94866701ae4009"}, &(0x7f0000000140)=0xe6) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000180)={r5, 0x663, 0x30}, &(0x7f00000001c0)=0xc) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f00000003c0)) 03:46:38 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x48000000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:46:38 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0d00, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:38 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:39 executing program 4: r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 03:46:39 executing program 0: lsetxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64IPOUT\x00', &(0x7f0000000080)='-)trusted/(\\\x00', 0xd, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000240)={&(0x7f0000c78ff4), 0xfd18, &(0x7f0000df6000)={&(0x7f00000000c0)=ANY=[], 0xffffffffffffff83}, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x20040010) r1 = creat(&(0x7f0000000100)='./file0/file0\x00', 0x8) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x6, 0x0, 0x10001, 0xcd52}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000180)={0x6, r2, 0x1, 0x1ff}) [ 3431.009258] FAT-fs (loop5): bogus number of reserved sectors [ 3431.025535] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:39 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0a00, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:39 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:39 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)=ANY=[@ANYBLOB="140000001509774f0afdff000000000000000000"], 0x14}}, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x3d, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000010c0)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f00000011c0)=0xe8) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000002600)) sendmsg$nl_netfilter(r0, &(0x7f00000025c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x80100000}, 0xc, &(0x7f0000002580)={&(0x7f0000001200)={0x1360, 0x3, 0x7, 0x800, 0x70bd2d, 0x25dfdbfb, {0xf, 0x0, 0x7}, [@generic="64848db7e7bcca7d7bd5503153df080ea58f3f93e53484c9f6a8e48436e2b79b21cbb07586c2bf791f60370dd6219d717a5e82282816a56cac5dfb5aa98bddc1f02b1593e429da7669e70ec970c9ee4a4d4c4f574d6f35780e40631b4f4ae4350c520eaca5847db7b3f9d921ed192dde25", @typed={0x4, 0x49}, @typed={0x8, 0x93, @ipv4}, @nested={0x190, 0x5b, [@typed={0x8, 0x4a, @fd=r1}, @typed={0x8, 0x37, @uid=r2}, @typed={0x10, 0xd, @binary="4709f1a8943c3473e346c1"}, @typed={0xc, 0x5, @str='self.\x00'}, @generic="e34ac11e83b87b56178e544e09bf90cd91e41fa532f8a1abb6a2704d6a9f3bdb172488d31739fc3724", @typed={0x14, 0x2d, @ipv6=@dev={0xfe, 0x80, [], 0x10}}, @generic="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", @generic="ba58c02330d700da54aec36d093cc0146d1578c164dee7dad2c49552b9340d", @typed={0x8, 0x4f, @u32=0x7}]}, @generic="a12c85314dde80fb19ef380f5efbefcfffd2d99621064a2bb4", @generic="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", @generic="76d792ac4e5dae5fc7f4e4a1286ba87066334f4a1929c79deaa99124b27b33e5366a48485602fddcf7ed40df0df446d936c4296c74801f5ead2b83512408eada032c2696ab3fd2095a38b282a3b6091dc9b6cdcb7c", @generic="845709ba315b13d2b579b314af6051662c306f3c7237c5af11579d8f78acc74808e0f4e1c9b291d8ba3f3c2f36703ae45ccc244b5bd59b8c4ddf637657d9163853f7e8fe2b323f87480d7eb1aefa954a815cfa8ee7ac298ddbf28852d9b07ad81e92969c7a1f5aa52e4e1e4d8a7edd6ba73a35b3e97f9518b5412231ade1b17b6583f9ba63f960bca917864b198068102128e5cf28194a6343e9abe43e569201f96d5afdc21b607e43cb712a003a1b75ded5e802d3c813cc156fcda61734dab88c6ae1c0c25d918f79ecca2e5c07e6d5"]}, 0x1360}, 0x1, 0x0, 0x0, 0x40010}, 0x800) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000040)=""/4096, &(0x7f0000001040)=0x1000) [ 3431.241138] FAT-fs (loop5): bogus number of reserved sectors [ 3431.259655] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:39 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xe672ca7f, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:39 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:39 executing program 4: r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 03:46:39 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x20000000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:46:39 executing program 0: accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0xe, 0x80800) syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x8, 0x200) socket$inet(0x2, 0x5, 0x3f) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)=ANY=[@ANYBLOB="140000"], 0x14}}, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7f, 0x4000) getsockopt$llc_int(r3, 0x10c, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) 03:46:39 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000000036915fa2c1ec28656aaa79bb94b46fe6c00000700020800008c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) [ 3431.969287] FAT-fs (loop5): bogus number of reserved sectors 03:46:40 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:40 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x3676ba7f, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) [ 3432.017586] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:40 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x100000001, 0x10001) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x2, 0x2, [0xed, 0xb61]}, &(0x7f0000000080)=0xc) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)={r2, 0x12ef8d8e, 0x5, [0x2, 0x9, 0x1, 0xfffffffffffffff9, 0x6]}, 0x12) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xfffffffffffffc86, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x25a, 0x15, 0xa, 0xfffffffffffffffd, 0x200000000000000}, 0x2b7}}, 0x0) [ 3432.088660] FAT-fs (loop5): bogus number of reserved sectors [ 3432.098019] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:40 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xfffffdea) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) splice(r0, 0x0, r3, 0x0, 0x2000000000a, 0x0) 03:46:40 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:40 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x7fffffffffffffff, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) [ 3432.392367] FAT-fs (loop5): bogus number of reserved sectors [ 3432.407118] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3432.471351] FAT-fs (loop5): bogus number of reserved sectors [ 3432.486344] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:40 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff4000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:40 executing program 0: syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x15, 0xa, 0xfffffffffffffffd}, 0x14}}, 0x0) 03:46:40 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:40 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x2610, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) [ 3432.774759] __nla_parse: 12 callbacks suppressed [ 3432.774770] netlink: 92 bytes leftover after parsing attributes in process `syz-executor1'. 03:46:40 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)=ANY=[@ANYBLOB="14000000150afdf5000000000000000000050000"], 0x14}}, 0x0) 03:46:40 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3432.882708] FAT-fs (loop5): bogus number of reserved sectors [ 3432.916919] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:40 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x96910000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:41 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x15, 0xa, 0xfffffffffffffffd}, 0x14}}, 0x0) [ 3433.003862] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:46:41 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000000036915fa2c1ec28656aaa79bb94b46fe0700000700020800008c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) 03:46:41 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xfffffdea) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) splice(r0, 0x0, r3, 0x0, 0x2000000000a, 0x0) [ 3433.070845] FAT-fs (loop5): bogus number of reserved sectors [ 3433.100749] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:41 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x60, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) [ 3433.169755] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:46:41 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2000, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0x7, 0x4d, 0x1}, 0x7) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x15, 0xa, 0xfffffffffffffffd}, 0x14}}, 0x0) [ 3433.310671] FAT-fs (loop5): bogus number of reserved sectors [ 3433.325328] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3433.388412] FAT-fs (loop5): bogus number of reserved sectors [ 3433.400602] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:41 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xf7070000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:41 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$setpipe(r0, 0x407, 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x40000, 0x0) fcntl$getown(r1, 0x9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x15, 0xa, 0xfffffffffffffffd}, 0x14}}, 0x0) 03:46:41 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x200000000000000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:46:41 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3433.699976] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3433.798916] FAT-fs (loop5): bogus number of reserved sectors [ 3433.818794] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3433.827561] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:46:41 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x15, 0xa, 0xfffffffffffffffd}, 0x14}}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x9, 0x2000) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2e527a2bbe6cecb}, 0xc, &(0x7f00000000c0)={0xfffffffffffffffd}}, 0x20004804) connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc, 0x100000}, 0xc) [ 3433.896746] FAT-fs (loop5): bogus number of reserved sectors [ 3433.919291] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:41 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff01f4, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:41 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:42 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x51040000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) [ 3434.039225] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:46:42 executing program 4: r0 = memfd_create(&(0x7f0000000040)="000276d43857a72667ae19eae24522680b00000000000000000000", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) write(r3, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ef17a8c5ae95ec86760de884e9740474a13eea165c0322901dc6bd36cde2c51d41b7f0b014f9f91eeb7c37c7340f476c8d753d000aa8faf8fb574dbcda6dc4d"}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000100)) 03:46:42 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) 03:46:42 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3434.190051] FAT-fs (loop5): bogus number of reserved sectors [ 3434.216109] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3434.285334] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3434.318961] FAT-fs (loop5): bogus number of reserved sectors [ 3434.331981] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:42 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xa871d07f, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:42 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0xa, 0x807, 0x3) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000000)={0x1}, 0x4) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x15, 0xa, 0xfffffffffffffffd}, 0x14}}, 0x0) 03:46:42 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:42 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbffe803, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:42 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000000140)) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x0) fdatasync(0xffffffffffffffff) eventfd(0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) modify_ldt$read_default(0x2, &(0x7f0000000540)=""/4096, 0x1000) fstat(r1, &(0x7f0000001540)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket(0x0, 0x0, 0x0) 03:46:42 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x7a00, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) [ 3434.706152] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:46:42 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:42 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair(0xa, 0x80000, 0x101, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f00000001c0)=""/37) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000180)=0xfffffffffffffdae) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000000000000e27fa1baa827120000f2ffffffffffffff0000"], 0x14}}, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r2, 0x40106410, &(0x7f0000000240)={0x19, &(0x7f0000000200)="ca4b4bdafc12b29fcb65c07d016100265107f56f2b3dfa855c"}) fsetxattr$security_smack_entry(r0, &(0x7f0000000040)='security.SMACK64\x00', &(0x7f00000002c0)='nat\x00', 0x4, 0x1) [ 3434.894990] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3434.942026] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:46:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) uselib(&(0x7f0000000000)='./file0\x00') sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x15, 0xa, 0xfffffffffffffffd}, 0x14}}, 0x0) 03:46:43 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3435.003801] FAT-fs (loop5): bogus number of reserved sectors [ 3435.024252] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:43 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0900, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:43 executing program 4: [ 3435.106974] FAT-fs (loop5): bogus number of reserved sectors [ 3435.135294] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:43 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xb172cb7f, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:43 executing program 4: 03:46:43 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x6, 0x6) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x1f}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e21, 0xffffffffffffffff, @mcast1, 0x401}}}, 0x84) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)=ANY=[@ANYBLOB="14000000150afdff0000bb2e24d081242db00000"], 0x14}}, 0x0) r3 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x80800) connect$llc(r3, &(0x7f0000000080)={0x1a, 0x2, 0x3f, 0x1, 0x7, 0x2, @dev={[], 0xd}}, 0x10) 03:46:43 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x1f00000000000000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:46:43 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff3400, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:43 executing program 4: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) 03:46:43 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000000036915fa2c1ec28656aaa79bb94b46fe0000000100020800008c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) [ 3435.691985] FAT-fs (loop5): bogus number of reserved sectors [ 3435.731125] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x15, 0xa, 0xfffffffffffffffd, 0x0, 0x4}, 0x14}}, 0x0) [ 3435.779076] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop4. 03:46:43 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3435.819722] FAT-fs (loop5): bogus number of reserved sectors [ 3435.838754] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop4. [ 3435.860046] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:43 executing program 0: write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, 0x5, {0xfffffffffffffff7}}, 0x18) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x400, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000000000), 0xc, &(0x7f0000df6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000101506fdff2cbd7000fcdbdf250000000011a66c2ed61a48daf26aefb7d9fa3a192f66be4b6deb957b0077740cc3420eead67dc2c01867522f6e39a0893913574b93cda10bea46c7ec9f6666d55c0d19b85f1f1dc6465a54af4671551f641ea6d24d2cb113230656db0772a1e2fb0000000000ff38dba957289e10815651756c45c67a3be193474fc044fdfa2c4c0b046e691f4f51ea47aa455ffed2236c0cf8f237861546aa7b1fe2cd4ff887b5deed7acb8597bcdce44786496831b172783d6422969781292eb6d51ae797d7"], 0x14}}, 0x0) 03:46:43 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x7400, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:46:44 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff2000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:44 executing program 4: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@remote, @dev, @empty, 0x5, 0x0, 0x0, 0xfa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 03:46:44 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000150afdff0000004051b94a424523f914c9d68d376fdf3f000000000000000000"], 0x14}}, 0x0) r1 = syz_open_pts(0xffffffffffffff9c, 0x4000) ioctl$VT_RELDISP(r1, 0x5605) 03:46:44 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3436.124418] FAT-fs (loop5): bogus number of reserved sectors [ 3436.141451] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:44 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3436.197640] FAT-fs (loop5): bogus number of reserved sectors [ 3436.213712] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:44 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x2474c47f, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:44 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0xe94, 0x101002) write$evdev(r0, &(0x7f00006f7fe8)=[{{}, 0x1, 0x400000000000049, 0x400000002}], 0xfdd0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000000)=""/124) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x4a0c2, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x100000001}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000180)={r3, 0x4}, 0x8) sendmsg$nl_netfilter(r1, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x15, 0xa, 0xfffffffffffffffd}, 0x14}}, 0x0) fanotify_init(0x1, 0x101000) 03:46:44 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x1000000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:46:44 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, &(0x7f00000001c0)}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000240)}) clone(0x0, &(0x7f0000000040), &(0x7f0000000200), &(0x7f0000000100), &(0x7f0000000080)) 03:46:44 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:44 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:44 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff3400, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) [ 3436.546090] FAT-fs (loop5): bogus number of reserved sectors [ 3436.575240] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3436.577856] binder: BINDER_SET_CONTEXT_MGR already set [ 3436.631793] FAT-fs (loop5): bogus number of reserved sectors [ 3436.644966] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3436.652458] binder: 29220:29223 ioctl 40046207 0 returned -16 03:46:44 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:44 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x15, 0xa, 0xfffffffffffffffd}, 0x14}}, 0x0) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x42100) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000180)={0x40, 0x9d, 0x69ff}) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x8, 0x7}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={r3, 0x3ff}, &(0x7f0000000100)=0x8) [ 3436.681586] binder: undelivered death notification, 0000000000000000 [ 3436.692485] binder: undelivered death notification, 0000000000000000 03:46:44 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x7, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:46:44 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x23100000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:44 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:44 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xee8f0000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:44 executing program 0: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffff9c, 0xae41, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000040)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000150afdff000800000000000001000000eb9efb00000000000000e2dbc90c0938284cc1558cb1dde4bd52"], 0x14}}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x408000, 0x0) ioctl$VT_DISALLOCATE(r2, 0x5608) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000000), 0x4) [ 3436.949757] FAT-fs (loop5): bogus number of reserved sectors [ 3436.966461] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:45 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3437.047161] FAT-fs (loop5): bogus number of reserved sectors 03:46:45 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x96880000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) [ 3437.093517] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:45 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x15, 0xa, 0xfffffffffffffffd}, 0x14}}, 0x0) 03:46:45 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:45 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x600000000000000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:46:45 executing program 0: r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:46:45 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:45 executing program 4: r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040)}, 0x8026}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:46:45 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x3f77b57f, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) [ 3437.352373] FAT-fs (loop5): bogus number of reserved sectors 03:46:45 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000000036915fa2c1ec28656aaa79bb94b46fe0068000700020800008c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) [ 3437.408409] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:45 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000000036915fa2c1ec28656aaa79bb94b46fe006c000700020800008c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) [ 3437.560249] FAT-fs (loop5): bogus number of reserved sectors [ 3437.575244] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:45 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x23870000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:45 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:45 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xc2870000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:45 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:45 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x300000000000000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:46:45 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xdd71cf7f, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) [ 3438.067349] __nla_parse: 19 callbacks suppressed [ 3438.067360] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:46:46 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000000036915fa2c1ec28656aaa79bb94b46fe0000740700020800008c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) [ 3438.128347] FAT-fs (loop5): bogus number of reserved sectors [ 3438.151343] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3438.226536] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3438.241225] FAT-fs (loop5): bogus number of reserved sectors 03:46:46 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:46 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xb98f0000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) [ 3438.286533] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:46 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xffffffff00000000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) [ 3438.363886] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:46:46 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000000036915fa2c1ec28656aaa79bb94b46fe0048000700020800008c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) 03:46:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x2, 0x800) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040)}, 0x8026}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 3438.510189] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:46:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x2, 0x800) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040)}, 0x8026}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) modify_ldt$read_default(0x2, &(0x7f0000000540)=""/4096, 0x1000) fstat(r2, &(0x7f0000001540)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:46:46 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3438.650606] FAT-fs (loop5): bogus number of reserved sectors [ 3438.661215] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3438.719124] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:46:46 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0006, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:46 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x2, 0x800) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040)}, 0x8026}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) modify_ldt$read_default(0x2, &(0x7f0000000540)=""/4096, 0x1000) fstat(r2, &(0x7f0000001540)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 3438.937767] FAT-fs (loop5): bogus number of reserved sectors [ 3438.943626] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:46 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3438.997262] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3439.046583] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:46:47 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x226000000000000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:46:47 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:47 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x9f920000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) [ 3439.248144] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:46:47 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:47 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0700, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) [ 3439.387457] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:46:47 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000000036915fa2c1ec28656aaa79bb94b46fe000b000700020800008c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) [ 3439.527483] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:46:47 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000000036915fa2c1ec28656aaa79bb94b46fe0000060700020800008c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) 03:46:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x15, 0xa, 0xfffffffffffffffd}, 0x14}}, 0x3000000) [ 3439.796866] FAT-fs (loop5): bogus number of reserved sectors [ 3439.819249] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3439.898557] FAT-fs (loop5): bogus number of reserved sectors [ 3439.907845] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:47 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbffe803, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:47 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:47 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:47 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000580)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = request_key(&(0x7f0000000080)='.dead\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000140)='user\x00', 0xffffffffffffffff) futex(&(0x7f0000000280), 0x8d, 0x2, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000300)=0x1, 0x2) r2 = syz_open_dev$video4linux(&(0x7f0000000180)='/dev/v4l-subdev#\x00', 0x7281, 0x100) ioctl$VIDIOC_G_EDID(r2, 0xc0285628, &(0x7f0000000240)={0x7fffffff, 0x20, 0xce, [], &(0x7f00000001c0)=0x1}) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000100)="0001", 0x2, r1) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r0, r3}, &(0x7f0000000440)=""/240, 0xf0, 0x0) 03:46:48 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x50040000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:46:48 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3440.175941] FAT-fs (loop5): bogus number of reserved sectors [ 3440.189964] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3440.264598] FAT-fs (loop5): bogus number of reserved sectors [ 3440.275244] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:48 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x8e74c27f, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0xc5, 0x8c1) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000740)=@sack_info={0x0, 0xfffffffffffffc01, 0xffffffffffffffc0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000002c0)={r1, 0x86, 0x3, 0x10000, 0x401, 0x6, 0xb3, 0x7, {r2, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1, 0x1, 0x9, 0x8000, 0x100000000}}, &(0x7f0000000540)=0xb0) r4 = add_key$user(&(0x7f0000000580)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0xf22) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000527ff8), 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000780)='/dev/fuse\x00', 0x2, 0x0) mlock(&(0x7f0000862000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) munlockall() r6 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x4, 0x80000) write$cgroup_type(r6, &(0x7f00000000c0)='threaded\x00', 0x9) getsockopt$IP6T_SO_GET_REVISION_MATCH(r6, 0x29, 0x44, &(0x7f0000000680)={'icmp\x00'}, &(0x7f00000006c0)=0x1e) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000600)={r3, 0x6, 0x5}, &(0x7f0000000640)=0x8) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000240)={0xbd, 0x4, 0x8, 0x6}) r7 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)="0001", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r4, r4, r7}, &(0x7f0000000440)=""/240, 0xf0, 0x0) 03:46:48 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x58100000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:48 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:48 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x49040000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:46:48 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3440.635255] FAT-fs (loop5): bogus number of reserved sectors [ 3440.641120] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3440.763806] FAT-fs (loop5): bogus number of reserved sectors [ 3440.775327] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:48 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xc2070000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:48 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x4b040000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:46:48 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:49 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff03e8, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) [ 3441.116545] FAT-fs (loop5): bogus number of reserved sectors [ 3441.122506] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:49 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:49 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0009, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) [ 3441.260387] FAT-fs (loop5): bogus number of reserved sectors [ 3441.291639] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:49 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000000036915fa2c1ec28656aaa79bb94b46fe0000110700020800008c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) 03:46:49 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0x15, 0xa, 0xfffffffffffffffd}, 0x14}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x0) 03:46:49 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xdac, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:46:49 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:49 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f0000000580)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)="0001", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r1, r1, r2}, &(0x7f0000000440)=""/240, 0xf0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x80000001, 0x1, 0xfffffffffffff809, 0x3, 0x3, 0x3f, 0x2805, 0xe96c, 0x40, 0x207, 0x7, 0x4, 0x38, 0x1, 0x7, 0x0, 0x3}, [{0x5, 0x7, 0x7, 0x101, 0x9, 0x0, 0x100, 0xfff}], "3bd89acb3b6606b938156f62721e25a9151c26c692b48df10e6fc6fd733f79ac92e85dd16f545c1fe3fb9e07ec499a254e35993b9eb1aab60524709b2a74cd3cb19f029089c2b7a8de830599ce73b81c6d5af66e32781d61145e89f41df2ffa838d0d60f50f350a259ac44ef9b85dafa75b180f0d5b2111794b03206599970dc4059611dad1b6edc8d4e6d65cf8d2c013ce9cafd481926695947147c9efa6958560cc50663ed91871098b4c7c0028d7763cd4a2dca924175c991c5db03febec547f70afbc3e63979c6c2c88c7ac52b2db02b2e538b503424cec6ebcfa07de8ddba02b3c44bce9c0941cb0b70e46cb85e6deda815e5aeaf42c2d386f72fdcf41d39cbdaf3b5ddd99bf15bb6c7aa1f4d791bbd102150b640ea1b968b3bb78203c14b69df92878dc880d2bdd133adac8d19dfa1fae5b497cf298038b1ff85bd926b4d546e096627df47c7a0ae2c62e9873e81f3db0dbbd6f5c369cf46e8a660e2603d79a6cf2c5d5419226259d37d1ff29a2242429512695b96c83dd88191fde1a28db844b263040eb35bc32dfbd90e0c185021e9d989838054b32ac0d1f33a08cfcd50d5d5eda4d80caf7ab044ca5f02b09f15b79d51c95191e5a89c178f43ffc56b3e835cff89865eb912c5e94cd5cc8045c8eb0f4ddb6e30a004a106dd9ecbf6cd164b67549996878751d6bae223ed7cc46cd53108b729b23d72cbcc677ec58f1b06adc14e8b5dfca616d3da161daf666bbe1160f86ea93233efff0fc753ad74128303ff807a969e4d381e8b5ad11f07fc016fc5d06d53e018a50668aaeafee4d8366fd67df7b4ad21d54677b176e37910f59c6dc35d94aa7f5b0ea4717ec8c3161bbf1674c1902dd8d931b806cb0af87c633f3883b94e6388e860cd12f6cc84837f13b1ea6e893e926744c5cb2c2330d827f3e2640eba14d8cb5f5770a74bbdb853b1739c402c5ed8b8c48f44ab56762ac3be084e0a06ed6a386ecd36c9083a8075250890a26caa3d2a98379c693e7576eb2f580e10a01b0eec181e82bdb10cd9a6e5982bbbb8fb7e0e6970930aa007df981394807b02f0cf9bce74b44b7b44898a73391f993f394af13a8bcef4f5285c663478548f01278d6cf1d6d9d5e2f75d76bad44632e76ff4fb7c7ad5f2805d9f40d78e50b49e65643807be0943aeda0aafc5bb936d7694ac2316ead462486cd2804b55842c3a7780a7cc7654a6941c45eae9524b9cf885053622b8c3bff7e381273d10cdb4acacc46415e93a098d55615bf6c6c64c3921205a1c0d79a010ab267d64c849b99709774366c9825d9870854730590a435581b486f8c241f8e5ccb194606d4a9103962e1fa06aef270c93efd092ea65a2242850c40ceced28632a7dc20b3771ec3935e716ab2a347e0ccb2dba9e935c1dc4fbdf3ce8f22c8fd6012dc2806f1cab106b253fdf5caa9cda6d57b56d01385987b16a80df98d4b7fc1a594028c403702a25e2e608c9cfcdba6067e0c23401dbeeba3952553eaca55527bf498607afb462887396015918a0e84e74eaa72b28e63c25b73af2e9e2f6bf7347dfe1cd72bd1fb30677f07d689af2637280419ae1e229e18d5482e393030cffdb564ae1c1f4cf2b750546ea0c713309678527bd8a6453f9e4e2f06fba5a118a57d121c633192d52c626c2c6f77785e8e29654e2bffe67b9dfbebb184066d7a86622b5f4b69eedd5ddc32b694009bcfce871aad42edabfdc6f5fd7a636f91f88f72f0916a4b405ad11b0911fe3b9ade6aa9074f5a6fb2acb9c2cdb775657aee5f2209d02a116319dc73f945899784c8e55df361caf490ae923e9ce24080112043016bdbb0c3e47f2ead94e1662dcf17c907f49b9666f1b674f7a1da4320d43304c9738d144a2f6fca75271d7fb5db22ecea5e1b1c267b0e097dc069563b9a8c8e6887e28a62ad60cc185afa7355e3a48feba190067b1f669a44102be725ec34fcaa7f8962ae209b64d7f2b5bb876fb6a76962a9113a963c427f27f1bdd8dcfd24a3e14777128c9b731eca1f9b269351b391d8cb433aaadd976dd11972940e357692eebd90ffa75e860ab340fbed4831c924f740091af24f30bff7cee2838ed3d2425827789da868340844912b0c34f80e4edf5cf62ded526072dbd0abff365d4640e59bdaf3e04a20f03f65ed4eec8332d237aa745f798e624bf01d5517f45fe22b54c80adb3df3808c454be4b149402d5c301235e306697b7f7c63c3fc5066e3f9cb7baa59fa4037efba452223fd870ebea2b95ef099ed6388f459e66d15fdff14e14fe5cd3d3d5207639b1313d26007e5389b7812edc418ca11e835e31789489267e1c7092d6d950ad0ad18c2cbe2b2f8cdbfa71189d4309a2bdd7010e9dbab3fc9dd9457532d65a294c98bcc6db43bdf26a3c5dae4e81f123d683ef72dd7cfb1aeafe71535db450665a7a311ba456d8abc8ccbb38dc033de38fc813cbd45e72dd3035f560da9af952e989605b4254c24be20cdcdcd36b6631f4036dc24da65205b429e890309c4dc9f3b48244dc476ab8f119bc17f7e460ca1b37c4ac962e55e217314633cc75aa4f2942de0d7b2d70cd8a7a5a6c904f98e06b8ab86b9d8c31dedaa6d863dd78474816a9f5edacb0ffb4925eb6d06a402f5972fbaad124cb9189eccdac20a66515cce8de16b360b4bf276ac34867bcf7bfee9b41b2444257163c0f96f6c821c71bdbb7805f50ae0914d2dfe58b8cfa25546d523ddfcf5d0ac2675d209c671544967b7ab835b33d6c5f95ae6041f556c9b361beb051648ec1cb3c1a106734ba0f07a1cb0ce129bbdb37151b52b068bc02f55325cdd8f46a6efed141f2aec5ef2982683f473e0e354bf49c6e44df5925028c786dc6162f2e8c92d6c25435a6940557082aa76ca2de87c3debae8d49669a7795e601cf4669b45755692001331ff588f95d9da0c47c8297dcae3a9e06a27d875273e527acb4aa053f2451355e1f0d1d3e1f21c4e07ec827a27ad3d84ae8ae5a50453d59c5bc111bf5872419cbb72794426b746e9720551ef0b3132c44507ca2516a2395d5cb2826a0ba81877279fc5bb13ade6564746171b18606dc65d60d8bfe117f74666bfeea5cb8d8585308f7820f9c0747cb73f49f5eefd4c293a3e4dd4db19e18995932eba74930b3315cb763fec12f0ee78640d1555f49c3f447647b02524293e5abe4402b6318ce487410cb00025b1f9971f99fadacbb20a4c08f9cc3f404056dcc9e8489276b3b911307f2bd811298cf272eb7efc122002832786292d8b1919491fdaa2aedd2b3b324bb90dd4d9923898bc74f03e224d38f0343c3b1e5deda5e1a63b06ad00d809bb04202a5fb09eadbd200deb36ff21f0294d5602c8e45fde9cae3e872e5196cdb54ad7ae98b9d51979a32cc9b0712e58939fd3445f5d7cf280a15b34073d786690bab1194f598046d9892350f4860384077737a5269d6552f4d378f5f5be38d1a4d5a720d58a0de4f217bfa337294455f071bfd193f46a46a183d1d3e1bba96dd0a0531abcb93095e94952562538dc72f00c8a65db2ec53530cf7b4925ebea65600b912268a6847aec64d217e29bbc18dead957a023d048056a2e20158fa681a1f919e7447f875f49348297df6f2b8a910dae3e0ea88638e1bb43d28990d7954bd922e27f4396d43d42556efbd018d94f835410d32a1b187a207bb453230d1122719b7a57a669cfcdb2c9bd874f2df322ebd91999825c7cddc4ab2e3ae8a34c7842ea45e2c6f5102bd23721c4116252d375cc4360fb5ae3bb5bf18825bb1856058ec2e691d3969c3bba91e2517b01de28e6830d957a1d44c9179dc159508dbe475d84b189843ec6d3e764ea0a33342e65b897aac73ab2768a603d6171579c6ffc76ab5e589d9dedd4bf372dc04147fee759bc66abcf6178c486cb45eff3daf0311b5c79d12c2840c7c47ea93aa93b247c539cb72395feceb39db0a9ea56720eca757ce8e3a77babcc0a097d0ffa524a3586d65798d29810a87c2039d110125ce75871ad0f3db77dbf329ca931c354dbdca0443544c1e77c80219280d2049e615d505e54132e49a48a63c019511e43b1d1a20e6f6e5bbbc78c5c4742d4e28abf062aee96aabc2b2b93fc8c9aff6ce8db8ef0a58d2ea46889b2297c521f96d525778f16a990fa2ed47f82ab057a5a9e9759494274dc70bdf4a6af6afcc25f0bad9e7ae938f89f54e916c9e651214b7f80532cbda13fdf821881c7cfe7cf13900f7313338136649c4a00bd3cd878943d2599e9bae144205cc5f7ea6287a1a7c7b0fa927b515c33d3cf1166bbda8e402c2b67a495bee3b781478e0f43ddf52e265561c6c59a0fc4644df02f87e42c8e9bc105d66286183a4bd5c3f9273798ba812f543ac882233bdbe6b54da1929d5ee7316daffedf5feb810a7aa6e72ef7e069aaec95c26abfad098642dd4310aa8dd61c4c26b7fe87e3665f1ea893e5a8f79ff5bafb9942eef5ab04fc1ef416a2007d1bcca468fd3f30e50ce6d7df062bd70234a4a1d314c0c588a5dc17987822287014a8db9fe9d3ac029904eb36fe28776bb118f4c3aa2b46307ba7706ce23be0523e89779482bb550c32bdc1f82139d497f7d34d62a06824ffbdfab8e99409317673854f66948c814857a60245629380fa42a45cd04cc4eacc987089ccc3f2a385f0978da000cb6978ace6bf38053b1c0e7378fc562f43128e552ef2e94e01294c9c0df9719cd4b23afebe3d81093bb8ee9847b134cb23b6182094fb26e778d0b978890091645184b4a07d80838186685f185cba29dffb783c58cef95021d83304e5fe795ce5f0be6bcd2403772d771c9ca081c90fab95f38f2259182593dffb41c57c81533225770653812c58c536c46d54744e51683ae6aea43f737100c980b2eee4f8e717d6b84218c77e986a7cc099cd74f72fb3081d509cfcc504880c7c294d63176431f5e70dccc7eeb331d4c6af5859780e3f4ee680a02f3a5cf79e12b016e878ca9154d0beb1d7671b092ade66edf29bf8f78eab65b7da4107bfbd3228538bf6d1bccd72df7347eb869f130e41147b80c6989020528f66dd006950aa9c5190369d95fec53b001cfedab851a138cfbf418aa7f1710c4babfb1609ad78ee8871f29278fb807c000af772c89f4091b41af451ed983553d607295b11d1a293c6cce2790d978cbfba6802c7554ffe8876acc4035cba650c6becbbe7a3bc02dda286f44f27d5e1c9532b704fbe5e512a96004513766e016dcb9122bee6241df5cb04631da143bbe1195b26a278f1332b9f84a753a6b4e04e94e60a8f32e852dcd5f43cf5a7967e6c7f4590aaad8fac61d4490c6a4327a0ec09dbbc05654251e27c0cb2754d7023e367780e3078ce905754c8cb9d9b66dd769ad96fef4d31aaf30fc99275cca391346aa3114f303728e331585f910cf2fdee76e3a4ddc27f753cda8c001381edac5300415efe3a3df8a26faf02e705bafe7325c90682d3f9d814be1f25d6072939c8b24df15da98aa7bb92e5524f5753b818fc99d7bb757c15312941bb052d5710d23a853f3e862dd0160cb32301bc2015d1eebd4150d88e9c9a96602e50e81ee553ca997db5235c9a9b1553bbbf72ddfe025e4e4267c88f07d9a39691a974fb22a1db5c24b4355e833652852e4319197014b012ab487abbf6192a08d18d546520ad62986d37f65f84f36e9f03d88bab2590c5976b247a98c171ee659c3e8fca3df46d3634814c29afb656ba5e1aa0341ed822eaf91f0a09818f3c5dafd37443a8e63e0961ca5c0dcb787806e9458de9f43e313fa7a95", [[], [], [], [], []]}, 0x1578) [ 3441.539454] FAT-fs (loop5): bogus number of reserved sectors [ 3441.553723] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:49 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3441.617434] FAT-fs (loop5): bogus number of reserved sectors [ 3441.652404] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:49 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:49 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x452, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:46:49 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0008, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) [ 3442.039521] FAT-fs (loop5): bogus number of reserved sectors [ 3442.065279] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000600)="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", 0x1000, r0) r1 = add_key$user(&(0x7f0000000580)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhci\x00', 0x70b5f34a1f4fecbf, 0x0) ioctl$VIDIOC_G_AUDIO(r2, 0x80345621, &(0x7f0000000540)) add_key(&(0x7f00000001c0)='trusted\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="76f16b04f56aea25ad366f22656be0a434622e1603a58969cc01c1092f67ba39d41786ce02d3c103e31cd4956c1c66b1bcd7b8b6cd3539854027b675d7a5204a637a4e1a2504d4010b332967cbe998fbdaf85b4f9de59e809aba14becc9d69fb8a458f48f46c1ca81816b6fdeecf33800ff26fd6cfacd4e86792df18aae4dc7bae7ec02b59d3c3c58a25c5ea0583ac3aee5ff2d83d5a5010b88677e6a865352d45494d5eda7269c655718f0643", 0xad, 0xfffffffffffffffb) r3 = add_key$user(&(0x7f0000001640)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)="0001", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r1, r1, r3}, &(0x7f0000000440)=""/240, 0xf0, 0x0) 03:46:50 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:50 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:50 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff4c1d, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) [ 3442.150158] FAT-fs (loop5): bogus number of reserved sectors [ 3442.160724] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:50 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ffb000/0x2000)=nil) r0 = add_key$user(&(0x7f0000000580)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)="0001", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r0, r1}, &(0x7f0000000440)=""/240, 0xf0, 0x0) 03:46:50 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x4c, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:46:50 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3442.429883] FAT-fs (loop5): bogus number of reserved sectors [ 3442.457135] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3442.534127] FAT-fs (loop5): bogus number of reserved sectors [ 3442.572016] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:50 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:50 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xffffffffffffff7f, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:46:50 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xdc0d0000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:50 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0900, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:50 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x3, 0x7000028, 0xcbff0000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:50 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:51 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000580)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xffffffffffffff4e, 0xfffffffffffffffe) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x0) accept4$unix(r1, &(0x7f0000000140), &(0x7f00000000c0)=0x6e, 0x80000) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)="0001", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r0, r2}, &(0x7f0000000440)=""/240, 0xf0, 0x0) [ 3442.998261] FAT-fs (loop5): bogus number of reserved sectors [ 3443.022219] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3443.118366] FAT-fs (loop5): bogus number of reserved sectors [ 3443.139306] __nla_parse: 23 callbacks suppressed [ 3443.139318] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3443.162314] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:51 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x42f, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:46:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000580)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xffffffffffffff4e, 0xfffffffffffffffe) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x0) accept4$unix(r1, &(0x7f0000000140), &(0x7f00000000c0)=0x6e, 0x80000) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)="0001", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r0, r2}, &(0x7f0000000440)=""/240, 0xf0, 0x0) 03:46:51 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:51 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x61080000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:51 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x608b0000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) [ 3443.371361] FAT-fs (loop5): bogus number of reserved sectors [ 3443.379567] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3443.387566] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000580)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xffffffffffffff4e, 0xfffffffffffffffe) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x0) accept4$unix(r1, &(0x7f0000000140), &(0x7f00000000c0)=0x6e, 0x80000) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)="0001", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r0, r2}, &(0x7f0000000440)=""/240, 0xf0, 0x0) 03:46:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000580)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)="0001", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r0, r1}, &(0x7f0000000440)=""/240, 0xc0, 0x0) 03:46:51 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3443.479723] FAT-fs (loop5): bogus number of reserved sectors [ 3443.529639] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000580)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xffffffffffffff4e, 0xfffffffffffffffe) r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x0) accept4$unix(r0, &(0x7f0000000140), &(0x7f00000000c0)=0x6e, 0x80000) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)="0001", 0x2, 0xfffffffffffffffd) [ 3443.593101] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:46:51 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xa00000000000000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:46:51 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:51 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff4002, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) [ 3443.795885] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:46:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000580)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xffffffffffffff4e, 0xfffffffffffffffe) syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x0) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)="0001", 0x2, 0xfffffffffffffffd) 03:46:51 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000000036915fa2c1ec28656aaa79bb94b46fe0006000700020800008c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) [ 3443.850056] FAT-fs (loop5): bogus number of reserved sectors [ 3443.865012] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3443.945786] FAT-fs (loop5): bogus number of reserved sectors [ 3443.982284] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3443.995629] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000580)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xffffffffffffff4e, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)="0001", 0x2, 0xfffffffffffffffd) 03:46:52 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3444.133074] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:46:52 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x5974c37f, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:52 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x800000000000000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:46:52 executing program 0: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:52 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)="0001", 0x2, 0xfffffffffffffffd) 03:46:52 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff1800, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:52 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)="0001", 0x2, 0xfffffffffffffffd) [ 3444.361114] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3444.363028] netlink: 180 bytes leftover after parsing attributes in process `syz-executor0'. 03:46:52 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3444.429645] FAT-fs (loop5): bogus number of reserved sectors [ 3444.454481] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000580)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)="0001", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x9, &(0x7f0000000040)={r0, r0, r1}, &(0x7f0000000440)=""/240, 0xf0, 0x0) 03:46:52 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffd) [ 3444.547908] FAT-fs (loop5): bogus number of reserved sectors [ 3444.557852] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3444.576623] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:52 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) 03:46:52 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:52 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xd470d47f, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:52 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xedc0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:46:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000580)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)="0001", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x12, &(0x7f0000000040)={r0, r0, r1}, &(0x7f0000000440)=""/240, 0xf0, 0x0) 03:46:52 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffd) [ 3444.752756] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:46:52 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3444.857553] FAT-fs (loop5): bogus number of reserved sectors [ 3444.866437] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3444.939855] FAT-fs (loop5): bogus number of reserved sectors [ 3444.946549] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:53 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xeb7f0000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000580)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)="0001", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x12, &(0x7f0000000040)={r0, r0, r1}, &(0x7f0000000440)=""/240, 0xf0, 0x0) 03:46:53 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:53 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008003, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:53 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x23000000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:46:53 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000580)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)="0001", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x12, &(0x7f0000000040)={r0, r0, r1}, &(0x7f0000000440)=""/240, 0xf0, 0x0) [ 3445.282209] FAT-fs (loop5): bogus number of reserved sectors [ 3445.293926] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3445.369654] FAT-fs (loop5): bogus number of reserved sectors [ 3445.386058] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:53 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x340c0000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:53 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:53 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008007, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:53 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xf5ffffff, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:46:53 executing program 4 (fault-call:0 fault-nth:0): add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) [ 3445.692669] FAULT_INJECTION: forcing a failure. [ 3445.692669] name failslab, interval 1, probability 0, space 0, times 0 [ 3445.726469] CPU: 1 PID: 29640 Comm: syz-executor4 Not tainted 4.19.0+ #319 [ 3445.733515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3445.742876] Call Trace: [ 3445.745539] dump_stack+0x244/0x39d [ 3445.749195] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3445.754460] ? debug_smp_processor_id+0x1c/0x20 [ 3445.759185] ? perf_trace_lock+0x14d/0x7a0 [ 3445.763501] should_fail.cold.4+0xa/0x17 [ 3445.767587] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3445.772736] ? find_held_lock+0x36/0x1c0 [ 3445.776821] ? __f_unlock_pos+0x19/0x20 [ 3445.780843] ? find_held_lock+0x36/0x1c0 [ 3445.784973] ? perf_trace_sched_process_exec+0x860/0x860 [ 3445.790466] __should_failslab+0x124/0x180 [ 3445.794727] should_failslab+0x9/0x14 [ 3445.798551] __kmalloc_track_caller+0x2d1/0x760 [ 3445.803244] ? strncpy_from_user+0x5a0/0x5a0 [ 3445.807674] ? digsig_verify+0x1530/0x1530 [ 3445.811936] ? strndup_user+0x77/0xd0 [ 3445.815765] memdup_user+0x2c/0xa0 [ 3445.819339] strndup_user+0x77/0xd0 [ 3445.822986] __x64_sys_add_key+0x198/0x4f0 [ 3445.827253] ? key_get_type_from_user.constprop.6+0x110/0x110 [ 3445.833174] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3445.838554] ? trace_hardirqs_off_caller+0x310/0x310 [ 3445.843689] do_syscall_64+0x1b9/0x820 [ 3445.847590] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3445.853238] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3445.858183] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3445.863047] ? trace_hardirqs_on_caller+0x310/0x310 [ 3445.868088] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3445.873128] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3445.878173] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3445.883050] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3445.888262] RIP: 0033:0x457569 [ 3445.891486] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3445.910403] RSP: 002b:00007fd65f518c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 3445.918142] RAX: ffffffffffffffda RBX: 00007fd65f518c90 RCX: 0000000000457569 [ 3445.925444] RDX: 0000000020000100 RSI: 00000000200005c0 RDI: 0000000020000200 [ 3445.932731] RBP: 000000000072bf00 R08: fffffffffffffffd R09: 0000000000000000 [ 3445.940032] R10: 0000000000000001 R11: 0000000000000246 R12: 00007fd65f5196d4 [ 3445.947317] R13: 00000000004bd673 R14: 00000000004cc110 R15: 0000000000000003 [ 3445.978260] FAT-fs (loop5): bogus number of reserved sectors [ 3445.995258] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3446.064260] FAT-fs (loop5): bogus number of reserved sectors [ 3446.085760] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:54 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xb9860000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:54 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:54 executing program 4 (fault-call:0 fault-nth:1): add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) 03:46:54 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff003c, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:54 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x10000000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) [ 3446.216813] FAULT_INJECTION: forcing a failure. [ 3446.216813] name failslab, interval 1, probability 0, space 0, times 0 [ 3446.253973] CPU: 1 PID: 29657 Comm: syz-executor4 Not tainted 4.19.0+ #319 03:46:54 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3446.261030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3446.270396] Call Trace: [ 3446.273021] dump_stack+0x244/0x39d [ 3446.276697] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3446.281928] ? debug_smp_processor_id+0x1c/0x20 [ 3446.286619] ? perf_trace_lock+0x14d/0x7a0 [ 3446.290882] should_fail.cold.4+0xa/0x17 [ 3446.294982] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3446.300109] ? lock_is_held_type+0x210/0x210 [ 3446.304564] ? save_stack+0x43/0xd0 [ 3446.308308] ? kasan_kmalloc+0xc7/0xe0 [ 3446.312215] ? __kmalloc_track_caller+0x157/0x760 [ 3446.317082] ? memdup_user+0x2c/0xa0 [ 3446.320806] ? zap_class+0x640/0x640 [ 3446.324527] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3446.329923] ? __f_unlock_pos+0x19/0x20 [ 3446.333942] ? find_held_lock+0x36/0x1c0 [ 3446.338052] ? lock_downgrade+0x900/0x900 [ 3446.342228] ? perf_trace_sched_process_exec+0x860/0x860 [ 3446.347706] ? lock_release+0xa00/0xa00 [ 3446.351712] __should_failslab+0x124/0x180 [ 3446.355972] should_failslab+0x9/0x14 [ 3446.359796] kmem_cache_alloc_node_trace+0x270/0x740 [ 3446.364951] __kmalloc_node+0x3c/0x70 [ 3446.368778] kvmalloc_node+0x65/0xf0 [ 3446.372514] __x64_sys_add_key+0x33a/0x4f0 [ 3446.376772] ? key_get_type_from_user.constprop.6+0x110/0x110 [ 3446.382681] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3446.388068] ? trace_hardirqs_off_caller+0x310/0x310 [ 3446.393209] do_syscall_64+0x1b9/0x820 [ 3446.397119] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3446.402507] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3446.407457] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3446.412322] ? trace_hardirqs_on_caller+0x310/0x310 [ 3446.417356] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3446.422396] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3446.427459] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3446.432336] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3446.437542] RIP: 0033:0x457569 [ 3446.440758] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3446.459683] RSP: 002b:00007fd65f518c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 03:46:54 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff7a50, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) [ 3446.467422] RAX: ffffffffffffffda RBX: 00007fd65f518c90 RCX: 0000000000457569 [ 3446.474707] RDX: 0000000020000100 RSI: 00000000200005c0 RDI: 0000000020000200 [ 3446.481995] RBP: 000000000072bf00 R08: fffffffffffffffd R09: 0000000000000000 [ 3446.489281] R10: 0000000000000001 R11: 0000000000000246 R12: 00007fd65f5196d4 [ 3446.496566] R13: 00000000004bd673 R14: 00000000004cc110 R15: 0000000000000003 03:46:54 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:54 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff7a50, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) [ 3446.553302] FAT-fs (loop5): bogus number of reserved sectors [ 3446.577277] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:54 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008007, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:54 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:54 executing program 4 (fault-call:0 fault-nth:2): add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) [ 3446.655053] FAT-fs (loop5): bogus number of reserved sectors [ 3446.661002] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:54 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x4000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) [ 3446.806229] FAULT_INJECTION: forcing a failure. [ 3446.806229] name failslab, interval 1, probability 0, space 0, times 0 [ 3446.840359] CPU: 1 PID: 29692 Comm: syz-executor4 Not tainted 4.19.0+ #319 [ 3446.847458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3446.856845] Call Trace: [ 3446.859489] dump_stack+0x244/0x39d [ 3446.863162] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3446.868385] ? debug_smp_processor_id+0x1c/0x20 [ 3446.873086] ? perf_trace_lock+0x14d/0x7a0 [ 3446.877356] should_fail.cold.4+0xa/0x17 [ 3446.881454] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3446.886586] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3446.892168] ? check_preemption_disabled+0x48/0x280 [ 3446.897214] ? debug_smp_processor_id+0x1c/0x20 [ 3446.901914] ? perf_trace_lock+0x14d/0x7a0 [ 3446.906170] ? zap_class+0x640/0x640 [ 3446.909931] ? find_held_lock+0x36/0x1c0 [ 3446.914028] ? __lock_is_held+0xb5/0x140 [ 3446.918130] ? perf_trace_sched_process_exec+0x860/0x860 [ 3446.923604] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3446.929175] __should_failslab+0x124/0x180 [ 3446.933441] should_failslab+0x9/0x14 [ 3446.937265] __kmalloc+0x2e0/0x760 [ 3446.940827] ? __down_interruptible+0x700/0x700 [ 3446.945520] ? user_preparse+0x96/0x1a0 [ 3446.949516] ? security_key_permission+0x94/0xc0 [ 3446.954299] user_preparse+0x96/0x1a0 [ 3446.958123] ? logon_vet_description+0x50/0x50 [ 3446.962721] key_create_or_update+0x583/0x1120 [ 3446.967334] ? key_type_lookup+0xf0/0xf0 [ 3446.971426] ? join_session_keyring+0x340/0x340 [ 3446.976137] ? kmem_cache_alloc_node_trace+0x34b/0x740 [ 3446.981460] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3446.987028] __x64_sys_add_key+0x3eb/0x4f0 [ 3446.991287] ? key_get_type_from_user.constprop.6+0x110/0x110 [ 3446.997199] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3447.002583] ? trace_hardirqs_off_caller+0x310/0x310 [ 3447.007722] do_syscall_64+0x1b9/0x820 [ 3447.011630] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3447.017016] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3447.021967] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3447.026833] ? trace_hardirqs_on_caller+0x310/0x310 [ 3447.031874] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3447.036932] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3447.041977] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3447.046851] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3447.052075] RIP: 0033:0x457569 [ 3447.055288] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3447.074208] RSP: 002b:00007fd65f518c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 3447.081940] RAX: ffffffffffffffda RBX: 00007fd65f518c90 RCX: 0000000000457569 [ 3447.089224] RDX: 0000000020000100 RSI: 00000000200005c0 RDI: 0000000020000200 [ 3447.096508] RBP: 000000000072bf00 R08: fffffffffffffffd R09: 0000000000000000 03:46:55 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3447.103789] R10: 0000000000000001 R11: 0000000000000246 R12: 00007fd65f5196d4 [ 3447.111071] R13: 00000000004bd673 R14: 00000000004cc110 R15: 0000000000000003 03:46:55 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:55 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff3075, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) [ 3447.230746] FAT-fs (loop5): bogus number of reserved sectors [ 3447.259608] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:55 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:55 executing program 4 (fault-call:0 fault-nth:3): add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) [ 3447.337025] FAT-fs (loop5): bogus number of reserved sectors [ 3447.364069] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:55 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:55 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x74000000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:46:55 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff003c, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) [ 3447.509813] FAULT_INJECTION: forcing a failure. [ 3447.509813] name failslab, interval 1, probability 0, space 0, times 0 [ 3447.523252] CPU: 1 PID: 29711 Comm: syz-executor4 Not tainted 4.19.0+ #319 [ 3447.530299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3447.530314] Call Trace: [ 3447.530342] dump_stack+0x244/0x39d [ 3447.530375] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3447.545950] ? debug_smp_processor_id+0x1c/0x20 [ 3447.545971] ? perf_trace_lock+0x14d/0x7a0 [ 3447.545997] should_fail.cold.4+0xa/0x17 [ 3447.546021] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3447.546038] ? mark_held_locks+0x130/0x130 [ 3447.546057] ? rcu_softirq_qs+0x20/0x20 [ 3447.560166] ? rcu_softirq_qs+0x20/0x20 [ 3447.581508] ? zap_class+0x640/0x640 [ 3447.585246] ? is_bpf_text_address+0xd3/0x170 [ 3447.589769] ? kernel_text_address+0x79/0xf0 [ 3447.594213] ? find_held_lock+0x36/0x1c0 [ 3447.598307] ? __lock_is_held+0xb5/0x140 [ 3447.602383] ? e1000_probe+0x2eb8/0x4320 [ 3447.602427] ? kasan_kmalloc+0xc7/0xe0 [ 3447.602447] ? perf_trace_sched_process_exec+0x860/0x860 [ 3447.602468] ? __x64_sys_add_key+0x3eb/0x4f0 [ 3447.620302] ? do_syscall_64+0x1b9/0x820 [ 3447.624384] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3447.629790] __should_failslab+0x124/0x180 [ 3447.634051] should_failslab+0x9/0x14 [ 3447.637875] kmem_cache_alloc_trace+0x2d7/0x750 [ 3447.642567] ? lock_acquire+0x1ed/0x520 [ 3447.646556] assoc_array_insert+0xf0/0x2e50 [ 3447.650937] ? lock_release+0xa00/0xa00 [ 3447.654941] ? perf_trace_sched_process_exec+0x860/0x860 [ 3447.660428] ? __lock_is_held+0xb5/0x140 [ 3447.664525] ? assoc_array_cancel_edit+0x90/0x90 [ 3447.669301] ? down_write+0x8a/0x130 [ 3447.673037] ? __key_link_begin+0xa7/0x300 [ 3447.677305] ? down_read+0x120/0x120 [ 3447.681055] __key_link_begin+0x135/0x300 [ 3447.685225] key_create_or_update+0x627/0x1120 [ 3447.689838] ? key_type_lookup+0xf0/0xf0 [ 3447.693929] ? join_session_keyring+0x340/0x340 [ 3447.698638] ? kmem_cache_alloc_node_trace+0x34b/0x740 [ 3447.703969] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3447.709532] __x64_sys_add_key+0x3eb/0x4f0 [ 3447.713795] ? key_get_type_from_user.constprop.6+0x110/0x110 [ 3447.719702] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3447.725098] ? trace_hardirqs_off_caller+0x310/0x310 [ 3447.730248] do_syscall_64+0x1b9/0x820 [ 3447.734162] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3447.739542] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3447.739559] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3447.739581] ? trace_hardirqs_on_caller+0x310/0x310 [ 3447.739601] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3447.739621] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3447.739646] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3447.739673] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3447.759467] RIP: 0033:0x457569 [ 3447.759486] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3447.759497] RSP: 002b:00007fd65f518c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 3447.759513] RAX: ffffffffffffffda RBX: 00007fd65f518c90 RCX: 0000000000457569 03:46:55 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008007, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:55 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3447.759529] RDX: 0000000020000100 RSI: 00000000200005c0 RDI: 0000000020000200 [ 3447.818939] RBP: 000000000072bf00 R08: fffffffffffffffd R09: 0000000000000000 [ 3447.826227] R10: 0000000000000001 R11: 0000000000000246 R12: 00007fd65f5196d4 [ 3447.833511] R13: 00000000004bd673 R14: 00000000004cc110 R15: 0000000000000003 03:46:55 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3447.949718] FAT-fs (loop5): bogus number of reserved sectors [ 3447.967119] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:56 executing program 4 (fault-call:0 fault-nth:4): add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) [ 3448.031508] FAT-fs (loop5): bogus number of reserved sectors [ 3448.045264] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:56 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:56 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x10, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:46:56 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xffff0000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:56 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) [ 3448.240010] __nla_parse: 15 callbacks suppressed [ 3448.240022] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:46:56 executing program 4: add_key$user(&(0x7f0000000200)='.ser\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) 03:46:56 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3448.329133] FAT-fs (loop5): bogus number of reserved sectors [ 3448.365348] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3448.384560] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:46:56 executing program 0 (fault-call:7 fault-nth:0): r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 3448.452152] FAT-fs (loop5): bogus number of reserved sectors [ 3448.463860] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:56 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff03e8, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:56 executing program 4: add_key$user(&(0x7f0000000200)='u.er\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) 03:46:56 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3448.615795] FAULT_INJECTION: forcing a failure. [ 3448.615795] name failslab, interval 1, probability 0, space 0, times 0 [ 3448.627179] netlink: 124 bytes leftover after parsing attributes in process `syz-executor1'. [ 3448.661000] CPU: 1 PID: 29753 Comm: syz-executor0 Not tainted 4.19.0+ #319 [ 3448.668062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3448.677441] Call Trace: [ 3448.680056] dump_stack+0x244/0x39d [ 3448.683712] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3448.688936] ? debug_smp_processor_id+0x1c/0x20 [ 3448.693621] ? perf_trace_lock+0x14d/0x7a0 [ 3448.697881] should_fail.cold.4+0xa/0x17 [ 3448.701981] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3448.707104] ? _raw_spin_unlock+0x2c/0x50 [ 3448.711271] ? __mutex_lock+0x85e/0x16f0 [ 3448.715443] ? loop_control_ioctl+0x91/0x530 [ 3448.719874] ? zap_class+0x640/0x640 [ 3448.723619] ? mutex_trylock+0x2b0/0x2b0 [ 3448.727709] ? find_held_lock+0x36/0x1c0 [ 3448.731795] ? __lock_is_held+0xb5/0x140 [ 3448.735904] ? perf_trace_sched_process_exec+0x860/0x860 [ 3448.741372] ? find_held_lock+0x36/0x1c0 [ 3448.745470] __should_failslab+0x124/0x180 [ 3448.749727] should_failslab+0x9/0x14 [ 3448.753545] kmem_cache_alloc_trace+0x2d7/0x750 [ 3448.758243] loop_add+0xa3/0xa40 [ 3448.761633] ? loop_lookup+0x105/0x230 [ 3448.765554] ? loop_queue_rq+0x690/0x690 [ 3448.769643] loop_control_ioctl+0x199/0x530 [ 3448.773980] ? loop_add+0xa40/0xa40 [ 3448.777633] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 3448.782588] ? loop_add+0xa40/0xa40 [ 3448.786235] do_vfs_ioctl+0x1de/0x1790 [ 3448.790147] ? ioctl_preallocate+0x300/0x300 [ 3448.794572] ? __fget_light+0x2e9/0x430 [ 3448.798565] ? fget_raw+0x20/0x20 [ 3448.802045] ? __sb_end_write+0xd9/0x110 [ 3448.806130] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3448.811682] ? fput+0x130/0x1a0 [ 3448.814982] ? do_syscall_64+0x9a/0x820 [ 3448.818973] ? do_syscall_64+0x9a/0x820 [ 3448.822970] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3448.827572] ? security_file_ioctl+0x94/0xc0 [ 3448.832004] ksys_ioctl+0xa9/0xd0 [ 3448.835478] __x64_sys_ioctl+0x73/0xb0 [ 3448.839389] do_syscall_64+0x1b9/0x820 [ 3448.843304] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3448.848702] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3448.853651] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3448.858520] ? trace_hardirqs_on_caller+0x310/0x310 [ 3448.863570] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3448.868610] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3448.873650] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3448.878526] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3448.883727] RIP: 0033:0x457569 [ 3448.886942] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:46:56 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) 03:46:56 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x4d040000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:46:56 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3448.905858] RSP: 002b:00007f1259a65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3448.913605] RAX: ffffffffffffffda RBX: 00007f1259a65c90 RCX: 0000000000457569 [ 3448.920883] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 3448.928178] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3448.935459] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1259a666d4 [ 3448.942739] R13: 00000000004c0606 R14: 00000000004d0a30 R15: 0000000000000006 [ 3448.988231] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:46:57 executing program 0 (fault-call:7 fault-nth:1): r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:46:57 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x2c910000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:57 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:57 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) [ 3449.101228] FAT-fs (loop5): bogus number of reserved sectors [ 3449.120652] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3449.196571] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:46:57 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) 03:46:57 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3449.282762] FAULT_INJECTION: forcing a failure. [ 3449.282762] name failslab, interval 1, probability 0, space 0, times 0 [ 3449.329310] CPU: 0 PID: 29777 Comm: syz-executor0 Not tainted 4.19.0+ #319 [ 3449.336379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3449.345751] Call Trace: [ 3449.347510] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3449.348362] dump_stack+0x244/0x39d [ 3449.348392] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3449.348423] ? debug_smp_processor_id+0x1c/0x20 [ 3449.370512] ? perf_trace_lock+0x14d/0x7a0 [ 3449.374777] should_fail.cold.4+0xa/0x17 [ 3449.378868] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3449.384019] ? zap_class+0x640/0x640 [ 3449.387755] ? __save_stack_trace+0x8d/0xf0 [ 3449.392112] ? find_held_lock+0x36/0x1c0 [ 3449.396201] ? __lock_is_held+0xb5/0x140 [ 3449.400280] ? perf_trace_sched_process_exec+0x860/0x860 [ 3449.405735] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3449.411762] ? node_tag_clear+0xc2/0x1c0 [ 3449.415851] __should_failslab+0x124/0x180 [ 3449.420126] should_failslab+0x9/0x14 [ 3449.423956] kmem_cache_alloc_node_trace+0x270/0x740 [ 3449.429086] ? __fprop_inc_percpu_max+0x2d0/0x2d0 [ 3449.433963] __kmalloc_node+0x3c/0x70 [ 3449.437791] blk_mq_alloc_tag_set+0x385/0xad0 [ 3449.442308] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3449.447870] ? blk_mq_update_nr_hw_queues+0xf00/0xf00 [ 3449.453113] loop_add+0x2c9/0xa40 [ 3449.456591] ? loop_queue_rq+0x690/0x690 [ 3449.460680] loop_control_ioctl+0x199/0x530 [ 3449.465023] ? loop_add+0xa40/0xa40 [ 3449.468679] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 3449.473629] ? loop_add+0xa40/0xa40 [ 3449.477276] do_vfs_ioctl+0x1de/0x1790 [ 3449.481189] ? ioctl_preallocate+0x300/0x300 [ 3449.485621] ? __fget_light+0x2e9/0x430 [ 3449.489614] ? fget_raw+0x20/0x20 [ 3449.493097] ? __sb_end_write+0xd9/0x110 [ 3449.497183] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3449.502737] ? fput+0x130/0x1a0 [ 3449.506043] ? do_syscall_64+0x9a/0x820 [ 3449.510037] ? do_syscall_64+0x9a/0x820 [ 3449.514273] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3449.518867] ? security_file_ioctl+0x94/0xc0 [ 3449.523318] ksys_ioctl+0xa9/0xd0 [ 3449.526795] __x64_sys_ioctl+0x73/0xb0 [ 3449.530711] do_syscall_64+0x1b9/0x820 [ 3449.534616] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3449.540007] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3449.544956] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3449.549821] ? trace_hardirqs_on_caller+0x310/0x310 [ 3449.555421] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3449.560459] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3449.565505] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3449.570378] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3449.575590] RIP: 0033:0x457569 [ 3449.578800] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3449.597711] RSP: 002b:00007f1259a65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3449.605433] RAX: ffffffffffffffda RBX: 00007f1259a65c90 RCX: 0000000000457569 [ 3449.612718] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 3449.620003] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3449.627285] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1259a666d4 [ 3449.634570] R13: 00000000004c0606 R14: 00000000004d0a30 R15: 0000000000000006 03:46:57 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x84060000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:57 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:57 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x5304, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:46:57 executing program 0 (fault-call:7 fault-nth:2): r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:46:57 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) [ 3449.743601] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:46:57 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x8573c77f, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:57 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:57 executing program 4: add_key$user(&(0x7f0000000200)="75736572ff", &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) [ 3449.866631] FAT-fs (loop5): bogus number of reserved sectors [ 3449.872493] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3449.898567] netlink: 92 bytes leftover after parsing attributes in process `syz-executor1'. 03:46:57 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3449.989906] FAULT_INJECTION: forcing a failure. [ 3449.989906] name failslab, interval 1, probability 0, space 0, times 0 [ 3450.028319] CPU: 1 PID: 29805 Comm: syz-executor0 Not tainted 4.19.0+ #319 03:46:58 executing program 4: add_key$user(&(0x7f0000000200)="75736572fe", &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) [ 3450.035402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3450.044780] Call Trace: [ 3450.047390] dump_stack+0x244/0x39d [ 3450.051052] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3450.056281] ? debug_smp_processor_id+0x1c/0x20 [ 3450.060980] ? perf_trace_lock+0x14d/0x7a0 [ 3450.065247] should_fail.cold.4+0xa/0x17 [ 3450.069337] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3450.074457] ? unwind_get_return_address+0x61/0xa0 [ 3450.079418] ? __save_stack_trace+0x8d/0xf0 [ 3450.083772] ? zap_class+0x640/0x640 03:46:58 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3450.087514] ? save_stack+0xa9/0xd0 [ 3450.091177] ? find_held_lock+0x36/0x1c0 [ 3450.095270] ? __lock_is_held+0xb5/0x140 [ 3450.099452] ? hdmi_pcm_close+0x3c8/0x9c0 [ 3450.103647] ? perf_trace_sched_process_exec+0x860/0x860 [ 3450.109138] __should_failslab+0x124/0x180 [ 3450.113405] should_failslab+0x9/0x14 [ 3450.117236] kmem_cache_alloc_node_trace+0x270/0x740 [ 3450.122367] ? kasan_unpoison_shadow+0x35/0x50 [ 3450.126991] __kmalloc_node+0x3c/0x70 [ 3450.130813] blk_mq_alloc_tag_set+0x41c/0xad0 [ 3450.135329] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3450.140919] ? blk_mq_update_nr_hw_queues+0xf00/0xf00 [ 3450.146143] loop_add+0x2c9/0xa40 [ 3450.149625] ? loop_queue_rq+0x690/0x690 [ 3450.153721] loop_control_ioctl+0x199/0x530 [ 3450.158066] ? loop_add+0xa40/0xa40 [ 3450.161725] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 3450.166683] ? loop_add+0xa40/0xa40 [ 3450.170328] do_vfs_ioctl+0x1de/0x1790 [ 3450.174249] ? ioctl_preallocate+0x300/0x300 [ 3450.178683] ? __fget_light+0x2e9/0x430 [ 3450.182678] ? fget_raw+0x20/0x20 [ 3450.186157] ? __sb_end_write+0xd9/0x110 [ 3450.190252] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3450.195814] ? fput+0x130/0x1a0 [ 3450.199120] ? do_syscall_64+0x9a/0x820 [ 3450.203116] ? do_syscall_64+0x9a/0x820 [ 3450.207117] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3450.211729] ? security_file_ioctl+0x94/0xc0 [ 3450.216167] ksys_ioctl+0xa9/0xd0 [ 3450.219647] __x64_sys_ioctl+0x73/0xb0 [ 3450.223563] do_syscall_64+0x1b9/0x820 [ 3450.227473] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3450.232861] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3450.237824] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3450.243143] ? trace_hardirqs_on_caller+0x310/0x310 [ 3450.248190] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3450.253230] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3450.258277] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3450.263159] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3450.268367] RIP: 0033:0x457569 [ 3450.271573] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3450.290497] RSP: 002b:00007f1259a65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3450.298229] RAX: ffffffffffffffda RBX: 00007f1259a65c90 RCX: 0000000000457569 [ 3450.305529] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 3450.312833] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3450.320129] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1259a666d4 [ 3450.327423] R13: 00000000004c0606 R14: 00000000004d0a30 R15: 0000000000000006 03:46:58 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3450.369392] FAT-fs (loop5): bogus number of reserved sectors [ 3450.408826] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3450.415311] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3450.445337] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:46:58 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x800000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:58 executing program 0 (fault-call:7 fault-nth:3): r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:46:58 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) 03:46:58 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0010, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:58 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x1026, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:46:58 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:58 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) 03:46:58 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:58 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3450.820179] FAULT_INJECTION: forcing a failure. [ 3450.820179] name failslab, interval 1, probability 0, space 0, times 0 [ 3450.854377] CPU: 0 PID: 29833 Comm: syz-executor0 Not tainted 4.19.0+ #319 [ 3450.861436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3450.870809] Call Trace: [ 3450.873424] dump_stack+0x244/0x39d [ 3450.877088] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3450.882313] ? debug_smp_processor_id+0x1c/0x20 [ 3450.887025] ? perf_trace_lock+0x14d/0x7a0 [ 3450.891292] should_fail.cold.4+0xa/0x17 [ 3450.895380] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3450.900514] ? kernel_text_address+0x79/0xf0 [ 3450.904956] ? __kernel_text_address+0xd/0x40 [ 3450.909472] ? zap_class+0x640/0x640 [ 3450.913203] ? __save_stack_trace+0x8d/0xf0 [ 3450.917557] ? find_held_lock+0x36/0x1c0 [ 3450.921650] ? __lock_is_held+0xb5/0x140 [ 3450.925754] ? perf_trace_sched_process_exec+0x860/0x860 [ 3450.931232] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3450.937816] __should_failslab+0x124/0x180 [ 3450.942078] should_failslab+0x9/0x14 [ 3450.945915] kmem_cache_alloc_node_trace+0x270/0x740 [ 3450.951044] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3450.956603] ? find_next_bit+0x104/0x130 [ 3450.960696] blk_mq_init_tags+0x79/0x2b0 [ 3450.964786] blk_mq_alloc_rq_map+0x9f/0x220 [ 3450.969134] __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 3450.973659] blk_mq_alloc_tag_set+0x627/0xad0 [ 3450.978193] ? blk_mq_update_nr_hw_queues+0xf00/0xf00 [ 3450.983428] loop_add+0x2c9/0xa40 [ 3450.986946] ? loop_queue_rq+0x690/0x690 [ 3450.991052] loop_control_ioctl+0x199/0x530 [ 3450.995393] ? loop_add+0xa40/0xa40 [ 3450.999043] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 3451.003998] ? loop_add+0xa40/0xa40 [ 3451.007644] do_vfs_ioctl+0x1de/0x1790 [ 3451.011553] ? ioctl_preallocate+0x300/0x300 [ 3451.015982] ? __fget_light+0x2e9/0x430 [ 3451.020002] ? fget_raw+0x20/0x20 [ 3451.023479] ? __sb_end_write+0xd9/0x110 [ 3451.027564] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3451.033119] ? fput+0x130/0x1a0 [ 3451.036434] ? do_syscall_64+0x9a/0x820 [ 3451.040434] ? do_syscall_64+0x9a/0x820 [ 3451.044431] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3451.049037] ? security_file_ioctl+0x94/0xc0 [ 3451.053481] ksys_ioctl+0xa9/0xd0 [ 3451.056959] __x64_sys_ioctl+0x73/0xb0 [ 3451.060869] do_syscall_64+0x1b9/0x820 [ 3451.064789] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3451.070172] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3451.075115] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3451.079977] ? trace_hardirqs_on_caller+0x310/0x310 [ 3451.085019] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3451.090058] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3451.095099] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3451.099972] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3451.105213] RIP: 0033:0x457569 [ 3451.108438] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3451.127366] RSP: 002b:00007f1259a65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3451.135089] RAX: ffffffffffffffda RBX: 00007f1259a65c90 RCX: 0000000000457569 [ 3451.142372] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 3451.149655] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3451.156946] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1259a666d4 [ 3451.164226] R13: 00000000004c0606 R14: 00000000004d0a30 R15: 0000000000000006 [ 3451.184678] blk-mq: reduced tag depth (128 -> 64) 03:46:59 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xb0050000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:59 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:59 executing program 0 (fault-call:7 fault-nth:4): r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:46:59 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x8d070000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) [ 3451.241083] FAT-fs (loop5): bogus number of reserved sectors [ 3451.269868] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:59 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) [ 3451.357583] FAT-fs (loop5): bogus number of reserved sectors [ 3451.365729] FAT-fs (loop5): Can't find a valid FAT filesystem 03:46:59 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:46:59 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xfffffff5, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:46:59 executing program 4: add_key$user(&(0x7f0000000200)="757365727f", &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) [ 3451.465402] FAULT_INJECTION: forcing a failure. [ 3451.465402] name failslab, interval 1, probability 0, space 0, times 0 [ 3451.515496] CPU: 0 PID: 29860 Comm: syz-executor0 Not tainted 4.19.0+ #319 [ 3451.522574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3451.531946] Call Trace: [ 3451.534589] dump_stack+0x244/0x39d [ 3451.538265] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3451.543486] ? debug_smp_processor_id+0x1c/0x20 [ 3451.548173] ? perf_trace_lock+0x14d/0x7a0 [ 3451.552443] should_fail.cold.4+0xa/0x17 [ 3451.556555] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3451.561686] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 3451.566629] ? kasan_check_read+0x11/0x20 [ 3451.570796] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 3451.576103] ? rcu_softirq_qs+0x20/0x20 [ 3451.580098] ? unwind_dump+0x190/0x190 [ 3451.584015] ? zap_class+0x640/0x640 [ 3451.587769] ? is_bpf_text_address+0xd3/0x170 [ 3451.592289] ? find_held_lock+0x36/0x1c0 [ 3451.596918] ? __lock_is_held+0xb5/0x140 [ 3451.601021] ? save_stack+0xa9/0xd0 [ 3451.604671] ? perf_trace_sched_process_exec+0x860/0x860 [ 3451.610139] ? save_stack+0x43/0xd0 [ 3451.613785] ? kasan_kmalloc+0xc7/0xe0 [ 3451.617690] ? kmem_cache_alloc_node_trace+0x14c/0x740 [ 3451.622986] ? blk_mq_init_tags+0x79/0x2b0 [ 3451.627236] ? blk_mq_alloc_tag_set+0x627/0xad0 [ 3451.632448] ? loop_add+0x2c9/0xa40 [ 3451.636120] __should_failslab+0x124/0x180 [ 3451.640373] should_failslab+0x9/0x14 [ 3451.644192] kmem_cache_alloc_node_trace+0x270/0x740 [ 3451.649325] __kmalloc_node+0x3c/0x70 [ 3451.653157] sbitmap_init_node+0x288/0x440 [ 3451.657415] sbitmap_queue_init_node+0xb2/0x850 [ 3451.662103] ? __lock_is_held+0xb5/0x140 [ 3451.666189] ? sbitmap_init_node+0x440/0x440 [ 3451.670615] ? blk_mq_init_tags+0x79/0x2b0 [ 3451.674861] ? rcu_read_lock_sched_held+0x14f/0x180 [ 3451.679939] ? kmem_cache_alloc_node_trace+0x34b/0x740 [ 3451.685250] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3451.690817] ? find_next_bit+0x104/0x130 [ 3451.694916] blk_mq_init_tags+0x116/0x2b0 [ 3451.699092] blk_mq_alloc_rq_map+0x9f/0x220 [ 3451.703437] __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 3451.707961] blk_mq_alloc_tag_set+0x627/0xad0 [ 3451.712480] ? blk_mq_update_nr_hw_queues+0xf00/0xf00 [ 3451.717698] loop_add+0x2c9/0xa40 [ 3451.721171] ? loop_queue_rq+0x690/0x690 [ 3451.725259] loop_control_ioctl+0x199/0x530 [ 3451.729616] ? loop_add+0xa40/0xa40 [ 3451.733269] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 3451.738229] ? loop_add+0xa40/0xa40 [ 3451.741871] do_vfs_ioctl+0x1de/0x1790 [ 3451.745793] ? ioctl_preallocate+0x300/0x300 [ 3451.750217] ? __fget_light+0x2e9/0x430 [ 3451.754209] ? fget_raw+0x20/0x20 [ 3451.757682] ? __sb_end_write+0xd9/0x110 [ 3451.761781] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3451.767333] ? fput+0x130/0x1a0 [ 3451.770629] ? do_syscall_64+0x9a/0x820 [ 3451.774619] ? do_syscall_64+0x9a/0x820 [ 3451.778609] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3451.783209] ? security_file_ioctl+0x94/0xc0 [ 3451.787635] ksys_ioctl+0xa9/0xd0 [ 3451.791107] __x64_sys_ioctl+0x73/0xb0 [ 3451.795025] do_syscall_64+0x1b9/0x820 [ 3451.798956] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3451.804351] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3451.809297] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3451.814158] ? trace_hardirqs_on_caller+0x310/0x310 [ 3451.819194] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3451.824228] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3451.829302] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3451.834180] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3451.839383] RIP: 0033:0x457569 [ 3451.842590] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:46:59 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff3c00, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:59 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xa70d0000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:46:59 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3451.861497] RSP: 002b:00007f1259a65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3451.869219] RAX: ffffffffffffffda RBX: 00007f1259a65c90 RCX: 0000000000457569 [ 3451.876500] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 3451.883777] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3451.891056] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1259a666d4 [ 3451.898331] R13: 00000000004c0606 R14: 00000000004d0a30 R15: 0000000000000006 [ 3451.930630] blk-mq: reduced tag depth (128 -> 64) 03:46:59 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000000036915fa2c1ec28656aaa79bb94b46fe0000600700020800008c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) 03:47:00 executing program 4: add_key$user(&(0x7f0000000200)="7573657202", &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) 03:47:00 executing program 0 (fault-call:7 fault-nth:5): r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:47:00 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3452.106037] FAT-fs (loop5): bogus number of reserved sectors [ 3452.111945] FAT-fs (loop5): Can't find a valid FAT filesystem 03:47:00 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) 03:47:00 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3452.248785] FAULT_INJECTION: forcing a failure. [ 3452.248785] name failslab, interval 1, probability 0, space 0, times 0 [ 3452.276932] CPU: 1 PID: 29891 Comm: syz-executor0 Not tainted 4.19.0+ #319 [ 3452.284000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3452.293370] Call Trace: [ 3452.295973] dump_stack+0x244/0x39d [ 3452.299631] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3452.304835] ? debug_smp_processor_id+0x1c/0x20 [ 3452.309538] ? perf_trace_lock+0x14d/0x7a0 [ 3452.313811] should_fail.cold.4+0xa/0x17 [ 3452.317917] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3452.323045] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3452.328612] ? zap_class+0x640/0x640 [ 3452.332345] ? find_held_lock+0x36/0x1c0 [ 3452.336431] ? __lock_is_held+0xb5/0x140 [ 3452.340513] ? __irqentry_text_end+0x41d0/0x1f9658 [ 3452.345485] ? perf_trace_sched_process_exec+0x860/0x860 [ 3452.350955] ? __kmalloc_node+0x3c/0x70 [ 3452.354934] ? __kmalloc_node+0x3c/0x70 [ 3452.358933] __should_failslab+0x124/0x180 [ 3452.363186] should_failslab+0x9/0x14 [ 3452.366995] kmem_cache_alloc_node_trace+0x270/0x740 [ 3452.372111] ? check_preemption_disabled+0x48/0x280 [ 3452.377141] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 3452.382167] ? find_next_bit+0x104/0x130 [ 3452.386243] sbitmap_queue_init_node+0x34d/0x850 [ 3452.391010] ? __lock_is_held+0xb5/0x140 [ 3452.395086] ? sbitmap_init_node+0x440/0x440 [ 3452.399510] ? blk_mq_init_tags+0x79/0x2b0 [ 3452.403752] ? rcu_read_lock_sched_held+0x14f/0x180 [ 3452.408804] ? kmem_cache_alloc_node_trace+0x34b/0x740 [ 3452.414095] ? find_next_bit+0x104/0x130 [ 3452.418176] blk_mq_init_tags+0x116/0x2b0 [ 3452.422337] blk_mq_alloc_rq_map+0x9f/0x220 [ 3452.426667] __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 3452.431189] blk_mq_alloc_tag_set+0x627/0xad0 [ 3452.435693] ? blk_mq_update_nr_hw_queues+0xf00/0xf00 [ 3452.440924] loop_add+0x2c9/0xa40 [ 3452.444390] ? loop_queue_rq+0x690/0x690 [ 3452.448478] loop_control_ioctl+0x199/0x530 [ 3452.452811] ? loop_add+0xa40/0xa40 [ 3452.456461] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 3452.461413] ? loop_add+0xa40/0xa40 [ 3452.465051] do_vfs_ioctl+0x1de/0x1790 [ 3452.468960] ? ioctl_preallocate+0x300/0x300 [ 3452.473399] ? __fget_light+0x2e9/0x430 [ 3452.477398] ? fget_raw+0x20/0x20 [ 3452.480869] ? __sb_end_write+0xd9/0x110 [ 3452.484956] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3452.490502] ? fput+0x130/0x1a0 [ 3452.493794] ? do_syscall_64+0x9a/0x820 [ 3452.497781] ? do_syscall_64+0x9a/0x820 [ 3452.501766] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3452.506360] ? security_file_ioctl+0x94/0xc0 [ 3452.510784] ksys_ioctl+0xa9/0xd0 [ 3452.514252] __x64_sys_ioctl+0x73/0xb0 [ 3452.518156] do_syscall_64+0x1b9/0x820 [ 3452.522052] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3452.527435] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3452.532369] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3452.537241] ? trace_hardirqs_on_caller+0x310/0x310 [ 3452.542266] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3452.547291] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3452.552324] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3452.557187] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3452.562395] RIP: 0033:0x457569 [ 3452.565608] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3452.584521] RSP: 002b:00007f1259a65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3452.592239] RAX: ffffffffffffffda RBX: 00007f1259a65c90 RCX: 0000000000457569 [ 3452.599518] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 3452.606794] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3452.614074] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1259a666d4 [ 3452.621358] R13: 00000000004c0606 R14: 00000000004d0a30 R15: 0000000000000006 03:47:00 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3452.695587] blk-mq: reduced tag depth (128 -> 64) [ 3452.732272] FAT-fs (loop5): bogus number of reserved sectors [ 3452.744927] FAT-fs (loop5): Can't find a valid FAT filesystem 03:47:00 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x1026000000000000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:47:00 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbffb80c, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:47:00 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:47:00 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x3d0d0000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:47:00 executing program 0 (fault-call:7 fault-nth:6): r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:47:00 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'.yz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) 03:47:00 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000000036915fa2c1ec28656aaa79bb94b46fe000000bc00020800008c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) 03:47:01 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0xffffffffffffffff, 0x100000000000000}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) [ 3453.038695] FAULT_INJECTION: forcing a failure. [ 3453.038695] name failslab, interval 1, probability 0, space 0, times 0 [ 3453.093134] CPU: 1 PID: 29913 Comm: syz-executor0 Not tainted 4.19.0+ #319 [ 3453.100230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3453.109603] Call Trace: [ 3453.112230] dump_stack+0x244/0x39d [ 3453.115893] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3453.121229] ? debug_smp_processor_id+0x1c/0x20 [ 3453.125956] ? perf_trace_lock+0x14d/0x7a0 [ 3453.130224] should_fail.cold.4+0xa/0x17 [ 3453.134316] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3453.139463] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3453.145031] ? zap_class+0x640/0x640 [ 3453.148793] ? find_held_lock+0x36/0x1c0 [ 3453.152883] ? __lock_is_held+0xb5/0x140 [ 3453.157059] ? nlm_xdr_enc_unlockargs+0x68/0x70 [ 3453.161774] ? perf_trace_sched_process_exec+0x860/0x860 [ 3453.167256] ? __lockdep_init_map+0x105/0x590 [ 3453.171792] __should_failslab+0x124/0x180 [ 3453.176055] should_failslab+0x9/0x14 [ 3453.179881] kmem_cache_alloc_node_trace+0x270/0x740 [ 3453.185050] ? init_wait_entry+0x1c0/0x1c0 [ 3453.189311] ? check_preemption_disabled+0x48/0x280 [ 3453.194352] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 3453.199473] sbitmap_queue_init_node+0x34d/0x850 [ 3453.204323] ? __lock_is_held+0xb5/0x140 [ 3453.208423] ? sbitmap_init_node+0x440/0x440 [ 3453.212854] ? blk_mq_init_tags+0x79/0x2b0 [ 3453.217112] ? rcu_read_lock_sched_held+0x14f/0x180 [ 3453.222152] ? kmem_cache_alloc_node_trace+0x34b/0x740 [ 3453.227456] ? find_next_bit+0x104/0x130 [ 3453.231547] blk_mq_init_tags+0x177/0x2b0 [ 3453.235730] blk_mq_alloc_rq_map+0x9f/0x220 [ 3453.240076] __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 3453.244600] blk_mq_alloc_tag_set+0x627/0xad0 [ 3453.249131] ? blk_mq_update_nr_hw_queues+0xf00/0xf00 [ 3453.254435] loop_add+0x2c9/0xa40 [ 3453.257945] ? loop_queue_rq+0x690/0x690 [ 3453.262045] loop_control_ioctl+0x199/0x530 [ 3453.266390] ? loop_add+0xa40/0xa40 [ 3453.270053] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 3453.275010] ? loop_add+0xa40/0xa40 [ 3453.278663] do_vfs_ioctl+0x1de/0x1790 [ 3453.282583] ? ioctl_preallocate+0x300/0x300 [ 3453.287015] ? __fget_light+0x2e9/0x430 [ 3453.291179] ? fget_raw+0x20/0x20 [ 3453.294660] ? __sb_end_write+0xd9/0x110 [ 3453.298749] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3453.304312] ? fput+0x130/0x1a0 [ 3453.307621] ? do_syscall_64+0x9a/0x820 [ 3453.311626] ? do_syscall_64+0x9a/0x820 [ 3453.315625] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3453.320232] ? security_file_ioctl+0x94/0xc0 [ 3453.324943] ksys_ioctl+0xa9/0xd0 [ 3453.328441] __x64_sys_ioctl+0x73/0xb0 [ 3453.332356] do_syscall_64+0x1b9/0x820 [ 3453.336276] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3453.341664] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3453.346615] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3453.351487] ? trace_hardirqs_on_caller+0x310/0x310 [ 3453.356527] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3453.361657] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3453.366709] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3453.371585] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3453.376798] RIP: 0033:0x457569 03:47:01 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3453.380017] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3453.398966] RSP: 002b:00007f1259a65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3453.406998] RAX: ffffffffffffffda RBX: 00007f1259a65c90 RCX: 0000000000457569 [ 3453.414290] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 3453.421576] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3453.428977] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1259a666d4 [ 3453.436265] R13: 00000000004c0606 R14: 00000000004d0a30 R15: 0000000000000006 [ 3453.507177] __nla_parse: 15 callbacks suppressed [ 3453.507188] netlink: 188 bytes leftover after parsing attributes in process `syz-executor1'. [ 3453.510418] blk-mq: reduced tag depth (128 -> 64) 03:47:01 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:47:01 executing program 0 (fault-call:7 fault-nth:7): r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 3453.552227] FAT-fs (loop5): bogus number of reserved sectors [ 3453.558794] FAT-fs (loop5): Can't find a valid FAT filesystem 03:47:01 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0xffffffffffffffff, 0xfe7f000000000000}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) [ 3453.628166] netlink: 188 bytes leftover after parsing attributes in process `syz-executor1'. [ 3453.740736] FAULT_INJECTION: forcing a failure. [ 3453.740736] name failslab, interval 1, probability 0, space 0, times 0 [ 3453.781430] CPU: 1 PID: 29928 Comm: syz-executor0 Not tainted 4.19.0+ #319 [ 3453.788568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3453.797970] Call Trace: [ 3453.800594] dump_stack+0x244/0x39d [ 3453.804267] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3453.809492] ? __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 3453.814189] ? blk_mq_alloc_tag_set+0x627/0xad0 [ 3453.818882] ? loop_add+0x2c9/0xa40 [ 3453.822565] ? loop_control_ioctl+0x199/0x530 [ 3453.827090] ? ksys_ioctl+0xa9/0xd0 [ 3453.830752] should_fail.cold.4+0xa/0x17 [ 3453.834851] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3453.839988] ? zap_class+0x640/0x640 [ 3453.843742] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3453.849314] ? check_preemption_disabled+0x48/0x280 [ 3453.854483] ? zap_class+0x640/0x640 [ 3453.858234] ? __lock_is_held+0xb5/0x140 [ 3453.862330] ? __lockdep_init_map+0x105/0x590 [ 3453.866864] ? __lock_is_held+0xb5/0x140 [ 3453.871006] ? perf_trace_sched_process_exec+0x860/0x860 [ 3453.876501] ? sbitmap_queue_init_node+0xce/0x850 [ 3453.881369] ? __lock_is_held+0xb5/0x140 [ 3453.885488] __should_failslab+0x124/0x180 [ 3453.889758] should_failslab+0x9/0x14 [ 3453.893594] kmem_cache_alloc_node_trace+0x270/0x740 [ 3453.898729] ? find_next_bit+0x104/0x130 [ 3453.902832] __kmalloc_node+0x3c/0x70 [ 3453.906666] blk_mq_alloc_rq_map+0xcc/0x220 [ 3453.911031] __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 3453.915563] blk_mq_alloc_tag_set+0x627/0xad0 [ 3453.920102] ? blk_mq_update_nr_hw_queues+0xf00/0xf00 [ 3453.925484] loop_add+0x2c9/0xa40 [ 3453.928977] ? loop_queue_rq+0x690/0x690 [ 3453.933085] loop_control_ioctl+0x199/0x530 [ 3453.937438] ? loop_add+0xa40/0xa40 [ 3453.941106] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 3453.946075] ? loop_add+0xa40/0xa40 [ 3453.949733] do_vfs_ioctl+0x1de/0x1790 [ 3453.953659] ? ioctl_preallocate+0x300/0x300 [ 3453.958100] ? __fget_light+0x2e9/0x430 [ 3453.962107] ? fget_raw+0x20/0x20 [ 3453.965602] ? __sb_end_write+0xd9/0x110 [ 3453.969702] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3453.975268] ? fput+0x130/0x1a0 [ 3453.978692] ? do_syscall_64+0x9a/0x820 [ 3453.982697] ? do_syscall_64+0x9a/0x820 [ 3453.986702] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3453.991326] ? security_file_ioctl+0x94/0xc0 [ 3453.995768] ksys_ioctl+0xa9/0xd0 [ 3453.999264] __x64_sys_ioctl+0x73/0xb0 [ 3454.003183] do_syscall_64+0x1b9/0x820 [ 3454.007100] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3454.012498] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3454.017457] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3454.022415] ? trace_hardirqs_on_caller+0x310/0x310 [ 3454.027476] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3454.032551] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3454.037606] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3454.042487] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3454.047704] RIP: 0033:0x457569 [ 3454.050953] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3454.069878] RSP: 002b:00007f1259a86c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3454.077646] RAX: ffffffffffffffda RBX: 00007f1259a86c90 RCX: 0000000000457569 [ 3454.084961] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 3454.092259] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3454.099555] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1259a876d4 [ 3454.106968] R13: 00000000004c0606 R14: 00000000004d0a30 R15: 0000000000000006 03:47:02 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x700000000000000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:47:02 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:47:02 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0xffffffffffffffff, 0x2000000}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) 03:47:02 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff1100, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:47:02 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xd38c0000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) [ 3454.145720] blk-mq: reduced tag depth (128 -> 64) 03:47:02 executing program 0 (fault-call:7 fault-nth:8): r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:47:02 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0xffffffffffffffff, 0xfe7f0000}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) [ 3454.230829] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:47:02 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3454.290820] FAT-fs (loop5): bogus number of reserved sectors [ 3454.297485] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3454.356847] netlink: 188 bytes leftover after parsing attributes in process `syz-executor1'. [ 3454.406984] FAULT_INJECTION: forcing a failure. [ 3454.406984] name failslab, interval 1, probability 0, space 0, times 0 [ 3454.425252] CPU: 0 PID: 29955 Comm: syz-executor0 Not tainted 4.19.0+ #319 [ 3454.432310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3454.441696] Call Trace: [ 3454.444329] dump_stack+0x244/0x39d [ 3454.448002] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3454.453248] should_fail.cold.4+0xa/0x17 [ 3454.457350] ? kernel_text_address+0x79/0xf0 [ 3454.461799] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3454.466966] ? unwind_get_return_address+0x61/0xa0 [ 3454.471962] ? __save_stack_trace+0x8d/0xf0 [ 3454.476332] ? zap_class+0x640/0x640 [ 3454.480085] ? save_stack+0xa9/0xd0 [ 3454.483744] ? save_stack+0x43/0xd0 [ 3454.487408] ? kasan_kmalloc+0xc7/0xe0 [ 3454.491319] ? __kmalloc_node+0x50/0x70 [ 3454.495326] ? blk_mq_alloc_rq_map+0xcc/0x220 [ 3454.499851] ? __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 3454.504553] ? blk_mq_alloc_tag_set+0x627/0xad0 [ 3454.509254] ? loop_add+0x2c9/0xa40 [ 3454.512952] ? __lock_is_held+0xb5/0x140 [ 3454.517148] ? zap_class+0x640/0x640 [ 3454.520944] ? check_preemption_disabled+0x48/0x280 [ 3454.526000] ? perf_trace_sched_process_exec+0x860/0x860 [ 3454.531485] ? __lock_is_held+0xb5/0x140 [ 3454.535584] __should_failslab+0x124/0x180 [ 3454.539867] should_failslab+0x9/0x14 [ 3454.543737] kmem_cache_alloc_node_trace+0x270/0x740 [ 3454.548877] ? kasan_unpoison_shadow+0x35/0x50 [ 3454.553535] __kmalloc_node+0x3c/0x70 [ 3454.557372] blk_mq_alloc_rq_map+0x10d/0x220 [ 3454.561818] __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 3454.566348] blk_mq_alloc_tag_set+0x627/0xad0 [ 3454.570881] ? blk_mq_update_nr_hw_queues+0xf00/0xf00 [ 3454.576148] loop_add+0x2c9/0xa40 [ 3454.579639] ? loop_queue_rq+0x690/0x690 [ 3454.583752] loop_control_ioctl+0x199/0x530 [ 3454.588227] ? loop_add+0xa40/0xa40 [ 3454.591927] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 3454.596932] ? loop_add+0xa40/0xa40 [ 3454.600595] do_vfs_ioctl+0x1de/0x1790 [ 3454.604523] ? ioctl_preallocate+0x300/0x300 [ 3454.608975] ? __fget_light+0x2e9/0x430 [ 3454.613147] ? fget_raw+0x20/0x20 [ 3454.616638] ? __sb_end_write+0xd9/0x110 [ 3454.620747] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3454.626329] ? fput+0x130/0x1a0 [ 3454.629642] ? do_syscall_64+0x9a/0x820 [ 3454.633647] ? do_syscall_64+0x9a/0x820 [ 3454.637657] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3454.642274] ? security_file_ioctl+0x94/0xc0 [ 3454.646719] ksys_ioctl+0xa9/0xd0 [ 3454.650209] __x64_sys_ioctl+0x73/0xb0 [ 3454.654133] do_syscall_64+0x1b9/0x820 [ 3454.658057] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3454.663453] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3454.668427] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3454.673415] ? trace_hardirqs_on_caller+0x310/0x310 [ 3454.678480] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3454.683528] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3454.688587] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3454.693602] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3454.698824] RIP: 0033:0x457569 [ 3454.702050] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3454.720976] RSP: 002b:00007f1259a65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3454.728886] RAX: ffffffffffffffda RBX: 00007f1259a65c90 RCX: 0000000000457569 [ 3454.736232] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 3454.743526] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3454.750994] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1259a666d4 03:47:02 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3454.758290] R13: 00000000004c0606 R14: 00000000004d0a30 R15: 0000000000000006 [ 3454.777313] blk-mq: reduced tag depth (128 -> 64) 03:47:02 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3454.807787] netlink: 188 bytes leftover after parsing attributes in process `syz-executor1'. [ 3454.841646] FAT-fs (loop5): bogus number of reserved sectors 03:47:02 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x600b0000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:47:02 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0xffffffffffffffff, 0xfe7f}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) [ 3454.863653] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3454.904502] netlink: 188 bytes leftover after parsing attributes in process `syz-executor1'. 03:47:02 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe0000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:47:02 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:47:03 executing program 0 (fault-call:7 fault-nth:9): r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 3455.036553] netlink: 188 bytes leftover after parsing attributes in process `syz-executor1'. 03:47:03 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0a00, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:47:03 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0xffffffffffffffff, 0x2}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) 03:47:03 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3455.157241] FAT-fs (loop5): bogus number of reserved sectors [ 3455.173061] FAT-fs (loop5): Can't find a valid FAT filesystem 03:47:03 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0xffffffffffffffff, 0x7ffe}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) [ 3455.227317] netlink: 188 bytes leftover after parsing attributes in process `syz-executor1'. 03:47:03 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x2c110000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:47:03 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3455.271327] FAULT_INJECTION: forcing a failure. [ 3455.271327] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3455.308192] CPU: 1 PID: 29985 Comm: syz-executor0 Not tainted 4.19.0+ #319 [ 3455.315473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3455.325001] Call Trace: [ 3455.327630] dump_stack+0x244/0x39d [ 3455.331306] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3455.336537] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 3455.341508] should_fail.cold.4+0xa/0x17 [ 3455.345633] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3455.350781] ? zap_class+0x640/0x640 [ 3455.354536] ? find_held_lock+0x36/0x1c0 [ 3455.358735] ? is_bpf_text_address+0xac/0x170 [ 3455.362807] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3455.363354] ? __lock_is_held+0xb5/0x140 [ 3455.363382] ? rcu_softirq_qs+0x20/0x20 [ 3455.363406] ? perf_trace_sched_process_exec+0x860/0x860 [ 3455.363435] ? is_bpf_text_address+0xd3/0x170 [ 3455.390055] ? __might_sleep+0x95/0x190 [ 3455.394075] __alloc_pages_nodemask+0x34b/0xde0 [ 3455.398788] ? __alloc_pages_slowpath+0x2e10/0x2e10 [ 3455.403850] ? save_stack+0xa9/0xd0 [ 3455.407795] ? save_stack+0x43/0xd0 [ 3455.411455] ? kasan_kmalloc+0xc7/0xe0 [ 3455.415372] ? __kmalloc_node+0x50/0x70 03:47:03 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3455.419386] ? blk_mq_alloc_rq_map+0x10d/0x220 [ 3455.424009] ? __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 3455.428718] ? __x64_sys_ioctl+0x73/0xb0 [ 3455.432813] ? do_syscall_64+0x1b9/0x820 [ 3455.437017] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3455.442420] ? zap_class+0x640/0x640 [ 3455.446179] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3455.451757] ? find_next_bit+0x104/0x130 [ 3455.455945] ? __cpu_to_node+0x7d/0xa0 [ 3455.459875] ? blk_mq_hw_queue_to_node+0xcc/0x110 [ 3455.464932] blk_mq_alloc_rqs+0x31c/0x980 [ 3455.469132] ? blk_mq_alloc_rq_map+0x220/0x220 [ 3455.473749] ? kmem_cache_alloc_node_trace+0x34b/0x740 [ 3455.479181] ? kasan_unpoison_shadow+0x35/0x50 [ 3455.483949] ? __kmalloc_node+0x50/0x70 [ 3455.487992] __blk_mq_alloc_rq_map+0x15f/0x2e0 [ 3455.492613] blk_mq_alloc_tag_set+0x627/0xad0 [ 3455.497155] ? blk_mq_update_nr_hw_queues+0xf00/0xf00 [ 3455.502398] loop_add+0x2c9/0xa40 [ 3455.505932] ? loop_queue_rq+0x690/0x690 [ 3455.510042] loop_control_ioctl+0x199/0x530 [ 3455.514927] ? loop_add+0xa40/0xa40 [ 3455.518605] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 3455.523578] ? loop_add+0xa40/0xa40 [ 3455.527247] do_vfs_ioctl+0x1de/0x1790 [ 3455.531176] ? ioctl_preallocate+0x300/0x300 [ 3455.535736] ? __fget_light+0x2e9/0x430 [ 3455.539744] ? fget_raw+0x20/0x20 [ 3455.543233] ? __sb_end_write+0xd9/0x110 [ 3455.547331] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3455.552932] ? fput+0x130/0x1a0 [ 3455.556252] ? do_syscall_64+0x9a/0x820 [ 3455.560262] ? do_syscall_64+0x9a/0x820 [ 3455.564368] ? lockdep_hardirqs_on+0x3bb/0x5b0 03:47:03 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff3f00, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) [ 3455.568983] ? security_file_ioctl+0x94/0xc0 [ 3455.573556] ksys_ioctl+0xa9/0xd0 [ 3455.577050] __x64_sys_ioctl+0x73/0xb0 [ 3455.580980] do_syscall_64+0x1b9/0x820 [ 3455.584936] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3455.590338] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3455.595300] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3455.600286] ? trace_hardirqs_on_caller+0x310/0x310 [ 3455.605333] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3455.610383] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3455.615452] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3455.620345] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3455.625655] RIP: 0033:0x457569 [ 3455.628881] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3455.648098] RSP: 002b:00007f1259a65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3455.655839] RAX: ffffffffffffffda RBX: 00007f1259a65c90 RCX: 0000000000457569 [ 3455.663134] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 03:47:03 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0xffffffffffffffff, 0xfeffff00000000}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) [ 3455.664620] netlink: 188 bytes leftover after parsing attributes in process `syz-executor1'. [ 3455.670431] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3455.670442] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1259a666d4 [ 3455.670452] R13: 00000000004c0606 R14: 00000000004d0a30 R15: 0000000000000006 [ 3455.773514] FAT-fs (loop5): bogus number of reserved sectors [ 3455.784739] FAT-fs (loop5): Can't find a valid FAT filesystem 03:47:03 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xfdfdffff00000000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:47:03 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:47:03 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0xffffffffffffffff, 0xfeffff}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) 03:47:03 executing program 0 (fault-call:7 fault-nth:10): r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:47:03 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000000036915fa2c1ec28656aaa79bb94b46fe0000000710020800008c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) 03:47:03 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0xffffffffffffffff, 0x1000000}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) 03:47:04 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0xffffffffffffffff, 0xfffffe00}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) [ 3456.152629] FAT-fs (loop5): bogus number of reserved sectors [ 3456.162608] FAULT_INJECTION: forcing a failure. [ 3456.162608] name failslab, interval 1, probability 0, space 0, times 0 [ 3456.180098] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3456.189178] CPU: 0 PID: 30014 Comm: syz-executor0 Not tainted 4.19.0+ #319 [ 3456.196231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3456.205614] Call Trace: [ 3456.208242] dump_stack+0x244/0x39d [ 3456.211942] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3456.217189] ? debug_smp_processor_id+0x1c/0x20 [ 3456.221893] ? perf_trace_lock+0x14d/0x7a0 [ 3456.226202] should_fail.cold.4+0xa/0x17 [ 3456.230297] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3456.235427] ? check_preemption_disabled+0x48/0x280 [ 3456.240608] ? __lock_is_held+0xb5/0x140 [ 3456.244701] ? zap_class+0x640/0x640 [ 3456.248459] ? find_held_lock+0x36/0x1c0 [ 3456.252562] ? __lock_is_held+0xb5/0x140 [ 3456.256721] ? ntfs_read_inode_mount+0x1568/0x23d0 [ 3456.261700] ? blk_mq_alloc_rq_map+0x10d/0x220 [ 3456.266315] ? perf_trace_sched_process_exec+0x860/0x860 [ 3456.271800] ? __x64_sys_ioctl+0x73/0xb0 [ 3456.275933] __should_failslab+0x124/0x180 [ 3456.280206] should_failslab+0x9/0x14 [ 3456.284041] kmem_cache_alloc_node+0x26e/0x730 [ 3456.288660] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 3456.293782] blk_alloc_queue_node+0xed/0xe80 [ 3456.298238] ? blk_init_allocated_queue+0x640/0x640 [ 3456.303379] ? __mutex_init+0x1f7/0x290 [ 3456.307393] ? psi_task_change.cold.11+0x1ac/0x1ac [ 3456.312390] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3456.318093] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 3456.322886] ? blk_mq_alloc_tag_set+0x50e/0xad0 [ 3456.327634] ? blk_mq_update_nr_hw_queues+0xf00/0xf00 [ 3456.332861] blk_mq_init_queue+0x4b/0xb0 [ 3456.336987] loop_add+0x376/0xa40 [ 3456.340471] ? loop_queue_rq+0x690/0x690 [ 3456.344576] loop_control_ioctl+0x199/0x530 [ 3456.348970] ? loop_add+0xa40/0xa40 [ 3456.352636] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 3456.357603] ? loop_add+0xa40/0xa40 [ 3456.361265] do_vfs_ioctl+0x1de/0x1790 [ 3456.365194] ? ioctl_preallocate+0x300/0x300 [ 3456.369633] ? __fget_light+0x2e9/0x430 [ 3456.373657] ? fget_raw+0x20/0x20 [ 3456.377168] ? __sb_end_write+0xd9/0x110 [ 3456.381267] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3456.386834] ? fput+0x130/0x1a0 [ 3456.390144] ? do_syscall_64+0x9a/0x820 [ 3456.394146] ? do_syscall_64+0x9a/0x820 [ 3456.398156] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3456.402773] ? security_file_ioctl+0x94/0xc0 [ 3456.407216] ksys_ioctl+0xa9/0xd0 [ 3456.410862] __x64_sys_ioctl+0x73/0xb0 [ 3456.414819] do_syscall_64+0x1b9/0x820 [ 3456.418742] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3456.424265] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3456.429224] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3456.434103] ? trace_hardirqs_on_caller+0x310/0x310 [ 3456.439154] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3456.444280] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3456.449434] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3456.454322] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3456.459691] RIP: 0033:0x457569 [ 3456.462942] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3456.481875] RSP: 002b:00007f1259a86c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3456.489841] RAX: ffffffffffffffda RBX: 00007f1259a86c90 RCX: 0000000000457569 [ 3456.497138] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 3456.504433] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3456.511731] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1259a876d4 [ 3456.519024] R13: 00000000004c0606 R14: 00000000004d0a30 R15: 0000000000000006 03:47:04 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xa78d0000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:47:04 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:47:04 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x35090000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:47:04 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0xffffffffffffffff, 0x200000000000000}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) 03:47:04 executing program 0 (fault-call:7 fault-nth:11): r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 3456.596132] FAT-fs (loop5): bogus number of reserved sectors [ 3456.602006] FAT-fs (loop5): Can't find a valid FAT filesystem 03:47:04 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x4000000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:47:04 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) [ 3456.768275] FAULT_INJECTION: forcing a failure. [ 3456.768275] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3456.780282] CPU: 1 PID: 30038 Comm: syz-executor0 Not tainted 4.19.0+ #319 [ 3456.787318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3456.796695] Call Trace: [ 3456.799322] dump_stack+0x244/0x39d [ 3456.802996] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3456.808239] should_fail.cold.4+0xa/0x17 [ 3456.812353] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3456.817517] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 3456.822533] ? mark_held_locks+0x130/0x130 [ 3456.826811] ? zap_class+0x640/0x640 [ 3456.830561] ? find_held_lock+0x36/0x1c0 [ 3456.834654] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3456.840340] ? check_preemption_disabled+0x48/0x280 [ 3456.845399] ? debug_smp_processor_id+0x1c/0x20 [ 3456.850108] ? perf_trace_lock+0x14d/0x7a0 [ 3456.854382] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3456.860075] ? should_fail+0x22d/0xd01 [ 3456.863997] ? lock_is_held_type+0x210/0x210 [ 3456.868449] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3456.873593] ? check_preemption_disabled+0x48/0x280 [ 3456.878649] __alloc_pages_nodemask+0x34b/0xde0 [ 3456.883355] ? __lock_is_held+0xb5/0x140 [ 3456.887453] ? __alloc_pages_slowpath+0x2e10/0x2e10 [ 3456.892777] ? find_held_lock+0x36/0x1c0 [ 3456.896935] ? trace_hardirqs_off+0xb8/0x310 [ 3456.901385] cache_grow_begin+0xa5/0x8c0 [ 3456.905496] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3456.911215] ? check_preemption_disabled+0x48/0x280 [ 3456.916275] kmem_cache_alloc_node+0x667/0x730 [ 3456.920937] blk_alloc_queue_node+0xed/0xe80 [ 3456.925396] ? blk_init_allocated_queue+0x640/0x640 [ 3456.930460] ? __mutex_init+0x1f7/0x290 [ 3456.934467] ? psi_task_change.cold.11+0x1ac/0x1ac [ 3456.939474] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3456.945052] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 3456.949953] ? blk_mq_alloc_tag_set+0x50e/0xad0 [ 3456.954667] ? blk_mq_update_nr_hw_queues+0xf00/0xf00 [ 3456.960042] blk_mq_init_queue+0x4b/0xb0 [ 3456.964286] loop_add+0x376/0xa40 [ 3456.967776] ? loop_queue_rq+0x690/0x690 [ 3456.971879] loop_control_ioctl+0x199/0x530 [ 3456.976273] ? loop_add+0xa40/0xa40 [ 3456.979973] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 3456.984970] ? loop_add+0xa40/0xa40 [ 3456.988631] do_vfs_ioctl+0x1de/0x1790 [ 3456.992560] ? ioctl_preallocate+0x300/0x300 [ 3456.997006] ? __fget_light+0x2e9/0x430 [ 3457.001011] ? fget_raw+0x20/0x20 [ 3457.004500] ? __sb_end_write+0xd9/0x110 [ 3457.008600] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3457.014175] ? fput+0x130/0x1a0 [ 3457.017491] ? do_syscall_64+0x9a/0x820 [ 3457.021621] ? do_syscall_64+0x9a/0x820 [ 3457.025632] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3457.030252] ? security_file_ioctl+0x94/0xc0 [ 3457.034970] ksys_ioctl+0xa9/0xd0 [ 3457.038589] __x64_sys_ioctl+0x73/0xb0 [ 3457.042515] do_syscall_64+0x1b9/0x820 [ 3457.046442] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3457.051977] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3457.057056] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3457.061968] ? trace_hardirqs_on_caller+0x310/0x310 [ 3457.067016] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3457.072067] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3457.077124] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3457.082009] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3457.087229] RIP: 0033:0x457569 [ 3457.090457] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3457.109416] RSP: 002b:00007f1259a65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 03:47:05 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3457.117159] RAX: ffffffffffffffda RBX: 00007f1259a65c90 RCX: 0000000000457569 [ 3457.124457] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 3457.131838] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3457.139139] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1259a666d4 [ 3457.146442] R13: 00000000004c0606 R14: 00000000004d0a30 R15: 0000000000000006 03:47:05 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:47:05 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xee860000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:47:05 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:47:05 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) [ 3457.350116] FAT-fs (loop5): bogus number of reserved sectors [ 3457.370372] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3457.447494] FAT-fs (loop5): bogus number of reserved sectors [ 3457.459388] FAT-fs (loop5): Can't find a valid FAT filesystem 03:47:05 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x9e8c0000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:47:05 executing program 0 (fault-call:7 fault-nth:12): r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:47:05 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:47:05 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) 03:47:05 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x600, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:47:05 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x971d37f, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:47:05 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:47:05 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) [ 3457.679278] FAULT_INJECTION: forcing a failure. [ 3457.679278] name failslab, interval 1, probability 0, space 0, times 0 [ 3457.708943] CPU: 0 PID: 30070 Comm: syz-executor0 Not tainted 4.19.0+ #319 [ 3457.716010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3457.725501] Call Trace: [ 3457.728122] dump_stack+0x244/0x39d [ 3457.731850] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3457.737069] ? debug_smp_processor_id+0x1c/0x20 [ 3457.741764] ? perf_trace_lock+0x14d/0x7a0 [ 3457.746032] should_fail.cold.4+0xa/0x17 [ 3457.750121] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3457.755247] ? __save_stack_trace+0x8d/0xf0 [ 3457.759605] ? zap_class+0x640/0x640 [ 3457.763346] ? save_stack+0x43/0xd0 [ 3457.766993] ? kasan_kmalloc+0xc7/0xe0 [ 3457.770938] ? find_held_lock+0x36/0x1c0 [ 3457.775031] ? __lock_is_held+0xb5/0x140 [ 3457.779133] ? perf_trace_sched_process_exec+0x860/0x860 [ 3457.784667] ? __lock_is_held+0xb5/0x140 [ 3457.788764] __should_failslab+0x124/0x180 [ 3457.793046] should_failslab+0x9/0x14 [ 3457.796870] kmem_cache_alloc+0x2be/0x730 [ 3457.801076] ? kasan_kmalloc+0xc7/0xe0 [ 3457.805059] ? mempool_free+0x370/0x370 [ 3457.809062] mempool_alloc_slab+0x44/0x60 [ 3457.813237] mempool_init_node+0x2d2/0x550 [ 3457.817499] ? mempool_free+0x370/0x370 [ 3457.821495] ? mempool_alloc_slab+0x60/0x60 [ 3457.825838] mempool_init+0x3d/0x50 [ 3457.829493] bioset_init+0x3d4/0x840 [ 3457.833299] ? bioset_exit+0x370/0x370 [ 3457.837405] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 3457.842453] blk_alloc_queue_node+0x287/0xe80 [ 3457.846984] ? blk_init_allocated_queue+0x640/0x640 [ 3457.852024] ? __mutex_init+0x1f7/0x290 [ 3457.856049] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3457.861606] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 3457.866391] ? blk_mq_alloc_tag_set+0x50e/0xad0 [ 3457.871089] ? blk_mq_update_nr_hw_queues+0xf00/0xf00 [ 3457.876308] blk_mq_init_queue+0x4b/0xb0 [ 3457.880396] loop_add+0x376/0xa40 [ 3457.883876] ? loop_queue_rq+0x690/0x690 [ 3457.888003] loop_control_ioctl+0x199/0x530 [ 3457.892370] ? loop_add+0xa40/0xa40 [ 3457.896045] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 3457.901005] ? loop_add+0xa40/0xa40 [ 3457.904658] do_vfs_ioctl+0x1de/0x1790 [ 3457.908577] ? ioctl_preallocate+0x300/0x300 [ 3457.913007] ? __fget_light+0x2e9/0x430 [ 3457.917003] ? fget_raw+0x20/0x20 [ 3457.920482] ? __sb_end_write+0xd9/0x110 [ 3457.924574] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3457.930135] ? fput+0x130/0x1a0 [ 3457.933437] ? do_syscall_64+0x9a/0x820 [ 3457.937437] ? do_syscall_64+0x9a/0x820 [ 3457.941436] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3457.946048] ? security_file_ioctl+0x94/0xc0 [ 3457.950491] ksys_ioctl+0xa9/0xd0 [ 3457.953975] __x64_sys_ioctl+0x73/0xb0 [ 3457.957888] do_syscall_64+0x1b9/0x820 [ 3457.961833] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3457.967221] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3457.972173] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3457.977041] ? trace_hardirqs_on_caller+0x310/0x310 [ 3457.982079] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3457.987119] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3457.992167] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3457.997046] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3458.002258] RIP: 0033:0x457569 [ 3458.005477] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:47:06 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3458.024414] RSP: 002b:00007f1259a65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3458.032321] RAX: ffffffffffffffda RBX: 00007f1259a65c90 RCX: 0000000000457569 [ 3458.039620] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 3458.046941] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3458.054232] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1259a666d4 [ 3458.061593] R13: 00000000004c0606 R14: 00000000004d0a30 R15: 0000000000000006 03:47:06 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) [ 3458.100772] FAT-fs (loop5): bogus number of reserved sectors [ 3458.120339] FAT-fs (loop5): Can't find a valid FAT filesystem 03:47:06 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3458.222275] FAT-fs (loop5): bogus number of reserved sectors [ 3458.245608] FAT-fs (loop5): Can't find a valid FAT filesystem 03:47:06 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff7530, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:47:06 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) 03:47:06 executing program 0 (fault-call:7 fault-nth:13): r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:47:06 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x6000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:47:06 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:47:06 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)="7f", 0x1, 0xfffffffffffffffd) [ 3458.549520] FAULT_INJECTION: forcing a failure. [ 3458.549520] name failslab, interval 1, probability 0, space 0, times 0 [ 3458.587567] CPU: 0 PID: 30107 Comm: syz-executor0 Not tainted 4.19.0+ #319 [ 3458.594658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3458.604038] Call Trace: [ 3458.606669] dump_stack+0x244/0x39d [ 3458.610336] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3458.615567] ? debug_smp_processor_id+0x1c/0x20 [ 3458.620273] ? perf_trace_lock+0x14d/0x7a0 [ 3458.624547] should_fail.cold.4+0xa/0x17 [ 3458.628647] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3458.633787] ? save_stack+0xa9/0xd0 [ 3458.637448] ? kasan_kmalloc+0xc7/0xe0 [ 3458.641365] ? kasan_slab_alloc+0x12/0x20 [ 3458.645540] ? kmem_cache_alloc+0x12e/0x730 [ 3458.649889] ? mempool_alloc_slab+0x44/0x60 [ 3458.654275] ? mempool_init_node+0x2d2/0x550 [ 3458.658715] ? mempool_init+0x3d/0x50 [ 3458.662547] ? zap_class+0x640/0x640 [ 3458.666294] ? loop_add+0x376/0xa40 [ 3458.669977] ? do_vfs_ioctl+0x1de/0x1790 [ 3458.674066] ? ksys_ioctl+0xa9/0xd0 [ 3458.677722] ? __x64_sys_ioctl+0x73/0xb0 [ 3458.681814] ? do_syscall_64+0x1b9/0x820 [ 3458.685951] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3458.691357] ? find_held_lock+0x36/0x1c0 [ 3458.695459] ? __lock_is_held+0xb5/0x140 [ 3458.699572] ? perf_trace_sched_process_exec+0x860/0x860 [ 3458.705065] __should_failslab+0x124/0x180 [ 3458.709337] should_failslab+0x9/0x14 [ 3458.713168] kmem_cache_alloc+0x2be/0x730 [ 3458.717352] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3458.722947] ? __phys_addr+0xa6/0x120 [ 3458.726786] ? mempool_init+0x3d/0x50 [ 3458.730622] ? mempool_free+0x370/0x370 [ 3458.734755] mempool_alloc_slab+0x44/0x60 [ 3458.738973] mempool_init_node+0x2d2/0x550 [ 3458.743246] ? mempool_free+0x370/0x370 [ 3458.747250] ? mempool_alloc_slab+0x60/0x60 [ 3458.751606] mempool_init+0x3d/0x50 [ 3458.755274] bioset_init+0x3d4/0x840 [ 3458.759026] ? bioset_exit+0x370/0x370 [ 3458.762976] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 3458.768028] blk_alloc_queue_node+0x287/0xe80 [ 3458.772569] ? blk_init_allocated_queue+0x640/0x640 [ 3458.777618] ? __mutex_init+0x1f7/0x290 [ 3458.781651] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3458.787221] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 3458.792014] ? blk_mq_alloc_tag_set+0x50e/0xad0 [ 3458.796721] ? blk_mq_update_nr_hw_queues+0xf00/0xf00 [ 3458.801987] blk_mq_init_queue+0x4b/0xb0 [ 3458.806080] loop_add+0x376/0xa40 [ 3458.809569] ? loop_queue_rq+0x690/0x690 [ 3458.813671] loop_control_ioctl+0x199/0x530 [ 3458.818027] ? loop_add+0xa40/0xa40 [ 3458.821694] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 3458.826658] ? loop_add+0xa40/0xa40 [ 3458.830317] do_vfs_ioctl+0x1de/0x1790 [ 3458.834248] ? ioctl_preallocate+0x300/0x300 [ 3458.838687] ? __fget_light+0x2e9/0x430 [ 3458.842694] ? fget_raw+0x20/0x20 [ 3458.846183] ? __sb_end_write+0xd9/0x110 [ 3458.850288] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3458.855863] ? fput+0x130/0x1a0 [ 3458.859211] ? do_syscall_64+0x9a/0x820 [ 3458.863218] ? do_syscall_64+0x9a/0x820 [ 3458.867227] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3458.871852] ? security_file_ioctl+0x94/0xc0 [ 3458.876299] ksys_ioctl+0xa9/0xd0 [ 3458.879796] __x64_sys_ioctl+0x73/0xb0 [ 3458.883721] do_syscall_64+0x1b9/0x820 [ 3458.887642] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3458.893045] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3458.898004] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3458.902879] ? trace_hardirqs_on_caller+0x310/0x310 [ 3458.907972] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3458.913023] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3458.918079] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3458.922987] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3458.928206] RIP: 0033:0x457569 [ 3458.931428] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3458.950510] RSP: 002b:00007f1259a65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3458.958261] RAX: ffffffffffffffda RBX: 00007f1259a65c90 RCX: 0000000000457569 [ 3458.965566] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 3458.972871] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3458.980208] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1259a666d4 [ 3458.987509] R13: 00000000004c0606 R14: 00000000004d0a30 R15: 0000000000000006 [ 3459.002764] FAT-fs (loop5): bogus number of reserved sectors [ 3459.015326] FAT-fs (loop5): Can't find a valid FAT filesystem 03:47:07 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0000, 0x300, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:47:07 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:47:07 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)="02", 0x1, 0xfffffffffffffffd) 03:47:07 executing program 0 (fault-call:7 fault-nth:14): r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:47:07 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff4002, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) [ 3459.112157] __nla_parse: 14 callbacks suppressed [ 3459.112168] netlink: 188 bytes leftover after parsing attributes in process `syz-executor1'. 03:47:07 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) 03:47:07 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3459.164745] FAT-fs (loop5): bogus number of reserved sectors [ 3459.177745] FAT-fs (loop5): Can't find a valid FAT filesystem 03:47:07 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x48, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:47:07 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)="fe", 0x1, 0xfffffffffffffffd) [ 3459.289211] netlink: 188 bytes leftover after parsing attributes in process `syz-executor1'. 03:47:07 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3459.338575] FAULT_INJECTION: forcing a failure. [ 3459.338575] name failslab, interval 1, probability 0, space 0, times 0 [ 3459.378575] CPU: 0 PID: 30125 Comm: syz-executor0 Not tainted 4.19.0+ #319 [ 3459.385676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3459.395058] Call Trace: [ 3459.397691] dump_stack+0x244/0x39d [ 3459.401375] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3459.407034] ? debug_smp_processor_id+0x1c/0x20 [ 3459.411746] ? perf_trace_lock+0x14d/0x7a0 [ 3459.416025] should_fail.cold.4+0xa/0x17 [ 3459.420128] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3459.425263] ? __save_stack_trace+0x8d/0xf0 [ 3459.429640] ? zap_class+0x640/0x640 [ 3459.433395] ? save_stack+0x43/0xd0 [ 3459.437053] ? kasan_kmalloc+0xc7/0xe0 [ 3459.440982] ? find_held_lock+0x36/0x1c0 [ 3459.445078] ? __lock_is_held+0xb5/0x140 [ 3459.449192] ? perf_trace_sched_process_exec+0x860/0x860 [ 3459.454677] ? __lock_is_held+0xb5/0x140 [ 3459.458778] __should_failslab+0x124/0x180 [ 3459.463051] should_failslab+0x9/0x14 [ 3459.466887] kmem_cache_alloc+0x2be/0x730 [ 3459.471107] ? kasan_kmalloc+0xc7/0xe0 [ 3459.475039] ? mempool_free+0x370/0x370 [ 3459.479053] mempool_alloc_slab+0x44/0x60 [ 3459.483240] mempool_init_node+0x2d2/0x550 [ 3459.487521] ? mempool_free+0x370/0x370 [ 3459.491528] ? mempool_alloc_slab+0x60/0x60 [ 3459.495883] mempool_init+0x3d/0x50 [ 3459.499586] bioset_init+0x3d4/0x840 [ 3459.503336] ? bioset_exit+0x370/0x370 [ 3459.507269] blk_alloc_queue_node+0x287/0xe80 [ 3459.511807] ? blk_init_allocated_queue+0x640/0x640 [ 3459.517221] ? __mutex_init+0x1f7/0x290 [ 3459.521260] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3459.526833] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 3459.531628] ? blk_mq_alloc_tag_set+0x50e/0xad0 [ 3459.536335] ? blk_mq_update_nr_hw_queues+0xf00/0xf00 [ 3459.541559] blk_mq_init_queue+0x4b/0xb0 [ 3459.545660] loop_add+0x376/0xa40 [ 3459.549150] ? loop_queue_rq+0x690/0x690 [ 3459.553258] loop_control_ioctl+0x199/0x530 [ 3459.557610] ? loop_add+0xa40/0xa40 [ 3459.561282] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 3459.566253] ? loop_add+0xa40/0xa40 [ 3459.569950] do_vfs_ioctl+0x1de/0x1790 [ 3459.573883] ? ioctl_preallocate+0x300/0x300 [ 3459.578360] ? __fget_light+0x2e9/0x430 [ 3459.582365] ? fget_raw+0x20/0x20 [ 3459.585855] ? __sb_end_write+0xd9/0x110 [ 3459.589993] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3459.595558] ? fput+0x130/0x1a0 [ 3459.598874] ? do_syscall_64+0x9a/0x820 [ 3459.602945] ? do_syscall_64+0x9a/0x820 [ 3459.606977] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3459.611596] ? security_file_ioctl+0x94/0xc0 [ 3459.616040] ksys_ioctl+0xa9/0xd0 [ 3459.619644] __x64_sys_ioctl+0x73/0xb0 [ 3459.623566] do_syscall_64+0x1b9/0x820 [ 3459.627492] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3459.632892] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3459.637886] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3459.642801] ? trace_hardirqs_on_caller+0x310/0x310 [ 3459.647850] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3459.652933] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3459.657991] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3459.662878] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3459.668133] RIP: 0033:0x457569 [ 3459.671480] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:47:07 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xe50e0000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) [ 3459.690413] RSP: 002b:00007f1259a65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3459.698151] RAX: ffffffffffffffda RBX: 00007f1259a65c90 RCX: 0000000000457569 [ 3459.705446] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 3459.712741] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3459.720036] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1259a666d4 [ 3459.727331] R13: 00000000004c0606 R14: 00000000004d0a30 R15: 0000000000000006 03:47:07 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3459.743108] netlink: 188 bytes leftover after parsing attributes in process `syz-executor1'. [ 3459.821521] netlink: 188 bytes leftover after parsing attributes in process `syz-executor1'. 03:47:08 executing program 0 (fault-call:7 fault-nth:15): r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:47:08 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) 03:47:08 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0000, 0x1f4, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:47:08 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:47:08 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)="ff", 0x1, 0xfffffffffffffffd) 03:47:08 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xd4120000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:47:08 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000000036915fa2c1ec28656aaa79bb94b46fe0000000700050800008c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) [ 3460.088467] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3460.158679] FAULT_INJECTION: forcing a failure. [ 3460.158679] name failslab, interval 1, probability 0, space 0, times 0 [ 3460.176271] CPU: 1 PID: 30151 Comm: syz-executor0 Not tainted 4.19.0+ #319 [ 3460.183342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3460.183351] Call Trace: [ 3460.183379] dump_stack+0x244/0x39d [ 3460.183406] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3460.204241] ? debug_smp_processor_id+0x1c/0x20 [ 3460.208976] ? perf_trace_lock+0x14d/0x7a0 [ 3460.213340] should_fail.cold.4+0xa/0x17 [ 3460.216759] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3460.217441] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3460.231171] ? __save_stack_trace+0x8d/0xf0 [ 3460.235541] ? zap_class+0x640/0x640 [ 3460.239302] ? save_stack+0x43/0xd0 [ 3460.243002] ? kasan_kmalloc+0xc7/0xe0 [ 3460.247048] ? find_held_lock+0x36/0x1c0 [ 3460.247072] ? __lock_is_held+0xb5/0x140 [ 3460.247196] ? iommu_group_add_device.cold.17+0xfa/0x15d [ 3460.260740] ? perf_trace_sched_process_exec+0x860/0x860 [ 3460.266222] ? __lock_is_held+0xb5/0x140 [ 3460.270335] __should_failslab+0x124/0x180 [ 3460.274633] should_failslab+0x9/0x14 [ 3460.278466] kmem_cache_alloc+0x2be/0x730 [ 3460.282648] ? kasan_kmalloc+0xc7/0xe0 [ 3460.286571] ? mempool_free+0x370/0x370 [ 3460.290601] mempool_alloc_slab+0x44/0x60 [ 3460.294788] mempool_init_node+0x2d2/0x550 [ 3460.299066] ? mempool_free+0x370/0x370 [ 3460.303072] ? mempool_alloc_slab+0x60/0x60 [ 3460.307447] mempool_init+0x3d/0x50 [ 3460.311113] bioset_init+0x646/0x840 [ 3460.314865] ? bioset_exit+0x370/0x370 [ 3460.318856] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 3460.323982] blk_alloc_queue_node+0x287/0xe80 [ 3460.328525] ? blk_init_allocated_queue+0x640/0x640 [ 3460.333575] ? __mutex_init+0x1f7/0x290 [ 3460.337615] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3460.343184] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 3460.348245] ? blk_mq_alloc_tag_set+0x50e/0xad0 [ 3460.352986] ? blk_mq_update_nr_hw_queues+0xf00/0xf00 [ 3460.358217] ? __rcu_read_unlock+0x2d6/0x2e0 [ 3460.362672] blk_mq_init_queue+0x4b/0xb0 [ 3460.366767] loop_add+0x376/0xa40 [ 3460.370254] ? loop_queue_rq+0x690/0x690 [ 3460.374359] loop_control_ioctl+0x199/0x530 [ 3460.378714] ? loop_add+0xa40/0xa40 [ 3460.382382] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 3460.387357] ? loop_add+0xa40/0xa40 [ 3460.391021] do_vfs_ioctl+0x1de/0x1790 [ 3460.394969] ? ioctl_preallocate+0x300/0x300 [ 3460.399422] ? __fget_light+0x2e9/0x430 [ 3460.403438] ? fget_raw+0x20/0x20 [ 3460.406971] ? __sb_end_write+0xd9/0x110 [ 3460.411078] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3460.416646] ? fput+0x130/0x1a0 [ 3460.419970] ? do_syscall_64+0x9a/0x820 [ 3460.423975] ? do_syscall_64+0x9a/0x820 [ 3460.427984] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3460.432604] ? security_file_ioctl+0x94/0xc0 [ 3460.437048] ksys_ioctl+0xa9/0xd0 [ 3460.440541] __x64_sys_ioctl+0x73/0xb0 [ 3460.444467] do_syscall_64+0x1b9/0x820 [ 3460.448389] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3460.453947] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3460.458939] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3460.463824] ? trace_hardirqs_on_caller+0x310/0x310 [ 3460.469007] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3460.474057] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3460.479117] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3460.484006] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3460.489222] RIP: 0033:0x457569 [ 3460.492454] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3460.511389] RSP: 002b:00007f1259a65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3460.519137] RAX: ffffffffffffffda RBX: 00007f1259a65c90 RCX: 0000000000457569 [ 3460.526436] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 3460.533737] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3460.541039] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1259a666d4 [ 3460.548335] R13: 00000000004c0606 R14: 00000000004d0a30 R15: 0000000000000006 [ 3460.570128] FAT-fs (loop5): bogus number of reserved sectors [ 3460.592811] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3460.663360] FAT-fs (loop5): bogus number of reserved sectors [ 3460.669743] FAT-fs (loop5): Can't find a valid FAT filesystem 03:47:08 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:47:08 executing program 0 (fault-call:7 fault-nth:16): r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:47:08 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x4, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:47:08 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x3, 0xfffffffffffffffd) 03:47:08 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x20000101, 0xfffffffffffffffd) [ 3460.790117] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:47:08 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3460.869985] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3460.881589] FAULT_INJECTION: forcing a failure. [ 3460.881589] name failslab, interval 1, probability 0, space 0, times 0 03:47:08 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000000036915fa2c1ec28656aaa79bb94b46fe0000000700020000008c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) [ 3460.913773] CPU: 1 PID: 30174 Comm: syz-executor0 Not tainted 4.19.0+ #319 [ 3460.920972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3460.930352] Call Trace: [ 3460.932983] dump_stack+0x244/0x39d [ 3460.936758] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3460.941982] ? debug_smp_processor_id+0x1c/0x20 [ 3460.946676] ? perf_trace_lock+0x14d/0x7a0 [ 3460.950963] should_fail.cold.4+0xa/0x17 [ 3460.955060] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3460.960194] ? save_stack+0xa9/0xd0 [ 3460.963947] ? kasan_kmalloc+0xc7/0xe0 [ 3460.967859] ? kasan_slab_alloc+0x12/0x20 [ 3460.972030] ? kmem_cache_alloc+0x12e/0x730 [ 3460.976376] ? mempool_alloc_slab+0x44/0x60 [ 3460.980727] ? mempool_init_node+0x2d2/0x550 [ 3460.985159] ? mempool_init+0x3d/0x50 [ 3460.988983] ? zap_class+0x640/0x640 [ 3460.992715] ? loop_add+0x376/0xa40 [ 3460.996365] ? do_vfs_ioctl+0x1de/0x1790 [ 3461.000529] ? ksys_ioctl+0xa9/0xd0 [ 3461.004171] ? __x64_sys_ioctl+0x73/0xb0 [ 3461.008258] ? do_syscall_64+0x1b9/0x820 [ 3461.012348] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3461.017740] ? find_held_lock+0x36/0x1c0 [ 3461.021830] ? __lock_is_held+0xb5/0x140 [ 3461.025959] ? perf_trace_sched_process_exec+0x860/0x860 [ 3461.031814] __should_failslab+0x124/0x180 [ 3461.036081] should_failslab+0x9/0x14 [ 3461.039933] kmem_cache_alloc+0x2be/0x730 [ 3461.044109] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3461.049666] ? __phys_addr+0xa6/0x120 [ 3461.053491] ? mempool_init+0x3d/0x50 [ 3461.057316] ? mempool_free+0x370/0x370 [ 3461.061318] mempool_alloc_slab+0x44/0x60 [ 3461.065678] mempool_init_node+0x2d2/0x550 [ 3461.069965] ? mempool_free+0x370/0x370 [ 3461.073967] ? mempool_alloc_slab+0x60/0x60 [ 3461.078485] mempool_init+0x3d/0x50 [ 3461.082141] bioset_init+0x646/0x840 [ 3461.085892] ? bioset_exit+0x370/0x370 [ 3461.089840] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 3461.094883] blk_alloc_queue_node+0x287/0xe80 [ 3461.099446] ? blk_init_allocated_queue+0x640/0x640 [ 3461.104487] ? __mutex_init+0x1f7/0x290 [ 3461.108648] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3461.114209] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 3461.118996] ? blk_mq_alloc_tag_set+0x50e/0xad0 [ 3461.123695] ? blk_mq_update_nr_hw_queues+0xf00/0xf00 [ 3461.128943] blk_mq_init_queue+0x4b/0xb0 [ 3461.133031] loop_add+0x376/0xa40 [ 3461.136520] ? loop_queue_rq+0x690/0x690 [ 3461.140636] loop_control_ioctl+0x199/0x530 [ 3461.145127] ? loop_add+0xa40/0xa40 [ 3461.148787] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 3461.153745] ? loop_add+0xa40/0xa40 [ 3461.157398] do_vfs_ioctl+0x1de/0x1790 [ 3461.161321] ? ioctl_preallocate+0x300/0x300 [ 3461.165752] ? __fget_light+0x2e9/0x430 [ 3461.169761] ? fget_raw+0x20/0x20 [ 3461.173239] ? __sb_end_write+0xd9/0x110 [ 3461.177329] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3461.182888] ? fput+0x130/0x1a0 [ 3461.186223] ? do_syscall_64+0x9a/0x820 [ 3461.190284] ? do_syscall_64+0x9a/0x820 [ 3461.194349] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3461.198982] ? security_file_ioctl+0x94/0xc0 [ 3461.203422] ksys_ioctl+0xa9/0xd0 [ 3461.206945] __x64_sys_ioctl+0x73/0xb0 [ 3461.210862] do_syscall_64+0x1b9/0x820 [ 3461.214802] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3461.220194] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3461.225212] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3461.230082] ? trace_hardirqs_on_caller+0x310/0x310 [ 3461.235209] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3461.240250] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3461.245295] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3461.250349] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3461.255563] RIP: 0033:0x457569 [ 3461.258783] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3461.277704] RSP: 002b:00007f1259a65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3461.285505] RAX: ffffffffffffffda RBX: 00007f1259a65c90 RCX: 0000000000457569 [ 3461.292962] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 3461.300249] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3461.307536] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1259a666d4 [ 3461.314823] R13: 00000000004c0606 R14: 00000000004d0a30 R15: 0000000000000006 03:47:09 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0000, 0xfffffffe, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:47:09 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:47:09 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3461.405497] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:47:09 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x1272ce7f, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:47:09 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3461.500695] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3461.568831] FAT-fs (loop5): bogus number of reserved sectors [ 3461.585228] FAT-fs (loop5): Can't find a valid FAT filesystem 03:47:09 executing program 0 (fault-call:7 fault-nth:17): r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:47:09 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0xfffff, 0xfffffffffffffffd) [ 3461.685038] FAT-fs (loop5): bogus number of reserved sectors [ 3461.695320] FAT-fs (loop5): Can't find a valid FAT filesystem 03:47:09 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x5004000000000000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:47:09 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:47:09 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x2, 0xfffffffffffffffd) 03:47:09 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff000b, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) [ 3461.889222] FAULT_INJECTION: forcing a failure. [ 3461.889222] name failslab, interval 1, probability 0, space 0, times 0 [ 3461.911297] CPU: 1 PID: 30205 Comm: syz-executor0 Not tainted 4.19.0+ #319 [ 3461.918359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3461.927737] Call Trace: [ 3461.930392] dump_stack+0x244/0x39d [ 3461.934070] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3461.939304] ? debug_smp_processor_id+0x1c/0x20 [ 3461.944010] ? perf_trace_lock+0x14d/0x7a0 [ 3461.948285] should_fail.cold.4+0xa/0x17 [ 3461.952391] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3461.957531] ? zap_class+0x640/0x640 [ 3461.961286] ? check_preemption_disabled+0x48/0x280 [ 3461.966342] ? zap_class+0x640/0x640 [ 3461.970090] ? __lock_is_held+0xb5/0x140 [ 3461.974190] ? find_held_lock+0x36/0x1c0 [ 3461.978285] ? __lock_is_held+0xb5/0x140 [ 3461.982402] ? perf_trace_sched_process_exec+0x860/0x860 [ 3461.987937] __should_failslab+0x124/0x180 [ 3461.992211] should_failslab+0x9/0x14 [ 3461.996047] kmem_cache_alloc_node_trace+0x270/0x740 [ 3462.001185] ? bioset_exit+0x370/0x370 [ 3462.005113] bdi_alloc_node+0x89/0xe0 [ 3462.008984] blk_alloc_queue_node+0x2b7/0xe80 [ 3462.013519] ? blk_init_allocated_queue+0x640/0x640 [ 3462.018571] ? __mutex_init+0x1f7/0x290 [ 3462.022605] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3462.028172] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 3462.032975] ? blk_mq_alloc_tag_set+0x50e/0xad0 [ 3462.037703] ? blk_mq_update_nr_hw_queues+0xf00/0xf00 [ 3462.042962] blk_mq_init_queue+0x4b/0xb0 [ 3462.047056] loop_add+0x376/0xa40 [ 3462.050571] ? loop_queue_rq+0x690/0x690 [ 3462.054679] loop_control_ioctl+0x199/0x530 [ 3462.059031] ? loop_add+0xa40/0xa40 [ 3462.062704] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 3462.067673] ? loop_add+0xa40/0xa40 [ 3462.071336] do_vfs_ioctl+0x1de/0x1790 [ 3462.075265] ? ioctl_preallocate+0x300/0x300 [ 3462.079706] ? __fget_light+0x2e9/0x430 [ 3462.083716] ? fget_raw+0x20/0x20 [ 3462.087208] ? __sb_end_write+0xd9/0x110 [ 3462.091306] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3462.096877] ? fput+0x130/0x1a0 [ 3462.100218] ? do_syscall_64+0x9a/0x820 [ 3462.104221] ? do_syscall_64+0x9a/0x820 [ 3462.108228] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3462.112846] ? security_file_ioctl+0x94/0xc0 [ 3462.117288] ksys_ioctl+0xa9/0xd0 [ 3462.120778] __x64_sys_ioctl+0x73/0xb0 [ 3462.124699] do_syscall_64+0x1b9/0x820 [ 3462.128624] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3462.134021] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3462.139111] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3462.143991] ? trace_hardirqs_on_caller+0x310/0x310 [ 3462.149042] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3462.154095] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3462.159147] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3462.164038] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3462.169254] RIP: 0033:0x457569 03:47:10 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3462.172482] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3462.191585] RSP: 002b:00007f1259a65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3462.199320] RAX: ffffffffffffffda RBX: 00007f1259a65c90 RCX: 0000000000457569 [ 3462.206617] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 3462.213944] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3462.221246] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1259a666d4 [ 3462.228543] R13: 00000000004c0606 R14: 00000000004d0a30 R15: 0000000000000006 [ 3462.407402] FAT-fs (loop5): bogus number of reserved sectors [ 3462.426368] FAT-fs (loop5): Can't find a valid FAT filesystem 03:47:10 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0000, 0x11, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:47:10 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0xffffff1f, 0xfffffffffffffffd) 03:47:10 executing program 0 (fault-call:7 fault-nth:18): r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:47:10 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:47:10 executing program 4: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x3, 0x1) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) 03:47:10 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000000036915fa2c1ec28656aaa79bb94b46fe000000070002080f008c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) [ 3462.506456] FAT-fs (loop5): bogus number of reserved sectors [ 3462.512477] FAT-fs (loop5): Can't find a valid FAT filesystem 03:47:10 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3462.652941] FAULT_INJECTION: forcing a failure. [ 3462.652941] name failslab, interval 1, probability 0, space 0, times 0 [ 3462.688864] CPU: 0 PID: 30232 Comm: syz-executor0 Not tainted 4.19.0+ #319 [ 3462.695968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3462.705352] Call Trace: [ 3462.707986] dump_stack+0x244/0x39d [ 3462.711654] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3462.716883] ? debug_smp_processor_id+0x1c/0x20 [ 3462.721616] ? perf_trace_lock+0x14d/0x7a0 [ 3462.725885] should_fail.cold.4+0xa/0x17 [ 3462.730010] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3462.735133] ? do_raw_spin_trylock+0x270/0x270 [ 3462.739795] ? lock_is_held_type+0x210/0x210 [ 3462.744236] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 3462.749359] ? zap_class+0x640/0x640 [ 3462.753095] ? __debug_object_init+0x57d/0x1290 [ 3462.757787] ? kasan_check_read+0x11/0x20 [ 3462.761957] ? zap_class+0x640/0x640 [ 3462.765694] ? find_held_lock+0x36/0x1c0 [ 3462.769776] ? __lock_is_held+0xb5/0x140 [ 3462.773937] ? tcf_nat_act+0x728/0x2b00 [ 3462.777973] ? perf_trace_sched_process_exec+0x860/0x860 [ 3462.783448] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3462.788577] __should_failslab+0x124/0x180 [ 3462.792834] should_failslab+0x9/0x14 [ 3462.796965] kmem_cache_alloc_trace+0x2d7/0x750 [ 3462.801655] ? __lockdep_init_map+0x105/0x590 [ 3462.806178] wb_congested_get_create+0x20a/0x4a0 [ 3462.810967] ? wb_wakeup_delayed+0xf0/0xf0 [ 3462.815225] ? __lockdep_init_map+0x105/0x590 [ 3462.819745] wb_init+0x636/0x9e0 [ 3462.823143] ? bdi_put+0x180/0x180 [ 3462.826704] ? kmem_cache_alloc_node_trace+0x14c/0x740 [ 3462.832001] ? __lockdep_init_map+0x105/0x590 [ 3462.836508] ? loop_add+0x376/0xa40 [ 3462.840153] ? lockdep_init_map+0x9/0x10 [ 3462.844230] ? debug_mutex_init+0x2d/0x60 [ 3462.848403] ? psi_task_change.cold.11+0x1ac/0x1ac [ 3462.853348] ? __lockdep_init_map+0x105/0x590 [ 3462.857869] ? __init_waitqueue_head+0x9e/0x150 [ 3462.862956] ? __lockdep_init_map+0x105/0x590 [ 3462.867476] ? lockdep_init_map+0x9/0x10 [ 3462.871549] ? __raw_spin_lock_init+0x2d/0x100 [ 3462.876153] bdi_init+0x30d/0x4d0 [ 3462.879622] ? wb_init+0x9e0/0x9e0 [ 3462.883190] ? bdi_alloc_node+0x89/0xe0 [ 3462.887193] ? bdi_alloc_node+0x89/0xe0 [ 3462.891190] ? rcu_read_lock_sched_held+0x14f/0x180 [ 3462.896230] ? kmem_cache_alloc_node_trace+0x34b/0x740 [ 3462.901531] ? bioset_exit+0x370/0x370 [ 3462.905440] bdi_alloc_node+0x9e/0xe0 [ 3462.909286] blk_alloc_queue_node+0x2b7/0xe80 [ 3462.913812] ? blk_init_allocated_queue+0x640/0x640 [ 3462.918852] ? __mutex_init+0x1f7/0x290 [ 3462.922892] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3462.928472] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 3462.933257] ? blk_mq_alloc_tag_set+0x50e/0xad0 [ 3462.937965] ? blk_mq_update_nr_hw_queues+0xf00/0xf00 [ 3462.943185] blk_mq_init_queue+0x4b/0xb0 [ 3462.947271] loop_add+0x376/0xa40 [ 3462.950752] ? loop_queue_rq+0x690/0x690 [ 3462.954854] loop_control_ioctl+0x199/0x530 [ 3462.959200] ? loop_add+0xa40/0xa40 [ 3462.962861] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 3462.967863] ? loop_add+0xa40/0xa40 [ 3462.971550] do_vfs_ioctl+0x1de/0x1790 [ 3462.975499] ? ioctl_preallocate+0x300/0x300 [ 3462.979964] ? __fget_light+0x2e9/0x430 [ 3462.983977] ? fget_raw+0x20/0x20 [ 3462.987466] ? __sb_end_write+0xd9/0x110 [ 3462.991564] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3462.997150] ? fput+0x130/0x1a0 [ 3463.000459] ? do_syscall_64+0x9a/0x820 [ 3463.004461] ? do_syscall_64+0x9a/0x820 [ 3463.008466] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3463.013107] ? security_file_ioctl+0x94/0xc0 [ 3463.017551] ksys_ioctl+0xa9/0xd0 [ 3463.021043] __x64_sys_ioctl+0x73/0xb0 [ 3463.024970] do_syscall_64+0x1b9/0x820 [ 3463.028949] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3463.034379] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3463.039338] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3463.044216] ? trace_hardirqs_on_caller+0x310/0x310 [ 3463.049267] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3463.054317] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3463.059379] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3463.064265] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3463.069485] RIP: 0033:0x457569 [ 3463.072706] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3463.091639] RSP: 002b:00007f1259a65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 03:47:11 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x4000000000000000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:47:11 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x80000001, 0x401}, {0xd9, 0x5}, {0x5, 0x3}, {0x401, 0x8}, {0x29a, 0x7}, {0x1, 0x8000}]}) r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x0, 0x40) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)={0x0, 0xda, "14922163de9c492307a9beeb8d53b0ab2780e4fa945132026efb763bd17f9c44dd1b04fa38689db8238191e8a51437c44d9edae8bae0149d572a98ffe2315388d9253ab3d71bc9b41a9b7e0e48cd70f38f9e12e3f57679e72d84403a5098e7e91dfd0a14eed77681190c81cb4b592966d0e4fc29435ddbbf9f0a65ac473b1960bac62014dc304d9ff28729e468b7f480f2080b09296dbb29facd6ddba300692084e2942346ac055a9fe12cebc2d2e606c2c102b83176f2ed0afec2ea0375ccc34226d3046b1481b5326aad47805e8acfdf164ce283a6e6228b2a"}, &(0x7f0000000140)=0xe2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000600)={r2, 0x1000, "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"}, &(0x7f0000000180)=0x1008) ioctl$RTC_VL_CLR(r1, 0x7014) [ 3463.099377] RAX: ffffffffffffffda RBX: 00007f1259a65c90 RCX: 0000000000457569 [ 3463.106674] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 3463.113971] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3463.121267] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1259a666d4 [ 3463.128563] R13: 00000000004c0606 R14: 00000000004d0a30 R15: 0000000000000006 03:47:11 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:47:11 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0500, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:47:11 executing program 0 (fault-call:7 fault-nth:19): r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:47:11 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0000, 0xa, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:47:11 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x240, 0x0) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x2, @remote}}, 0x1e) 03:47:11 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3463.311110] FAT-fs (loop5): bogus number of reserved sectors [ 3463.342018] FAT-fs (loop5): Can't find a valid FAT filesystem 03:47:11 executing program 4: r0 = add_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000600)="8d69c809c1762005b827c462cdbfc4192921ba2215d8d07e4300794267ec90201dc8e79c22eed2eee147dffcb3adefb3898efa1ee9a7fdea984d1b5937ff818109c6b9263e533c552d28076613a0c385285710990a41f86c150c00004439d049200ccc4f005d59712f7d5db73151464882392fc6bb7d383fd8fcd2fb39ec6c0d9911bf15bb04a98e52c92587445c84b3c4c78cc0bc20b2ec337d811a2fc3f1ff7f4176df4e954445b90264e74482f82c7b6654f3762362eb0460a24ea1c6e66b9e4d46859eac62e30711fb26a1412b72f238905ce21d8b819269d320f02acbd30848296c82c351b31b76eeec76d6e075c59d6d797ddcdbc6a047a1a8afab2b481643f4ab203c1ffc92ac1a211630312978763a9c3e771f75c3fd4b8153305ca254a7c0ec7f52cbb844eb482462a483720f224e01e767ac984d232e91c7e1ebcaba5066dbce4764262921b1a3f80a92e3c5e2a1494251184b89b392b46fef4fd138f1f6df06638ed591ed5b28deed07f70656c6887c6dbf4911f532986a0ae13b1789b6405d63dc4591d39a57e763ecc1dab479117aee08892c15a7960552", 0xfffffffffffffe39, 0xfffffffffffffffc) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000340)="001c35700f16e03e81d46f4c7b8ffb8dde65b4e1e2b938643ea3271881e846ab92e798b4fd2b7f000000000000c0199f30830ebb270853210df4b0fc146d54131a54c17ea626fafc2ef532efa268a0bdf416a0f1bc1f709b4dc1981f5eea212c1e756a037f0d0af6373cb914244f4d59a26ea27ec82af734c283815ab4f65db6c4b06d90f29c24483e6d500c44a52d9303c2dac294cff884d5bdc2c24781f5d49f046f62a4ce9a53048ee94dc9d20499668b86fedea7880a6a5904ae9f072bd3a378193a0f000000000000000000000000000000", 0xd4, r0) [ 3463.472175] FAULT_INJECTION: forcing a failure. [ 3463.472175] name failslab, interval 1, probability 0, space 0, times 0 [ 3463.499472] CPU: 0 PID: 30263 Comm: syz-executor0 Not tainted 4.19.0+ #319 [ 3463.506563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3463.516311] Call Trace: [ 3463.518981] dump_stack+0x244/0x39d [ 3463.522664] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3463.527947] ? debug_smp_processor_id+0x1c/0x20 [ 3463.532951] ? perf_trace_lock+0x14d/0x7a0 [ 3463.537232] should_fail.cold.4+0xa/0x17 [ 3463.541335] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3463.546477] ? do_raw_spin_trylock+0x270/0x270 [ 3463.551112] ? lock_is_held_type+0x210/0x210 [ 3463.555597] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 3463.560740] ? zap_class+0x640/0x640 [ 3463.564492] ? __debug_object_init+0x57d/0x1290 [ 3463.569197] ? kasan_check_read+0x11/0x20 [ 3463.573382] ? zap_class+0x640/0x640 [ 3463.577135] ? find_held_lock+0x36/0x1c0 [ 3463.581242] ? __lock_is_held+0xb5/0x140 [ 3463.585356] ? perf_trace_sched_process_exec+0x860/0x860 [ 3463.590853] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3463.596000] __should_failslab+0x124/0x180 [ 3463.600273] should_failslab+0x9/0x14 [ 3463.604120] kmem_cache_alloc_trace+0x2d7/0x750 [ 3463.608830] ? __lockdep_init_map+0x105/0x590 [ 3463.613369] wb_congested_get_create+0x20a/0x4a0 [ 3463.618181] ? wb_wakeup_delayed+0xf0/0xf0 [ 3463.622454] ? __lockdep_init_map+0x105/0x590 [ 3463.626994] wb_init+0x636/0x9e0 [ 3463.630403] ? bdi_put+0x180/0x180 [ 3463.634104] ? kmem_cache_alloc_node_trace+0x14c/0x740 [ 3463.639424] ? __lockdep_init_map+0x105/0x590 [ 3463.643979] ? loop_add+0x376/0xa40 [ 3463.647648] ? lockdep_init_map+0x9/0x10 [ 3463.651786] ? debug_mutex_init+0x2d/0x60 [ 3463.655996] ? psi_task_change.cold.11+0x1ac/0x1ac [ 3463.660982] ? __lockdep_init_map+0x105/0x590 [ 3463.665522] ? __init_waitqueue_head+0x9e/0x150 [ 3463.670227] ? __lockdep_init_map+0x105/0x590 [ 3463.674763] ? lockdep_init_map+0x9/0x10 [ 3463.678857] ? __raw_spin_lock_init+0x2d/0x100 [ 3463.683509] bdi_init+0x30d/0x4d0 [ 3463.687003] ? wb_init+0x9e0/0x9e0 [ 3463.690578] ? bdi_alloc_node+0x89/0xe0 [ 3463.694580] ? bdi_alloc_node+0x89/0xe0 [ 3463.698593] ? rcu_read_lock_sched_held+0x14f/0x180 [ 3463.703642] ? kmem_cache_alloc_node_trace+0x34b/0x740 [ 3463.708984] ? bioset_exit+0x370/0x370 [ 3463.712943] bdi_alloc_node+0x9e/0xe0 [ 3463.716789] blk_alloc_queue_node+0x2b7/0xe80 [ 3463.721323] ? blk_init_allocated_queue+0x640/0x640 [ 3463.726377] ? __mutex_init+0x1f7/0x290 [ 3463.730411] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3463.735983] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 3463.740807] ? blk_mq_alloc_tag_set+0x50e/0xad0 [ 3463.745519] ? blk_mq_update_nr_hw_queues+0xf00/0xf00 [ 3463.750749] blk_mq_init_queue+0x4b/0xb0 [ 3463.754854] loop_add+0x376/0xa40 [ 3463.758342] ? loop_queue_rq+0x690/0x690 [ 3463.762467] loop_control_ioctl+0x199/0x530 [ 3463.766823] ? loop_add+0xa40/0xa40 [ 3463.770492] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 3463.775458] ? loop_add+0xa40/0xa40 [ 3463.779124] do_vfs_ioctl+0x1de/0x1790 [ 3463.783053] ? ioctl_preallocate+0x300/0x300 [ 3463.787491] ? __fget_light+0x2e9/0x430 [ 3463.791498] ? fget_raw+0x20/0x20 [ 3463.794986] ? __sb_end_write+0xd9/0x110 [ 3463.799092] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3463.804794] ? fput+0x130/0x1a0 [ 3463.808108] ? do_syscall_64+0x9a/0x820 [ 3463.812116] ? do_syscall_64+0x9a/0x820 [ 3463.816126] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3463.820744] ? security_file_ioctl+0x94/0xc0 [ 3463.825188] ksys_ioctl+0xa9/0xd0 [ 3463.828679] __x64_sys_ioctl+0x73/0xb0 [ 3463.832603] do_syscall_64+0x1b9/0x820 [ 3463.836613] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3463.842014] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3463.846981] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3463.851975] ? trace_hardirqs_on_caller+0x310/0x310 [ 3463.857027] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3463.862077] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3463.867139] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3463.872026] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3463.877488] RIP: 0033:0x457569 [ 3463.880714] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3463.899765] RSP: 002b:00007f1259a65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3463.907603] RAX: ffffffffffffffda RBX: 00007f1259a65c90 RCX: 0000000000457569 [ 3463.914932] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 03:47:11 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3463.922231] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3463.929525] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1259a666d4 [ 3463.936946] R13: 00000000004c0606 R14: 00000000004d0a30 R15: 0000000000000006 03:47:12 executing program 0 (fault-call:7 fault-nth:20): r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:47:12 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x453, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:47:12 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:47:12 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0000, 0x23080, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:47:12 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x1008}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000240)=[{0x20, 0x0, [0x0, 0x3f4f3cb7, 0x10001, 0x7, 0x7, 0x101, 0x1, 0x4, 0x200, 0xbb, 0x0, 0x800000000, 0x6, 0x4e, 0x8d0, 0xff]}, {0x0, 0x0, [0x80000000, 0x101, 0x9, 0x2, 0x440790fc, 0x50, 0x80000001, 0x4fdd20a9, 0x5, 0x7f, 0xfffffffffffff56e, 0x2, 0xd7d, 0x4, 0x9, 0xe92]}, {0x0, 0x0, [0x1, 0x2, 0x12dc, 0xfff, 0x6, 0x6, 0xffffffffffffffe0, 0x69c, 0x3, 0xffffffff, 0x8, 0x8, 0x9, 0x3, 0xae, 0x80]}, {0x1e, 0x0, [0x7fffffff, 0x9, 0x20, 0x1f, 0x8, 0x100, 0x22, 0x10000, 0x2, 0x1, 0x3f, 0x7, 0x1, 0x6, 0x6, 0x1]}, {0x2, 0x0, [0x9, 0x4, 0x0, 0x100000000, 0x1, 0xd8, 0x7, 0x400, 0x2, 0x2, 0xffffffff, 0xd4, 0x4, 0x3, 0x1000, 0x10001]}, {0x20, 0x0, [0x2, 0x751a7386, 0xdd, 0x1, 0x0, 0xffffffff, 0x2, 0xba, 0x5, 0xfffffffffffffffb, 0x1ff, 0x10001, 0x8001, 0x7, 0x7fff, 0xb903]}, {0x2c, 0x0, [0xa, 0x1, 0xfffffffffffffffa, 0xfffffffffffffffb, 0xfffffffffffffffc, 0x7ff, 0x80000000, 0x2, 0x5, 0x1, 0x0, 0xc2, 0x1000, 0x5e, 0xad14, 0x6]}], r1, 0x1, 0x1, 0x1f8}}, 0x20) [ 3464.127609] FAT-fs (loop5): bogus number of reserved sectors [ 3464.134350] __nla_parse: 13 callbacks suppressed [ 3464.134361] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3464.148751] FAT-fs (loop5): Can't find a valid FAT filesystem 03:47:12 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0300, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:47:12 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = getpgid(0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) tgkill(r1, r2, 0x12) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@broute={'broute\x00', 0x20, 0x3, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000000), &(0x7f0000000380)=ANY=[@ANYRES16]}, 0x7a) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r3 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xb85d, 0x8000) ioctl$KVM_SET_XSAVE(r3, 0x5000aea5, &(0x7f0000000600)={"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"}) 03:47:12 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000000036915fa2c1ec28656aaa79bb94b46fe00000007000208000b8c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) [ 3464.251648] FAULT_INJECTION: forcing a failure. [ 3464.251648] name failslab, interval 1, probability 0, space 0, times 0 [ 3464.288736] CPU: 1 PID: 30285 Comm: syz-executor0 Not tainted 4.19.0+ #319 [ 3464.295819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3464.305204] Call Trace: [ 3464.307838] dump_stack+0x244/0x39d [ 3464.311289] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3464.311506] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3464.325332] ? debug_smp_processor_id+0x1c/0x20 [ 3464.330036] ? perf_trace_lock+0x14d/0x7a0 [ 3464.334333] should_fail.cold.4+0xa/0x17 [ 3464.338444] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3464.343590] ? lockdep_init_map+0x9/0x10 [ 3464.347684] ? __raw_spin_lock_init+0x2d/0x100 [ 3464.352307] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3464.358046] ? wb_init+0x6f2/0x9e0 [ 3464.361624] ? zap_class+0x640/0x640 [ 3464.365375] ? bdi_put+0x180/0x180 [ 3464.368977] ? kmem_cache_alloc_node_trace+0x14c/0x740 [ 3464.374294] ? find_held_lock+0x36/0x1c0 [ 3464.378401] ? __lock_is_held+0xb5/0x140 [ 3464.382525] ? __init_waitqueue_head+0x9e/0x150 [ 3464.387228] ? perf_trace_sched_process_exec+0x860/0x860 [ 3464.392722] ? __raw_spin_lock_init+0x2d/0x100 [ 3464.397346] __should_failslab+0x124/0x180 [ 3464.401622] should_failslab+0x9/0x14 [ 3464.405460] kmem_cache_alloc_trace+0x2d7/0x750 [ 3464.410161] ? bdi_alloc_node+0x89/0xe0 [ 3464.414164] ? bdi_alloc_node+0x89/0xe0 [ 3464.418175] ? rcu_read_lock_sched_held+0x14f/0x180 [ 3464.423233] blk_alloc_queue_stats+0x90/0x1c0 [ 3464.427761] ? blk_stat_add+0x650/0x650 [ 3464.431784] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3464.437374] blk_alloc_queue_node+0x2fa/0xe80 [ 3464.441950] ? blk_init_allocated_queue+0x640/0x640 [ 3464.447012] ? __mutex_init+0x1f7/0x290 [ 3464.451058] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3464.456634] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 3464.461437] ? blk_mq_alloc_tag_set+0x50e/0xad0 [ 3464.466151] ? blk_mq_update_nr_hw_queues+0xf00/0xf00 [ 3464.471380] blk_mq_init_queue+0x4b/0xb0 [ 3464.475484] loop_add+0x376/0xa40 [ 3464.478980] ? loop_queue_rq+0x690/0x690 [ 3464.483089] loop_control_ioctl+0x199/0x530 [ 3464.487450] ? loop_add+0xa40/0xa40 [ 3464.491121] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 3464.496089] ? loop_add+0xa40/0xa40 [ 3464.499754] do_vfs_ioctl+0x1de/0x1790 [ 3464.503944] ? ioctl_preallocate+0x300/0x300 [ 3464.508531] ? __fget_light+0x2e9/0x430 [ 3464.512576] ? fget_raw+0x20/0x20 [ 3464.516072] ? __sb_end_write+0xd9/0x110 [ 3464.520178] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3464.525752] ? fput+0x130/0x1a0 [ 3464.529066] ? do_syscall_64+0x9a/0x820 [ 3464.533072] ? do_syscall_64+0x9a/0x820 [ 3464.537084] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3464.541708] ? security_file_ioctl+0x94/0xc0 [ 3464.546154] ksys_ioctl+0xa9/0xd0 [ 3464.549646] __x64_sys_ioctl+0x73/0xb0 [ 3464.553574] do_syscall_64+0x1b9/0x820 [ 3464.557496] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3464.562895] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3464.567982] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3464.572865] ? trace_hardirqs_on_caller+0x310/0x310 [ 3464.577975] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3464.583027] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3464.588089] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3464.592985] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3464.598212] RIP: 0033:0x457569 [ 3464.601458] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3464.620399] RSP: 002b:00007f1259a65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3464.628157] RAX: ffffffffffffffda RBX: 00007f1259a65c90 RCX: 0000000000457569 [ 3464.635470] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 3464.642945] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 03:47:12 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3464.650474] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1259a666d4 [ 3464.657773] R13: 00000000004c0606 R14: 00000000004d0a30 R15: 0000000000000006 [ 3464.692724] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3464.718725] FAT-fs (loop5): bogus number of reserved sectors [ 3464.729656] FAT-fs (loop5): Can't find a valid FAT filesystem 03:47:12 executing program 0 (fault-call:7 fault-nth:21): r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:47:12 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3464.760285] kernel msg: ebtables bug: please report to author: entries_size too small [ 3464.782429] kernel msg: ebtables bug: please report to author: entries_size too small 03:47:12 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x400000000000000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:47:12 executing program 4: get_thread_area(&(0x7f0000000040)={0x9, 0xffffffffffffffff, 0x0, 0x2, 0x6, 0x9, 0x4, 0x7f, 0x8, 0x401}) [ 3464.864744] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:47:12 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:47:13 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0000, 0x18020000, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) [ 3464.987358] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3465.024335] FAULT_INJECTION: forcing a failure. [ 3465.024335] name failslab, interval 1, probability 0, space 0, times 0 [ 3465.065047] CPU: 1 PID: 30309 Comm: syz-executor0 Not tainted 4.19.0+ #319 [ 3465.072268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3465.081649] Call Trace: [ 3465.084282] dump_stack+0x244/0x39d [ 3465.088048] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3465.093283] ? debug_smp_processor_id+0x1c/0x20 [ 3465.097985] ? perf_trace_lock+0x14d/0x7a0 [ 3465.102264] should_fail.cold.4+0xa/0x17 [ 3465.106365] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3465.111507] ? kasan_check_write+0x14/0x20 [ 3465.115777] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 3465.120749] ? wait_for_completion+0x8a0/0x8a0 [ 3465.125385] ? zap_class+0x640/0x640 [ 3465.129145] ? check_preemption_disabled+0x48/0x280 [ 3465.134212] ? find_held_lock+0x36/0x1c0 [ 3465.138325] ? __lock_is_held+0xb5/0x140 [ 3465.142447] ? perf_trace_sched_process_exec+0x860/0x860 [ 3465.147968] ? pcpu_balance_workfn+0x1700/0x1700 [ 3465.152766] __should_failslab+0x124/0x180 [ 3465.157041] should_failslab+0x9/0x14 [ 3465.160878] kmem_cache_alloc_node_trace+0x270/0x740 [ 3465.166056] ? debug_object_free+0x690/0x690 [ 3465.170503] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3465.176080] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3465.181661] blkg_alloc+0x124/0x800 [ 3465.185335] ? blkcg_reset_stats+0x3e0/0x3e0 [ 3465.189774] ? lockdep_init_map+0x9/0x10 [ 3465.193872] ? debug_mutex_init+0x2d/0x60 [ 3465.198093] ? __mutex_init+0x1f7/0x290 [ 3465.202102] ? __lockdep_init_map+0x105/0x590 [ 3465.206641] ? kasan_check_write+0x14/0x20 [ 3465.210941] ? percpu_ref_init+0x1fd/0x290 [ 3465.215216] ? blk_set_pm_only+0x30/0x30 [ 3465.219314] ? percpu_ref_noop_confirm_switch+0x10/0x10 [ 3465.224721] blkcg_init_queue+0x27/0x560 [ 3465.228821] blk_alloc_queue_node+0x972/0xe80 [ 3465.233357] ? blk_init_allocated_queue+0x640/0x640 [ 3465.238651] ? __mutex_init+0x1f7/0x290 [ 3465.242691] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3465.248265] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 3465.253076] ? blk_mq_update_nr_hw_queues+0xf00/0xf00 [ 3465.258311] blk_mq_init_queue+0x4b/0xb0 [ 3465.262406] loop_add+0x376/0xa40 [ 3465.265937] ? loop_queue_rq+0x690/0x690 [ 3465.270053] loop_control_ioctl+0x199/0x530 [ 3465.274404] ? loop_add+0xa40/0xa40 [ 3465.278080] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 3465.283051] ? loop_add+0xa40/0xa40 [ 3465.286712] do_vfs_ioctl+0x1de/0x1790 [ 3465.290642] ? ioctl_preallocate+0x300/0x300 [ 3465.295082] ? __fget_light+0x2e9/0x430 [ 3465.299177] ? fget_raw+0x20/0x20 [ 3465.302673] ? __sb_end_write+0xd9/0x110 [ 3465.306778] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3465.312350] ? fput+0x130/0x1a0 [ 3465.315667] ? do_syscall_64+0x9a/0x820 [ 3465.319677] ? do_syscall_64+0x9a/0x820 [ 3465.323690] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3465.328563] ? security_file_ioctl+0x94/0xc0 [ 3465.333063] ksys_ioctl+0xa9/0xd0 [ 3465.336560] __x64_sys_ioctl+0x73/0xb0 [ 3465.340483] do_syscall_64+0x1b9/0x820 [ 3465.344494] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3465.349935] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3465.354934] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3465.359938] ? trace_hardirqs_on_caller+0x310/0x310 [ 3465.364995] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3465.370053] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3465.375110] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3465.379995] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3465.385216] RIP: 0033:0x457569 [ 3465.388446] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3465.408133] RSP: 002b:00007f1259a65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 03:47:13 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff1500, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) [ 3465.415880] RAX: ffffffffffffffda RBX: 00007f1259a65c90 RCX: 0000000000457569 [ 3465.423214] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 3465.430520] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3465.437819] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1259a666d4 [ 3465.445114] R13: 00000000004c0606 R14: 00000000004d0a30 R15: 0000000000000006 03:47:13 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:47:13 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x442040, 0x0) r1 = fcntl$getown(0xffffffffffffff9c, 0x9) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)=r1) [ 3465.469847] FAT-fs (loop5): bogus number of reserved sectors [ 3465.485472] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3465.543196] FAT-fs (loop5): bogus number of reserved sectors [ 3465.549608] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3465.568034] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:47:13 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:47:13 executing program 4: perf_event_open(&(0x7f0000000000)={0x7, 0x70, 0x7fff, 0x1, 0x1000, 0xff, 0x0, 0x2, 0x43000, 0x1, 0xd61, 0x6, 0xfffffffffffffff9, 0x1, 0x0, 0x81, 0x100000000, 0xeadc, 0x1f, 0x7fffffff, 0x2, 0xcb3, 0x2, 0x3f, 0x4, 0x80e, 0x4, 0x7, 0x8, 0x100000001, 0x5, 0x6, 0x100000000, 0x5, 0x80000000, 0x8, 0x5, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40, 0x63ac}, 0x1, 0x6, 0x1f, 0x9, 0xff, 0x2, 0x338a}, 0xffffffffffffffff, 0x2, 0xffffffffffffff9c, 0x3) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) syz_open_procfs$namespace(r0, &(0x7f00000001c0)='ns/pid\x00') r1 = add_key(&(0x7f00000000c0)='cifs.idmap\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)="a9", 0x1, 0x0) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, r1) 03:47:13 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xac0d0000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) [ 3465.728639] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3465.804733] FAT-fs (loop5): bogus number of reserved sectors [ 3465.821129] FAT-fs (loop5): Can't find a valid FAT filesystem 03:47:13 executing program 0 (fault-call:7 fault-nth:22): r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:47:13 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000100)='\x00', 0xfffffff1, 0xfffffffffffffffd) 03:47:13 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:47:13 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff1802, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) [ 3465.890032] FAT-fs (loop5): bogus number of reserved sectors [ 3465.922245] FAT-fs (loop5): Can't find a valid FAT filesystem 03:47:13 executing program 4: r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000c, r0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}}}, &(0x7f00000000c0)=0xe8) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x7ff, 0x5, &(0x7f00000003c0)=[{&(0x7f0000000140)="41861de53fd1b16bec52ab9d9d9bd0590fe5998bf105a72752ea852a161256b24a2fb1be50a851c597496a6ce87b7ab1f48ef91546bd6c2860d907a4e9c162357d24d0acbe4371b7ab99edc7b2f3f5c779c13ec220decd7c5199bfbba1e8757c85a4f0c4faf949e80a877469937fcfad2e7863a2d88a02cc1a8b6651b455fe708b96aa0bc552ebd83f37d330964776c6b29a", 0x92, 0x3}, {&(0x7f0000000240)="2a1a31396c533da2ca91bef3e0f40e0a70aeb393608989dd248a16a892a5c3dcd57df7442b658cd1dfaf4b13d14ee6b3382f4551bb348bceee003628c81b3979e9785c7d74e2509e1d094923b78caa631a92c399425fd201add628217a3ca781354b47f4ba3175cd33e2b68efcaef7a8ce013490c798c375a453bc808a473254d239bb980142ebc83f3195b58a1f8a8a71fdb9d8a375b8889433626d20527dbe7ffc95062b6251e85c4895cf34dd21b48de7cf49c3363347a273f79691e94e6fe3a90aeb6cb7655a4e839de938a347f735ddc4b9f5ffb56b71036b43006e3f306c05843efee39e48e69aefcd49e974", 0xef, 0x101}, {&(0x7f0000000080)="8879d905f5afd653f61088970bf8f4b9ed82e41bd1e58657be9aa87604a920ef940a2f", 0x23, 0x3}, {&(0x7f0000000340)="90b99ce0b15adad799820189ba566656ccef843dd3f4f101fdcd3ce6dca3a535e7e6435564d801de2f5be2c00ab0ca85aeedee35377f30df0bf335ef8a96fc9de1319da30a75b9b7bb424f45c30d9ab54837cb5d60b3a24746f2dac5edd8234bf96c16ce8221043d5416c1d2319455", 0x6f}, {&(0x7f0000000600)="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", 0x1000, 0x401}], 0x1, &(0x7f0000001600)={[{@logbsize={'logbsize', 0x3d, [0x0, 0x65, 0x7f, 0x0]}}, {@inode64='inode64'}, {@quota='quota'}], [{@func={'func', 0x3d, 'MODULE_CHECK'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fowner_gt={'fowner>', r1}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@smackfsdef={'smackfsdef', 0x3d, 'syz'}}, {@fsname={'fsname', 0x3d, 'syz'}}, {@obj_user={'obj_user', 0x3d, 'user\x00'}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@smackfsroot={'smackfsroot', 0x3d, 'user\x00'}}]}) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) [ 3465.942324] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3466.190238] XFS (loop4): unknown mount option [logbsize=]. [ 3466.190428] FAULT_INJECTION: forcing a failure. [ 3466.190428] name failslab, interval 1, probability 0, space 0, times 0 [ 3466.208603] CPU: 0 PID: 30356 Comm: syz-executor0 Not tainted 4.19.0+ #319 [ 3466.215772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3466.225180] Call Trace: [ 3466.227803] dump_stack+0x244/0x39d [ 3466.231473] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3466.236702] ? debug_smp_processor_id+0x1c/0x20 [ 3466.241407] ? perf_trace_lock+0x14d/0x7a0 [ 3466.245813] should_fail.cold.4+0xa/0x17 [ 3466.249946] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3466.255082] ? debug_smp_processor_id+0x1c/0x20 [ 3466.259793] ? perf_trace_lock+0x14d/0x7a0 [ 3466.264153] ? lock_is_held_type+0x210/0x210 [ 3466.268604] ? zap_class+0x640/0x640 [ 3466.272366] ? find_held_lock+0x36/0x1c0 [ 3466.276486] ? __lock_is_held+0xb5/0x140 [ 3466.280642] ? ecryptfs_add_new_key_tfm+0x258/0x7d0 [ 3466.285712] ? perf_trace_sched_process_exec+0x860/0x860 [ 3466.291197] ? mark_held_locks+0xc7/0x130 [ 3466.295385] ? _raw_spin_unlock_irq+0x27/0x80 [ 3466.299959] __should_failslab+0x124/0x180 [ 3466.304234] should_failslab+0x9/0x14 [ 3466.308075] kmem_cache_alloc_node_trace+0x270/0x740 [ 3466.313209] ? __lock_is_held+0xb5/0x140 [ 3466.317373] iolatency_pd_alloc+0x93/0x120 [ 3466.321645] ? blk_queue_bypass_start+0x196/0x2c0 [ 3466.326522] ? iolatency_set_limit+0x620/0x620 [ 3466.331136] blkcg_activate_policy+0xf4/0x580 [ 3466.335669] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 3466.340631] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 3466.345986] blk_iolatency_init+0x130/0x2e0 [ 3466.350350] blkcg_init_queue+0x1e3/0x560 [ 3466.354673] blk_alloc_queue_node+0x972/0xe80 [ 3466.359211] ? blk_init_allocated_queue+0x640/0x640 [ 3466.364261] ? __mutex_init+0x1f7/0x290 [ 3466.368295] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3466.373868] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 3466.378712] ? blk_mq_update_nr_hw_queues+0xf00/0xf00 [ 3466.383976] blk_mq_init_queue+0x4b/0xb0 [ 3466.388075] loop_add+0x376/0xa40 [ 3466.391563] ? loop_queue_rq+0x690/0x690 [ 3466.395669] loop_control_ioctl+0x199/0x530 [ 3466.400028] ? loop_add+0xa40/0xa40 [ 3466.403697] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 3466.408666] ? loop_add+0xa40/0xa40 [ 3466.412327] do_vfs_ioctl+0x1de/0x1790 [ 3466.416259] ? ioctl_preallocate+0x300/0x300 [ 3466.420872] ? __fget_light+0x2e9/0x430 [ 3466.424960] ? fget_raw+0x20/0x20 [ 3466.428457] ? __sb_end_write+0xd9/0x110 [ 3466.432677] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3466.438245] ? fput+0x130/0x1a0 [ 3466.441564] ? do_syscall_64+0x9a/0x820 [ 3466.445794] ? do_syscall_64+0x9a/0x820 [ 3466.449803] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3466.454422] ? security_file_ioctl+0x94/0xc0 [ 3466.458869] ksys_ioctl+0xa9/0xd0 [ 3466.462401] __x64_sys_ioctl+0x73/0xb0 [ 3466.466326] do_syscall_64+0x1b9/0x820 [ 3466.470251] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3466.475894] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3466.480936] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3466.485818] ? trace_hardirqs_on_caller+0x310/0x310 [ 3466.490865] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3466.496110] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3466.501377] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3466.506272] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3466.511580] RIP: 0033:0x457569 [ 3466.514806] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3466.533737] RSP: 002b:00007f1259a65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3466.541483] RAX: ffffffffffffffda RBX: 00007f1259a65c90 RCX: 0000000000457569 [ 3466.548776] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 3466.556069] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3466.563365] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1259a666d4 [ 3466.570745] R13: 00000000004c0606 R14: 00000000004d0a30 R15: 0000000000000006 03:47:14 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0000, 0x600, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:47:14 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:47:14 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x10260000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:47:14 executing program 4: add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0x0) r0 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="31e5d0532b9aff6349401445cb6d6925fcf06156e434920b9542319986c09c5f406da124dd20d6978e8ae0a2cfdb748f4fad4ebbd20cfb9ad3abb5509da1e4c61bd6794219188550ffdffddc4b96d6436d5ff9f9514c97cc529a2f68cd423faad4adabf8935e5b9f29093e6fa71b63d4ade76a00d362691701efc7077bf0eafcd5fd5683536267fb8de24d81a56a6de1da486304e5491b8ff47b3b6c3e6da65cfe2c07a829e3710fdbe3d159e59fea51ab2de2454eac7dbda84fef35efb5da65a543835c559ece9a7c8f78dc82d600ce50bbe1dadbe64eeb628aed4fc27f8bb5b582d478bd959bd35026", 0xea, 0xfffffffffffffffe) r1 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x7, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000002c0)="4d0880d78d0a773cef2844ee5ec4cbbb775cd9e398b4868aae4864be687a11e1a096b83a2a", 0x25}, {&(0x7f0000000300)="7b925b95ee3c7b0dc927fc337883b155ba3f64d79aede57dc006e987321f0d5e146667e6303af4c24b7a172ef70d7360c80639fffa", 0x35}, {&(0x7f0000000340)="f19058bb905bb9ec52c0d16d31b200a1991a403a6f56d4f02e1f90cfe5c233f1d7d40bbc56b2108acdbee03466f6d5edb843fd70f5ed2f8d3f6abca15284269ee02a605ae66b1f0c0ea03cea800bf2e955bc8be446e5bdf83b9a57fb880001675eadfce1780fac1373585637f6d04abb17dddae24a87c09cfd21da2bd06f3607d19ca6f813c5bd93fab6ad0b9598a1436ad034bfebee7323e41c0c444e5f93f3387215cb13973932d6ae0d0e22f4", 0xae}, {&(0x7f0000000400)="0a5e1e5bb37bf99f6254d77603ddd3a9415026d2945f3417549a9c7ccbde26980813e9a4cdd94a58bf67e724a8791ea83da78f4fe4f686699f8d88a0b1a8c6fa5df11a6c037239f813cab026447fc030b5a0131e586457945b11ce412b8e5f6e8def9928317f960c28585ff81254d07c0eaa90e7be11a7fd2ab9647a9b13d193bc9a2792cff429a3520fe0", 0x8b}, {&(0x7f00000004c0)="20838f866bd0efe681d9d6370e3c81ecf4e120d435089164b26b6a3f66f3be7a9905b89038cbb1e5905ba4b259eb4f087c5748a9d1dfcf93ff75db53e3194351f02685beb52aae8ca6e619b0cfa60bdb757577f9a5251b6de7766cc588ef66f187e25421dfedce34c1cf62dab5933d9582a913d7bb0f97f38ed0a5498a9e9bd03aae8bd9afda3c8d56e0ed4db76264539f5234f705a8a70c1ccab227ebc274a967d86f520d6d953bf490cea8dc3111382013393097a56ea5cb50a458c7d05ed7f6ce7a347e24e44062613d022874f200f71c", 0xd2}, {&(0x7f0000000600)="c7a5e212a0f9197a48530c2ef526c81937d966fb2968bd469c741f1ef8794122139914cce7610154515f18d4d87c44cd46a02e098f0a383f", 0x38}], 0x6, &(0x7f00000006c0)=[{0xc0, 0x109, 0x0, "8713d53103142fde8439db6490c27eb6723cd87118f45f14b345f2008ea0a113afec74971c1f41e05163050084ef5960be550fb9daef310a3323f5b4a25a3ccb11a3ba0253ccaabb9fd6d2df1144277c87b3564593e15046436d3868c5aac6705c275d62b694a4f32fa5f450cabbaa67e727dc405ae857e817896e23379ad98b77ba181d26996c243cf92d0acb653a07d377bebc8364b813380c2f3efce0b81f109d12f63cc50570932904432edfa0"}], 0xc0, 0x4001}, 0x80) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, r0) 03:47:14 executing program 0 (fault-call:7 fault-nth:23): r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 3466.654431] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:47:14 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3466.748417] FAT-fs (loop5): bogus number of reserved sectors [ 3466.760717] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3466.772431] FAT-fs (loop5): Can't find a valid FAT filesystem 03:47:14 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x7477b47f, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:47:14 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:47:14 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x10c) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0xe4481, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000080)={0xff, 0xae1a, 0x3, 0x6, 0xff, 0xffffffffffffffff, 0x7, 0x4, 0x1000, 0x7, 0x57}, 0xb) ioctl$void(r0, 0xc0045874) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='user.syz\x00') [ 3466.870334] FAULT_INJECTION: forcing a failure. [ 3466.870334] name failslab, interval 1, probability 0, space 0, times 0 [ 3466.882285] CPU: 0 PID: 30381 Comm: syz-executor0 Not tainted 4.19.0+ #319 [ 3466.889419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3466.898888] Call Trace: [ 3466.901553] dump_stack+0x244/0x39d [ 3466.905224] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3466.910532] ? mark_held_locks+0x130/0x130 [ 3466.914810] should_fail.cold.4+0xa/0x17 [ 3466.918940] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3466.924100] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3466.929695] ? pcpu_balance_workfn+0x1700/0x1700 [ 3466.934493] ? zap_class+0x640/0x640 [ 3466.938251] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3466.943822] ? check_preemption_disabled+0x48/0x280 [ 3466.948883] ? lock_acquire+0x1ed/0x520 [ 3466.952961] __should_failslab+0x124/0x180 [ 3466.957235] should_failslab+0x9/0x14 [ 3466.961067] kmem_cache_alloc_node_trace+0x5a/0x740 [ 3466.966118] ? rwlock_bug.part.2+0x90/0x90 [ 3466.970386] ? trace_hardirqs_on+0x310/0x310 [ 3466.974844] iolatency_pd_alloc+0x93/0x120 [ 3466.979113] ? iolatency_set_limit+0x620/0x620 [ 3466.983727] blkcg_activate_policy+0x221/0x580 [ 3466.988355] blk_iolatency_init+0x130/0x2e0 [ 3466.992715] blkcg_init_queue+0x1e3/0x560 [ 3466.997019] blk_alloc_queue_node+0x972/0xe80 [ 3467.001557] ? blk_init_allocated_queue+0x640/0x640 [ 3467.006609] ? __mutex_init+0x1f7/0x290 [ 3467.010643] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3467.016210] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 3467.021015] ? blk_mq_update_nr_hw_queues+0xf00/0xf00 [ 3467.026242] blk_mq_init_queue+0x4b/0xb0 [ 3467.030334] loop_add+0x376/0xa40 [ 3467.033820] ? loop_queue_rq+0x690/0x690 [ 3467.037962] loop_control_ioctl+0x199/0x530 [ 3467.042317] ? loop_add+0xa40/0xa40 [ 3467.045986] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 3467.050976] ? loop_add+0xa40/0xa40 [ 3467.054635] do_vfs_ioctl+0x1de/0x1790 [ 3467.058558] ? ioctl_preallocate+0x300/0x300 [ 3467.062998] ? __fget_light+0x2e9/0x430 [ 3467.067005] ? fget_raw+0x20/0x20 [ 3467.070492] ? __sb_end_write+0xd9/0x110 [ 3467.074592] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3467.080274] ? fput+0x130/0x1a0 [ 3467.083587] ? do_syscall_64+0x9a/0x820 [ 3467.087707] ? do_syscall_64+0x9a/0x820 [ 3467.091716] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3467.096337] ? security_file_ioctl+0x94/0xc0 [ 3467.100779] ksys_ioctl+0xa9/0xd0 [ 3467.104359] __x64_sys_ioctl+0x73/0xb0 [ 3467.108283] do_syscall_64+0x1b9/0x820 [ 3467.112205] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3467.117600] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3467.122558] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3467.127434] ? trace_hardirqs_on_caller+0x310/0x310 [ 3467.132496] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3467.137543] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3467.142681] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3467.147569] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3467.152784] RIP: 0033:0x457569 03:47:15 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3467.156089] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3467.175027] RSP: 002b:00007f1259a65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3467.182767] RAX: ffffffffffffffda RBX: 00007f1259a65c90 RCX: 0000000000457569 [ 3467.190059] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 3467.197353] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3467.204653] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1259a666d4 [ 3467.211966] R13: 00000000004c0606 R14: 00000000004d0a30 R15: 0000000000000006 03:47:15 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0000, 0x7d013080, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:47:15 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x4b04000000000000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:47:15 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:47:15 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x100, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYBLOB="04000600a3aa080080000800be0ca10000000000000000fe2f00f1d535a5bbbeea"], &(0x7f0000000440)=0x14) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000480)={r1, 0x4}, &(0x7f00000004c0)=0x8) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x0, 0x3, 0x9, 0x2, 0x80000001}}) symlinkat(&(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00') fchmodat(r0, &(0x7f0000000040)='./file0\x00', 0x18) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) recvmsg(r0, &(0x7f00000003c0)={&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/34, 0x22}, {&(0x7f00000002c0)=""/142, 0x8e}], 0x2, &(0x7f0000000600)=""/4096, 0x1000, 0x664f7a27}, 0x2100) r2 = request_key(&(0x7f0000001600)='blacklist\x00', &(0x7f0000001640)={'syz', 0x3}, &(0x7f0000001680)='\x00', 0xfffffffffffffff9) add_key$user(&(0x7f0000000500)='user\x00', &(0x7f0000000540)={'syz', 0x0}, &(0x7f0000000580), 0x0, r2) getsockopt$packet_buf(r0, 0x107, 0x5, &(0x7f00000000c0), &(0x7f0000000140)) 03:47:15 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000000036915fa2c1ec28656aaa79bb94b46fe0000000700020811008c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) 03:47:15 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xa9, 0x280101) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000600)=""/4096) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) [ 3467.397945] FAT-fs (loop5): bogus number of reserved sectors [ 3467.433874] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3467.525868] FAT-fs (loop5): bogus number of reserved sectors [ 3467.536390] FAT-fs (loop5): Can't find a valid FAT filesystem 03:47:15 executing program 0 (fault-call:7 fault-nth:24): r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:47:15 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000000036915fa2c1ec28656aaa79bb94b46fe0000000700020800078c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) [ 3467.779668] FAULT_INJECTION: forcing a failure. [ 3467.779668] name failslab, interval 1, probability 0, space 0, times 0 [ 3467.792272] CPU: 1 PID: 30419 Comm: syz-executor0 Not tainted 4.19.0+ #319 [ 3467.799325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3467.808702] Call Trace: [ 3467.811328] dump_stack+0x244/0x39d [ 3467.815001] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3467.820232] ? debug_smp_processor_id+0x1c/0x20 [ 3467.824965] ? perf_trace_lock+0x14d/0x7a0 [ 3467.829244] should_fail.cold.4+0xa/0x17 [ 3467.833369] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3467.838590] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3467.844346] ? check_preemption_disabled+0x48/0x280 [ 3467.849405] ? debug_smp_processor_id+0x1c/0x20 [ 3467.854112] ? perf_trace_lock+0x14d/0x7a0 [ 3467.858383] ? zap_class+0x640/0x640 [ 3467.862250] ? lock_is_held_type+0x210/0x210 [ 3467.866703] ? find_held_lock+0x36/0x1c0 [ 3467.870802] ? __lock_is_held+0xb5/0x140 [ 3467.874938] ? perf_trace_sched_process_exec+0x860/0x860 [ 3467.880446] __should_failslab+0x124/0x180 [ 3467.884720] should_failslab+0x9/0x14 [ 3467.888554] kmem_cache_alloc_trace+0x2d7/0x750 [ 3467.893249] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 3467.898206] ? kasan_check_read+0x11/0x20 [ 3467.902387] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 3467.907783] ? rcu_softirq_qs+0x20/0x20 [ 3467.911794] blk_iolatency_init+0x51/0x2e0 [ 3467.916067] blkcg_init_queue+0x1e3/0x560 [ 3467.920256] blk_alloc_queue_node+0x972/0xe80 [ 3467.924805] ? blk_init_allocated_queue+0x640/0x640 [ 3467.929853] ? __mutex_init+0x1f7/0x290 [ 3467.933956] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3467.939532] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 3467.944341] ? blk_mq_update_nr_hw_queues+0xf00/0xf00 [ 3467.949572] blk_mq_init_queue+0x4b/0xb0 [ 3467.953663] loop_add+0x376/0xa40 [ 3467.957150] ? loop_queue_rq+0x690/0x690 [ 3467.961258] loop_control_ioctl+0x199/0x530 [ 3467.965611] ? loop_add+0xa40/0xa40 [ 3467.969277] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 3467.974244] ? loop_add+0xa40/0xa40 [ 3467.977938] do_vfs_ioctl+0x1de/0x1790 [ 3467.981866] ? ioctl_preallocate+0x300/0x300 [ 3467.986459] ? __fget_light+0x2e9/0x430 [ 3467.990462] ? fget_raw+0x20/0x20 [ 3467.993976] ? __sb_end_write+0xd9/0x110 [ 3467.998077] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3468.003646] ? fput+0x130/0x1a0 [ 3468.007152] ? do_syscall_64+0x9a/0x820 [ 3468.011158] ? do_syscall_64+0x9a/0x820 [ 3468.015168] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3468.019783] ? security_file_ioctl+0x94/0xc0 [ 3468.024222] ksys_ioctl+0xa9/0xd0 [ 3468.027713] __x64_sys_ioctl+0x73/0xb0 [ 3468.031671] do_syscall_64+0x1b9/0x820 [ 3468.035591] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3468.040990] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3468.046055] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3468.050959] ? trace_hardirqs_on_caller+0x310/0x310 [ 3468.056015] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3468.061086] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3468.066146] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3468.071033] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3468.076253] RIP: 0033:0x457569 [ 3468.079474] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3468.098400] RSP: 002b:00007f1259a65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3468.106144] RAX: ffffffffffffffda RBX: 00007f1259a65c90 RCX: 0000000000457569 [ 3468.113447] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 3468.120775] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3468.128070] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1259a666d4 [ 3468.135363] R13: 00000000004c0606 R14: 00000000004d0a30 R15: 0000000000000006 03:47:16 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x950b0000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:47:16 executing program 4: r0 = request_key(&(0x7f0000000040)='rxrpc_s\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='syz', 0xffffffffffffffff) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, r0) getresuid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) r4 = syz_open_dev$sndpcmp(&(0x7f00000003c0)='/dev/snd/pcmC#D#p\x00', 0x311, 0x2080) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) write$USERIO_CMD_REGISTER(r4, &(0x7f0000000400)={0x0, 0x40}, 0x2) ioprio_set$pid(0x2, r2, 0x7fd) mount$9p_virtio(&(0x7f0000000140)='\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x3080004, &(0x7f0000000340)={'trans=virtio,', {[{@access_any='access=any'}, {@access_uid={'access', 0x3d, r1}}, {@uname={'uname', 0x3d, 'user\x00'}}, {@version_9p2000='version=9p2000'}, {@version_L='version=9p2000.L'}, {@mmap='mmap'}], [{@euid_eq={'euid', 0x3d, r3}}]}}) 03:47:16 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x1000000000000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:47:16 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:47:16 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0000, 0xffffff91, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:47:16 executing program 0 (fault-call:7 fault-nth:25): r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:47:16 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:47:16 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200000, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) [ 3468.293030] FAT-fs (loop5): bogus number of reserved sectors [ 3468.306065] FAT-fs (loop5): Can't find a valid FAT filesystem 03:47:16 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3468.416024] FAULT_INJECTION: forcing a failure. [ 3468.416024] name failslab, interval 1, probability 0, space 0, times 0 [ 3468.465739] CPU: 1 PID: 30441 Comm: syz-executor0 Not tainted 4.19.0+ #319 [ 3468.472843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3468.482211] Call Trace: [ 3468.484826] dump_stack+0x244/0x39d [ 3468.488521] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3468.493744] ? debug_smp_processor_id+0x1c/0x20 [ 3468.498443] ? perf_trace_lock+0x14d/0x7a0 [ 3468.502740] should_fail.cold.4+0xa/0x17 [ 3468.506851] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3468.511988] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3468.517549] ? check_preemption_disabled+0x48/0x280 [ 3468.522586] ? zap_class+0x640/0x640 [ 3468.526323] ? debug_smp_processor_id+0x1c/0x20 [ 3468.531015] ? perf_trace_lock+0x14d/0x7a0 [ 3468.535267] ? find_held_lock+0x36/0x1c0 [ 3468.539372] ? __lock_is_held+0xb5/0x140 [ 3468.543472] ? check_preemption_disabled+0x48/0x280 [ 3468.548504] ? perf_trace_sched_process_exec+0x860/0x860 [ 3468.554006] __should_failslab+0x124/0x180 [ 3468.558265] should_failslab+0x9/0x14 [ 3468.562094] kmem_cache_alloc_node_trace+0x270/0x740 [ 3468.567214] ? mark_held_locks+0xc7/0x130 [ 3468.571380] ? _raw_spin_unlock_irq+0x27/0x80 [ 3468.575917] throtl_pd_alloc+0xff/0x990 [ 3468.579923] ? blk_queue_bypass_start+0x151/0x2c0 [ 3468.584784] ? blk_throtl_dispatch_work_fn+0x4a0/0x4a0 [ 3468.590088] ? __lock_is_held+0xb5/0x140 [ 3468.594209] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3468.599763] ? blk_throtl_dispatch_work_fn+0x4a0/0x4a0 [ 3468.605063] blkcg_activate_policy+0xf4/0x580 [ 3468.609598] blk_throtl_init+0x3d3/0x630 [ 3468.613686] ? blk_throtl_drain+0x810/0x810 [ 3468.618035] ? blk_iolatency_init+0x1f7/0x2e0 [ 3468.622555] blkcg_init_queue+0x205/0x560 [ 3468.626728] blk_alloc_queue_node+0x972/0xe80 [ 3468.631263] ? blk_init_allocated_queue+0x640/0x640 [ 3468.636297] ? __mutex_init+0x1f7/0x290 [ 3468.640322] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3468.645917] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 3468.650713] ? blk_mq_update_nr_hw_queues+0xf00/0xf00 [ 3468.655941] blk_mq_init_queue+0x4b/0xb0 [ 3468.660022] loop_add+0x376/0xa40 [ 3468.663510] ? loop_queue_rq+0x690/0x690 [ 3468.667608] loop_control_ioctl+0x199/0x530 [ 3468.671950] ? loop_add+0xa40/0xa40 [ 3468.675603] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 3468.680554] ? loop_add+0xa40/0xa40 [ 3468.684197] do_vfs_ioctl+0x1de/0x1790 [ 3468.688114] ? ioctl_preallocate+0x300/0x300 [ 3468.692541] ? __fget_light+0x2e9/0x430 [ 3468.696531] ? fget_raw+0x20/0x20 [ 3468.700009] ? __sb_end_write+0xd9/0x110 [ 3468.704098] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3468.709653] ? fput+0x130/0x1a0 [ 3468.712998] ? do_syscall_64+0x9a/0x820 03:47:16 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0015, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:47:16 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x800, 0x2) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00') [ 3468.716993] ? do_syscall_64+0x9a/0x820 [ 3468.720992] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3468.725598] ? security_file_ioctl+0x94/0xc0 [ 3468.730030] ksys_ioctl+0xa9/0xd0 [ 3468.733508] __x64_sys_ioctl+0x73/0xb0 [ 3468.737423] do_syscall_64+0x1b9/0x820 [ 3468.741335] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3468.746718] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3468.751661] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3468.756529] ? trace_hardirqs_on_caller+0x310/0x310 [ 3468.761569] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3468.766607] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3468.771649] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3468.776530] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3468.781732] RIP: 0033:0x457569 [ 3468.784940] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3468.803856] RSP: 002b:00007f1259a65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3468.811590] RAX: ffffffffffffffda RBX: 00007f1259a65c90 RCX: 0000000000457569 [ 3468.818907] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 3468.826187] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3468.833467] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1259a666d4 [ 3468.840748] R13: 00000000004c0606 R14: 00000000004d0a30 R15: 0000000000000006 03:47:16 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:47:16 executing program 0 (fault-call:7 fault-nth:26): r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 3468.894346] FAT-fs (loop5): bogus number of reserved sectors [ 3468.911943] FAT-fs (loop5): Can't find a valid FAT filesystem 03:47:16 executing program 4: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000040)=0x10, 0x800) setsockopt$inet_tcp_int(r0, 0x6, 0x1c, &(0x7f00000003c0)=0x8549, 0x4) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000080)=0x8a0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x7, 0x10000) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x41000000) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x3}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) open(&(0x7f00000000c0)='./file0\x00', 0x1e500, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000340)={'filter\x00', 0x0, 0x3, 0x69, [], 0x8, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000002c0)=""/105}, &(0x7f00000001c0)=0x78) 03:47:17 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x7000000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:47:17 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3469.135738] FAULT_INJECTION: forcing a failure. [ 3469.135738] name failslab, interval 1, probability 0, space 0, times 0 [ 3469.147012] CPU: 0 PID: 30465 Comm: syz-executor0 Not tainted 4.19.0+ #319 [ 3469.154037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3469.163402] Call Trace: [ 3469.166015] dump_stack+0x244/0x39d [ 3469.169671] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3469.174884] ? debug_object_free+0x690/0x690 [ 3469.179335] ? __kernel_text_address+0xd/0x40 [ 3469.183861] ? unwind_get_return_address+0x61/0xa0 [ 3469.188815] should_fail.cold.4+0xa/0x17 [ 3469.192899] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3469.198030] ? zap_class+0x640/0x640 [ 3469.201781] ? save_stack+0xa9/0xd0 [ 3469.205457] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3469.211037] ? check_preemption_disabled+0x48/0x280 [ 3469.216081] ? __lock_is_held+0xb5/0x140 [ 3469.220168] ? __lockdep_init_map+0x105/0x590 [ 3469.224683] ? lockdep_init_map+0x9/0x10 [ 3469.228767] ? init_timer_on_stack_key+0xe0/0xe0 [ 3469.233559] ? __lock_is_held+0xb5/0x140 [ 3469.237670] __should_failslab+0x124/0x180 [ 3469.241928] should_failslab+0x9/0x14 [ 3469.245747] kmem_cache_alloc_node_trace+0x5a/0x740 [ 3469.250790] ? lock_acquire+0x1ed/0x520 [ 3469.254789] throtl_pd_alloc+0xff/0x990 [ 3469.258783] ? blk_throtl_dispatch_work_fn+0x4a0/0x4a0 [ 3469.264829] ? rwlock_bug.part.2+0x90/0x90 [ 3469.269098] ? trace_hardirqs_on+0x310/0x310 [ 3469.273536] ? blk_throtl_dispatch_work_fn+0x4a0/0x4a0 [ 3469.278835] blkcg_activate_policy+0x221/0x580 [ 3469.283449] blk_throtl_init+0x3d3/0x630 [ 3469.287531] ? blk_throtl_drain+0x810/0x810 [ 3469.291903] ? blk_iolatency_init+0x1f7/0x2e0 [ 3469.296429] blkcg_init_queue+0x205/0x560 [ 3469.300619] blk_alloc_queue_node+0x972/0xe80 [ 3469.305143] ? blk_init_allocated_queue+0x640/0x640 [ 3469.310180] ? __mutex_init+0x1f7/0x290 [ 3469.314202] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3469.319754] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 3469.324555] ? blk_mq_update_nr_hw_queues+0xf00/0xf00 [ 3469.329769] blk_mq_init_queue+0x4b/0xb0 [ 3469.333845] loop_add+0x376/0xa40 [ 3469.337318] ? loop_queue_rq+0x690/0x690 [ 3469.341406] loop_control_ioctl+0x199/0x530 [ 3469.345755] ? loop_add+0xa40/0xa40 [ 3469.349404] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 3469.354355] ? loop_add+0xa40/0xa40 [ 3469.358007] do_vfs_ioctl+0x1de/0x1790 [ 3469.361928] ? ioctl_preallocate+0x300/0x300 [ 3469.366358] ? __fget_light+0x2e9/0x430 [ 3469.370361] ? fget_raw+0x20/0x20 [ 3469.373837] ? __sb_end_write+0xd9/0x110 [ 3469.377927] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3469.383482] ? fput+0x130/0x1a0 [ 3469.386779] ? do_syscall_64+0x9a/0x820 [ 3469.390771] ? do_syscall_64+0x9a/0x820 [ 3469.394761] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3469.399463] ? security_file_ioctl+0x94/0xc0 [ 3469.403891] ksys_ioctl+0xa9/0xd0 [ 3469.407870] __x64_sys_ioctl+0x73/0xb0 [ 3469.411791] do_syscall_64+0x1b9/0x820 [ 3469.415697] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3469.421087] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3469.426029] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3469.430895] ? trace_hardirqs_on_caller+0x310/0x310 [ 3469.435963] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3469.440997] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3469.446052] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3469.450936] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3469.456139] RIP: 0033:0x457569 [ 3469.459347] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3469.478257] RSP: 002b:00007f1259a65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 03:47:17 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0000, 0x30ad010ec44, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:47:17 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x1, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000000)) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) 03:47:17 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3469.485980] RAX: ffffffffffffffda RBX: 00007f1259a65c90 RCX: 0000000000457569 [ 3469.493261] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 3469.500539] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3469.507832] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1259a666d4 [ 3469.515288] R13: 00000000004c0606 R14: 00000000004d0a30 R15: 0000000000000006 03:47:17 executing program 0 (fault-call:7 fault-nth:27): r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:47:17 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = getuid() lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40106614, &(0x7f0000000300)={0x0, @speck128}) setresuid(r0, r1, r2) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000000)=0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f00000000c0)={0x0, @speck128, 0x0, "3500a73bfcf91bc8"}) rt_tgsigqueueinfo(r4, r5, 0x2c, &(0x7f0000000080)={0x3c, 0x7, 0x5, 0x8000000000a}) [ 3469.568066] __nla_parse: 13 callbacks suppressed [ 3469.568077] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3469.587387] FAT-fs (loop5): bogus number of reserved sectors [ 3469.595239] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3469.673655] FAT-fs (loop5): bogus number of reserved sectors [ 3469.692994] FAT-fs (loop5): Can't find a valid FAT filesystem 03:47:17 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0218, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:47:17 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000000036915fa2c1ec28656aaa79bb94b46fe0000000700020801558c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) 03:47:17 executing program 4: add_key$user(&(0x7f0000000040)='user\x00', &(0x7f00000005c0)={'syz', 0x0}, &(0x7f0000000000)="ae28141e00310500", 0xffffff8c, 0xfffffffffffffffd) 03:47:17 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000000036915fa2c1ec28656aaa79bb94b46fe0000000700020800068c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) [ 3469.791106] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:47:17 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x6000000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) [ 3469.845230] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3469.866189] FAULT_INJECTION: forcing a failure. [ 3469.866189] name failslab, interval 1, probability 0, space 0, times 0 [ 3469.903392] CPU: 1 PID: 30489 Comm: syz-executor0 Not tainted 4.19.0+ #319 [ 3469.910471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3469.919835] Call Trace: [ 3469.922451] dump_stack+0x244/0x39d [ 3469.926106] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3469.931326] ? debug_smp_processor_id+0x1c/0x20 [ 3469.936018] ? perf_trace_lock+0x14d/0x7a0 [ 3469.940379] should_fail.cold.4+0xa/0x17 [ 3469.944473] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3469.949608] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3469.955169] ? check_preemption_disabled+0x48/0x280 [ 3469.960204] ? zap_class+0x640/0x640 [ 3469.963939] ? debug_smp_processor_id+0x1c/0x20 [ 3469.968629] ? perf_trace_lock+0x14d/0x7a0 [ 3469.972949] ? find_held_lock+0x36/0x1c0 [ 3469.977043] ? __lock_is_held+0xb5/0x140 [ 3469.981119] ? fat_ent_read+0x208/0xc10 [ 3469.985124] ? check_preemption_disabled+0x48/0x280 [ 3469.990174] ? perf_trace_sched_process_exec+0x860/0x860 [ 3469.995661] __should_failslab+0x124/0x180 [ 3469.999915] should_failslab+0x9/0x14 [ 3470.003742] kmem_cache_alloc_node_trace+0x270/0x740 [ 3470.008864] ? mark_held_locks+0xc7/0x130 [ 3470.013046] ? _raw_spin_unlock_irq+0x27/0x80 [ 3470.017593] throtl_pd_alloc+0xff/0x990 [ 3470.021593] ? blk_queue_bypass_start+0x151/0x2c0 [ 3470.026457] ? blk_throtl_dispatch_work_fn+0x4a0/0x4a0 [ 3470.031755] ? __lock_is_held+0xb5/0x140 [ 3470.035834] ? fat_ent_read+0x210/0xc10 [ 3470.039835] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3470.045392] ? blk_throtl_dispatch_work_fn+0x4a0/0x4a0 [ 3470.050697] blkcg_activate_policy+0xf4/0x580 [ 3470.055225] blk_throtl_init+0x3d3/0x630 [ 3470.059307] ? blk_throtl_drain+0x810/0x810 [ 3470.063667] ? blk_iolatency_init+0x1f7/0x2e0 [ 3470.068203] blkcg_init_queue+0x205/0x560 [ 3470.072386] blk_alloc_queue_node+0x972/0xe80 [ 3470.077060] ? blk_init_allocated_queue+0x640/0x640 [ 3470.082096] ? __mutex_init+0x1f7/0x290 [ 3470.086115] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3470.091667] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 3470.096464] ? blk_mq_update_nr_hw_queues+0xf00/0xf00 [ 3470.101686] blk_mq_init_queue+0x4b/0xb0 [ 3470.105766] loop_add+0x376/0xa40 [ 3470.109251] ? loop_queue_rq+0x690/0x690 [ 3470.113345] loop_control_ioctl+0x199/0x530 [ 3470.117682] ? loop_add+0xa40/0xa40 [ 3470.121337] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 3470.126310] ? loop_add+0xa40/0xa40 [ 3470.129964] do_vfs_ioctl+0x1de/0x1790 [ 3470.133881] ? ioctl_preallocate+0x300/0x300 [ 3470.138312] ? __fget_light+0x2e9/0x430 [ 3470.142313] ? fget_raw+0x20/0x20 [ 3470.145796] ? __sb_end_write+0xd9/0x110 [ 3470.149931] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3470.155485] ? fput+0x130/0x1a0 [ 3470.158794] ? do_syscall_64+0x9a/0x820 [ 3470.162784] ? do_syscall_64+0x9a/0x820 [ 3470.166782] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3470.171407] ? security_file_ioctl+0x94/0xc0 [ 3470.175843] ksys_ioctl+0xa9/0xd0 [ 3470.179322] __x64_sys_ioctl+0x73/0xb0 [ 3470.183237] do_syscall_64+0x1b9/0x820 [ 3470.187142] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3470.192531] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3470.197476] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3470.202340] ? trace_hardirqs_on_caller+0x310/0x310 [ 3470.207426] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3470.212466] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3470.217509] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3470.222376] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3470.227610] RIP: 0033:0x457569 [ 3470.230836] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:47:18 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000000036915fa2c1ec28656aaa79bb94b46fe0000000700020805008c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) [ 3470.249754] RSP: 002b:00007f1259a65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3470.257476] RAX: ffffffffffffffda RBX: 00007f1259a65c90 RCX: 0000000000457569 [ 3470.264752] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 3470.272032] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3470.279310] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1259a666d4 [ 3470.286609] R13: 00000000004c0606 R14: 00000000004d0a30 R15: 0000000000000006 03:47:18 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0000, 0x1100, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:47:18 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3470.314496] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:47:18 executing program 0 (fault-call:7 fault-nth:28): r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 3470.407260] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:47:18 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r0 = socket$inet_dccp(0x2, 0x6, 0x0) fcntl$setstatus(r0, 0x4, 0x2400) 03:47:18 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000000036915fa2c1ec28656aaa79bb94b46fe00000007000208006c8c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) [ 3470.546985] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:47:18 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x4000, 0x0) getresuid(&(0x7f00000001c0)=0x0, &(0x7f0000000240), &(0x7f0000000280)) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@mcast1, 0x4e24, 0x0, 0x4e24, 0x2, 0xa, 0x20, 0x80, 0x73, 0x0, r1}, {0x4, 0xfffffffffffffe00, 0x800, 0x8, 0x3, 0x2, 0xe30, 0x7}, {0x7, 0x4, 0xac0f}, 0x800, 0x6e6bbc, 0x3, 0x1, 0x2, 0x3}, {{@in6=@ipv4={[], [], @loopback}, 0x4d4, 0x3c}, 0xa, @in=@rand_addr=0x40, 0x3506, 0x3, 0x2, 0x80000000, 0x2, 0xca, 0x8}}, 0xe8) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000100)='\x00', 0x1, r2) r3 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0xd3a, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r3, 0xc0405519, &(0x7f0000000140)={0x6, 0x3, 0x80000000, 0x2400000000000000, 'syz1\x00', 0x1f}) [ 3470.621178] FAULT_INJECTION: forcing a failure. [ 3470.621178] name failslab, interval 1, probability 0, space 0, times 0 [ 3470.633184] FAT-fs (loop5): bogus number of reserved sectors [ 3470.641361] CPU: 1 PID: 30519 Comm: syz-executor0 Not tainted 4.19.0+ #319 [ 3470.644282] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3470.648427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3470.648436] Call Trace: [ 3470.648466] dump_stack+0x244/0x39d [ 3470.648494] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3470.648519] ? debug_smp_processor_id+0x1c/0x20 [ 3470.648539] ? perf_trace_lock+0x14d/0x7a0 [ 3470.648565] should_fail.cold.4+0xa/0x17 [ 3470.648590] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3470.693310] ? save_stack+0x43/0xd0 [ 3470.696961] ? kasan_kmalloc+0xc7/0xe0 [ 3470.700876] ? kmem_cache_alloc_trace+0x152/0x750 [ 3470.705749] ? blk_stat_alloc_callback+0x5b/0x280 [ 3470.710613] ? zap_class+0x640/0x640 [ 3470.714342] ? loop_control_ioctl+0x199/0x530 [ 3470.718855] ? ksys_ioctl+0xa9/0xd0 [ 3470.722503] ? __x64_sys_ioctl+0x73/0xb0 [ 3470.726581] ? do_syscall_64+0x1b9/0x820 [ 3470.730663] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3470.736058] ? find_held_lock+0x36/0x1c0 [ 3470.740141] ? __lock_is_held+0xb5/0x140 [ 3470.744243] ? perf_trace_sched_process_exec+0x860/0x860 [ 3470.749735] ? blk_mq_can_queue+0x50/0x50 [ 3470.753911] __should_failslab+0x124/0x180 [ 3470.758173] should_failslab+0x9/0x14 [ 3470.761996] __kmalloc+0x2e0/0x760 [ 3470.765597] ? kmem_cache_alloc_trace+0x353/0x750 [ 3470.770464] ? blk_throtl_init+0x3e7/0x630 [ 3470.774720] ? blk_stat_alloc_callback+0x84/0x280 [ 3470.779597] ? blk_mq_can_queue+0x50/0x50 [ 3470.783776] ? plug_ctx_cmp+0x110/0x110 [ 3470.787773] blk_stat_alloc_callback+0x84/0x280 [ 3470.792489] blk_mq_init_allocated_queue+0x12c/0x1680 [ 3470.797700] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3470.803255] ? blk_alloc_queue_node+0x988/0xe80 [ 3470.807952] ? blk_mq_map_swqueue+0xa50/0xa50 [ 3470.812468] ? __mutex_init+0x1f7/0x290 [ 3470.816487] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3470.822043] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 3470.826831] ? blk_mq_update_nr_hw_queues+0xf00/0xf00 [ 3470.832048] blk_mq_init_queue+0x63/0xb0 [ 3470.836134] loop_add+0x376/0xa40 [ 3470.839614] ? loop_queue_rq+0x690/0x690 [ 3470.843744] loop_control_ioctl+0x199/0x530 [ 3470.848086] ? loop_add+0xa40/0xa40 [ 3470.851745] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 3470.856710] ? loop_add+0xa40/0xa40 [ 3470.860367] do_vfs_ioctl+0x1de/0x1790 [ 3470.864281] ? ioctl_preallocate+0x300/0x300 [ 3470.868708] ? __fget_light+0x2e9/0x430 [ 3470.872701] ? fget_raw+0x20/0x20 [ 3470.876176] ? __sb_end_write+0xd9/0x110 [ 3470.880262] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3470.885823] ? fput+0x130/0x1a0 [ 3470.889129] ? do_syscall_64+0x9a/0x820 [ 3470.893125] ? do_syscall_64+0x9a/0x820 [ 3470.897125] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3470.901729] ? security_file_ioctl+0x94/0xc0 [ 3470.906162] ksys_ioctl+0xa9/0xd0 [ 3470.909640] __x64_sys_ioctl+0x73/0xb0 [ 3470.913553] do_syscall_64+0x1b9/0x820 [ 3470.917476] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3470.922864] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3470.927811] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3470.932702] ? trace_hardirqs_on_caller+0x310/0x310 [ 3470.937748] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3470.942789] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3470.947841] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3470.952721] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3470.957924] RIP: 0033:0x457569 [ 3470.961141] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3470.980065] RSP: 002b:00007f1259a65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3470.987831] RAX: ffffffffffffffda RBX: 00007f1259a65c90 RCX: 0000000000457569 [ 3470.995116] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 3471.002418] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3471.009709] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1259a666d4 [ 3471.016999] R13: 00000000004c0606 R14: 00000000004d0a30 R15: 0000000000000006 [ 3471.073940] FAT-fs (loop5): bogus number of reserved sectors [ 3471.085188] FAT-fs (loop5): Can't find a valid FAT filesystem 03:47:19 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x73130000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:47:19 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:47:19 executing program 0 (fault-call:7 fault-nth:29): r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:47:19 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x101000, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000040)) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) 03:47:19 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x450, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) [ 3471.267117] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:47:19 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0000, 0x20000000000, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:47:19 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r0 = dup(0xffffffffffffff9c) getdents(r0, &(0x7f0000000240)=""/215, 0xd7) fsetxattr$security_selinux(r0, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:user_cron_spool_t:s0\x00', 0xe0000000000, 0x4000000000) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000080)={0x3615, 0x0, 0x80, 0x10000, 0x20, 0x1}) 03:47:19 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3471.393530] FAULT_INJECTION: forcing a failure. [ 3471.393530] name failslab, interval 1, probability 0, space 0, times 0 [ 3471.406088] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:47:19 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3471.438492] CPU: 1 PID: 30538 Comm: syz-executor0 Not tainted 4.19.0+ #319 [ 3471.445569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3471.454954] Call Trace: [ 3471.457579] dump_stack+0x244/0x39d [ 3471.461240] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3471.466473] ? debug_smp_processor_id+0x1c/0x20 [ 3471.471171] ? perf_trace_lock+0x14d/0x7a0 [ 3471.475448] should_fail.cold.4+0xa/0x17 [ 3471.479534] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3471.484676] ? __lock_is_held+0xb5/0x140 [ 3471.488770] ? zap_class+0x640/0x640 [ 3471.492522] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3471.498093] ? pcpu_alloc+0x190/0x15e0 [ 3471.502011] ? find_held_lock+0x36/0x1c0 [ 3471.506101] ? __lock_is_held+0xb5/0x140 [ 3471.510201] ? __lockdep_init_map+0x105/0x590 [ 3471.515209] ? perf_trace_sched_process_exec+0x860/0x860 [ 3471.520692] ? kobject_init+0x23d/0x2f0 [ 3471.524697] __should_failslab+0x124/0x180 [ 3471.528985] should_failslab+0x9/0x14 [ 3471.532823] kmem_cache_alloc_node_trace+0x270/0x740 [ 3471.537955] ? find_next_bit+0x104/0x130 [ 3471.542053] __kmalloc_node+0x3c/0x70 [ 3471.545927] blk_mq_init_allocated_queue+0x227/0x1680 [ 3471.551139] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3471.556700] ? blk_alloc_queue_node+0x988/0xe80 [ 3471.561403] ? blk_mq_map_swqueue+0xa50/0xa50 [ 3471.565942] ? __mutex_init+0x1f7/0x290 [ 3471.569975] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3471.575539] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 3471.580334] ? blk_mq_update_nr_hw_queues+0xf00/0xf00 [ 3471.585551] blk_mq_init_queue+0x63/0xb0 [ 3471.589633] loop_add+0x376/0xa40 [ 3471.593106] ? loop_queue_rq+0x690/0x690 [ 3471.597198] loop_control_ioctl+0x199/0x530 [ 3471.601546] ? loop_add+0xa40/0xa40 [ 3471.605202] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 3471.610158] ? loop_add+0xa40/0xa40 [ 3471.613841] do_vfs_ioctl+0x1de/0x1790 [ 3471.617757] ? ioctl_preallocate+0x300/0x300 [ 3471.622187] ? __fget_light+0x2e9/0x430 [ 3471.626178] ? fget_raw+0x20/0x20 [ 3471.629653] ? __sb_end_write+0xd9/0x110 [ 3471.633743] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3471.639300] ? fput+0x130/0x1a0 [ 3471.642600] ? do_syscall_64+0x9a/0x820 [ 3471.646607] ? do_syscall_64+0x9a/0x820 [ 3471.650602] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3471.655203] ? security_file_ioctl+0x94/0xc0 [ 3471.659637] ksys_ioctl+0xa9/0xd0 [ 3471.663117] __x64_sys_ioctl+0x73/0xb0 [ 3471.667024] do_syscall_64+0x1b9/0x820 [ 3471.670937] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3471.676330] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3471.681312] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3471.686175] ? trace_hardirqs_on_caller+0x310/0x310 [ 3471.691217] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3471.696254] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3471.701302] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3471.706178] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3471.711384] RIP: 0033:0x457569 [ 3471.714605] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3471.733618] RSP: 002b:00007f1259a65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3471.741350] RAX: ffffffffffffffda RBX: 00007f1259a65c90 RCX: 0000000000457569 [ 3471.748633] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 3471.755912] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3471.763200] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1259a666d4 [ 3471.770480] R13: 00000000004c0606 R14: 00000000004d0a30 R15: 0000000000000006 [ 3471.787115] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3471.812250] FAT-fs (loop5): bogus number of reserved sectors [ 3471.832167] FAT-fs (loop5): Can't find a valid FAT filesystem 03:47:19 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000240)="8432e1a876b773b35dad42a9f941a3947af57a449c481513d46ab013137b1427b6ea4c1b3efd48dc0f2fbcb76ab89136104c69798b92191b967228feb83270bedb77931b534bc9f9884086a4cdde79f71d73ec0f7b827c20a8773cbcec8a0554674c5318b5673aae600d5ae3dd401aade0bc23b8384e8c5a0295488a4603867488a157cedce477c3b498fbf3e7878072fc8d3dbf247be7dc7a67878df230d1dd77b480e1f5d86c8c82a5a9343727d2e46879723c1b5f5db7b710dcd57eae29fadb4c3bd6edf675caa229e9613ea6316dfc17ab8a598f816826331622197b47901edf0b", 0xe3, 0xfffffffffffffffd) 03:47:19 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:47:19 executing program 0 (fault-call:7 fault-nth:30): r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 3471.920764] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3471.937373] FAT-fs (loop5): bogus number of reserved sectors [ 3471.949065] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3472.102451] FAULT_INJECTION: forcing a failure. [ 3472.102451] name failslab, interval 1, probability 0, space 0, times 0 [ 3472.119154] CPU: 0 PID: 30562 Comm: syz-executor0 Not tainted 4.19.0+ #319 [ 3472.126190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3472.135549] Call Trace: [ 3472.138158] dump_stack+0x244/0x39d [ 3472.141811] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3472.147028] ? debug_smp_processor_id+0x1c/0x20 [ 3472.151715] ? perf_trace_lock+0x14d/0x7a0 [ 3472.155970] should_fail.cold.4+0xa/0x17 [ 3472.160073] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3472.165202] ? save_stack+0x43/0xd0 [ 3472.168839] ? kasan_kmalloc+0xc7/0xe0 [ 3472.172742] ? kmem_cache_alloc_trace+0x152/0x750 [ 3472.177597] ? blk_stat_alloc_callback+0x5b/0x280 [ 3472.182462] ? zap_class+0x640/0x640 [ 3472.186186] ? loop_control_ioctl+0x199/0x530 [ 3472.190694] ? ksys_ioctl+0xa9/0xd0 [ 3472.194335] ? __x64_sys_ioctl+0x73/0xb0 [ 3472.198424] ? do_syscall_64+0x1b9/0x820 [ 3472.202507] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3472.207958] ? find_held_lock+0x36/0x1c0 [ 3472.212047] ? __lock_is_held+0xb5/0x140 [ 3472.216139] ? perf_trace_sched_process_exec+0x860/0x860 [ 3472.221620] ? blk_mq_can_queue+0x50/0x50 [ 3472.225784] __should_failslab+0x124/0x180 [ 3472.230043] should_failslab+0x9/0x14 [ 3472.233866] __kmalloc+0x2e0/0x760 [ 3472.237436] ? kmem_cache_alloc_trace+0x353/0x750 [ 3472.242303] ? blk_throtl_init+0x3e7/0x630 [ 3472.246554] ? blk_stat_alloc_callback+0x84/0x280 [ 3472.251427] ? blk_mq_can_queue+0x50/0x50 [ 3472.257154] ? plug_ctx_cmp+0x110/0x110 [ 3472.261147] blk_stat_alloc_callback+0x84/0x280 [ 3472.265839] blk_mq_init_allocated_queue+0x12c/0x1680 [ 3472.271050] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3472.276614] ? blk_alloc_queue_node+0x988/0xe80 [ 3472.281300] ? blk_mq_map_swqueue+0xa50/0xa50 [ 3472.285813] ? __mutex_init+0x1f7/0x290 [ 3472.289839] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3472.295477] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 3472.300266] ? blk_mq_update_nr_hw_queues+0xf00/0xf00 [ 3472.305483] blk_mq_init_queue+0x63/0xb0 [ 3472.309560] loop_add+0x376/0xa40 [ 3472.313034] ? loop_queue_rq+0x690/0x690 [ 3472.317131] loop_control_ioctl+0x199/0x530 [ 3472.321469] ? loop_add+0xa40/0xa40 [ 3472.325120] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 3472.330083] ? loop_add+0xa40/0xa40 [ 3472.333730] do_vfs_ioctl+0x1de/0x1790 [ 3472.337646] ? ioctl_preallocate+0x300/0x300 [ 3472.342073] ? __fget_light+0x2e9/0x430 [ 3472.346067] ? fget_raw+0x20/0x20 [ 3472.349553] ? __sb_end_write+0xd9/0x110 [ 3472.353645] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3472.359200] ? fput+0x130/0x1a0 [ 3472.362498] ? do_syscall_64+0x9a/0x820 [ 3472.366486] ? do_syscall_64+0x9a/0x820 [ 3472.370477] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3472.375077] ? security_file_ioctl+0x94/0xc0 [ 3472.379512] ksys_ioctl+0xa9/0xd0 [ 3472.383021] __x64_sys_ioctl+0x73/0xb0 [ 3472.386943] do_syscall_64+0x1b9/0x820 [ 3472.390846] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3472.396230] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3472.401168] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3472.406061] ? trace_hardirqs_on_caller+0x310/0x310 [ 3472.411116] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3472.416149] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3472.421189] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3472.426056] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3472.431256] RIP: 0033:0x457569 [ 3472.434464] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:47:20 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x88d0000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:47:20 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000000036915fa2c1ec28656aaa79bb94b46fe0000000700020809008c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) 03:47:20 executing program 4: openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x400000, 0x0) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) 03:47:20 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x7a, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:47:20 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0000, 0x800000, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) [ 3472.453384] RSP: 002b:00007f1259a65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3472.461105] RAX: ffffffffffffffda RBX: 00007f1259a65c90 RCX: 0000000000457569 [ 3472.468387] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 3472.475950] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3472.483233] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1259a666d4 [ 3472.490546] R13: 00000000004c0606 R14: 00000000004d0a30 R15: 0000000000000006 03:47:20 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x40, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000340)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000003c0)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000400)={0x0, 0x80000, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000380)={r1, 0x80000, r0}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x20000, 0x0) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000240)="a1fd8e70f2e686cb2b3095f11ae811de338f5ec2d1c183739d265ca1104c8352bf06c6a31e07bc8484033acb87d84dffbdfc362ec56434aa68d4b8568ee4c4f028e007c5412323cb4860f55dc9800d76fab6919ddfad6414f8f551db4b775ecfd4014e2c0f6373d1e76d58ea1a53f12fc85812cc262e24705cc9fddd12c6808ef7bd761b9059152b62472034159a6678cdb134003975a76d21b5f81bae7d6c3d561165e5762f7940c8eccce55140c48123dbf82a427fb5aabc04084b0610764e530764eb76d1450656d6b6aa828d7494a01c459813e26442b1bfc32f74bee2b4dfc21d23baa79fb7bc33a315f9005b", 0xef, 0xfffffffffffffff8) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={r2, 0x80000, r3}) 03:47:20 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000000036915fa2c1ec28656aaa79bb94b46fe0000000700020800208c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) 03:47:20 executing program 0 (fault-call:7 fault-nth:31): r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 3472.626066] FAT-fs (loop5): bogus number of reserved sectors [ 3472.650734] QAT: Invalid ioctl [ 3472.665543] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3472.672282] QAT: Invalid ioctl 03:47:20 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000000036915fa2c1ec28656aaa79bb94b46fe0000000700020800118c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) [ 3472.696343] QAT: Invalid ioctl [ 3472.700362] QAT: Invalid ioctl [ 3472.713240] QAT: Invalid ioctl [ 3472.729650] QAT: Invalid ioctl [ 3472.741079] QAT: Invalid ioctl [ 3472.754326] QAT: Invalid ioctl 03:47:20 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000000)="89", 0xfffffffffffffd8e, 0xfffffffffffffffd) [ 3472.780837] QAT: Invalid ioctl [ 3472.796998] QAT: Invalid ioctl [ 3472.801122] FAT-fs (loop5): bogus number of reserved sectors [ 3472.821577] FAT-fs (loop5): Can't find a valid FAT filesystem 03:47:20 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:47:20 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x4772cd7f, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:47:20 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3472.949796] FAULT_INJECTION: forcing a failure. [ 3472.949796] name failslab, interval 1, probability 0, space 0, times 0 [ 3472.979450] CPU: 0 PID: 30591 Comm: syz-executor0 Not tainted 4.19.0+ #319 [ 3472.986517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3472.995889] Call Trace: [ 3472.998518] dump_stack+0x244/0x39d [ 3473.002173] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3473.007386] ? debug_smp_processor_id+0x1c/0x20 [ 3473.012075] ? perf_trace_lock+0x14d/0x7a0 [ 3473.016336] should_fail.cold.4+0xa/0x17 [ 3473.020419] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3473.025537] ? ksys_ioctl+0xa9/0xd0 [ 3473.029180] ? __x64_sys_ioctl+0x73/0xb0 [ 3473.033261] ? do_syscall_64+0x1b9/0x820 [ 3473.037343] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3473.042725] ? do_raw_spin_unlock+0xa7/0x330 [ 3473.047174] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3473.051773] ? zap_class+0x640/0x640 [ 3473.055516] ? mark_held_locks+0xc7/0x130 [ 3473.059686] ? find_held_lock+0x36/0x1c0 [ 3473.063777] ? __lock_is_held+0xb5/0x140 [ 3473.067872] ? perf_trace_sched_process_exec+0x860/0x860 [ 3473.073369] ? blkcg_activate_policy+0x3db/0x580 [ 3473.078144] __should_failslab+0x124/0x180 [ 3473.082403] should_failslab+0x9/0x14 [ 3473.086230] kmem_cache_alloc_trace+0x2d7/0x750 [ 3473.090953] ? blk_throtl_init+0x3e7/0x630 [ 3473.095211] ? blk_throtl_drain+0x810/0x810 [ 3473.099555] ? blk_mq_can_queue+0x50/0x50 [ 3473.103720] ? plug_ctx_cmp+0x110/0x110 [ 3473.107708] blk_stat_alloc_callback+0x5b/0x280 [ 3473.112401] blk_mq_init_allocated_queue+0x12c/0x1680 [ 3473.117612] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3473.123170] ? blk_alloc_queue_node+0x988/0xe80 [ 3473.127863] ? blk_mq_map_swqueue+0xa50/0xa50 [ 3473.132393] ? __mutex_init+0x1f7/0x290 [ 3473.136439] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3473.141997] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 3473.146792] ? blk_mq_update_nr_hw_queues+0xf00/0xf00 [ 3473.152011] blk_mq_init_queue+0x63/0xb0 [ 3473.156096] loop_add+0x376/0xa40 [ 3473.159566] ? loop_queue_rq+0x690/0x690 [ 3473.163685] loop_control_ioctl+0x199/0x530 [ 3473.168028] ? loop_add+0xa40/0xa40 [ 3473.171685] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 3473.176635] ? loop_add+0xa40/0xa40 [ 3473.180281] do_vfs_ioctl+0x1de/0x1790 [ 3473.184194] ? ioctl_preallocate+0x300/0x300 [ 3473.188621] ? __fget_light+0x2e9/0x430 [ 3473.192610] ? fget_raw+0x20/0x20 [ 3473.196087] ? __sb_end_write+0xd9/0x110 [ 3473.200178] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3473.205728] ? fput+0x130/0x1a0 [ 3473.209028] ? do_syscall_64+0x9a/0x820 [ 3473.213016] ? do_syscall_64+0x9a/0x820 [ 3473.217011] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3473.221641] ? security_file_ioctl+0x94/0xc0 [ 3473.226068] ksys_ioctl+0xa9/0xd0 [ 3473.229569] __x64_sys_ioctl+0x73/0xb0 [ 3473.233476] do_syscall_64+0x1b9/0x820 [ 3473.237391] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3473.242775] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3473.247717] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3473.252595] ? trace_hardirqs_on_caller+0x310/0x310 [ 3473.257636] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3473.262670] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3473.267715] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3473.272588] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3473.277790] RIP: 0033:0x457569 [ 3473.281004] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:47:21 executing program 4: add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000100)="6ca350d53a1900", 0x7, 0xfffffffffffffffd) 03:47:21 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x40000000000000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) [ 3473.299952] RSP: 002b:00007f1259a65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3473.307687] RAX: ffffffffffffffda RBX: 00007f1259a65c90 RCX: 0000000000457569 [ 3473.314967] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 3473.322250] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3473.329534] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1259a666d4 [ 3473.337187] R13: 00000000004c0606 R14: 00000000004d0a30 R15: 0000000000000006 03:47:21 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000000036915fa2c1ec28656aaa79bb94b46fe0000000700020806008c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) 03:47:21 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0000, 0x3000000, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:47:21 executing program 0 (fault-call:7 fault-nth:32): r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:47:21 executing program 4: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@ax25, &(0x7f0000000080)=0x80, 0x80800) fsetxattr(r0, &(0x7f00000000c0)=@random={'security.', '*\x00'}, &(0x7f0000000140)='user\x00', 0x5, 0x3) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) getsockopt$llc_int(r0, 0x10c, 0xb, &(0x7f0000000280), &(0x7f0000000340)) 03:47:21 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000000036915fa2c1ec28656aaa79bb94b46fe000000070002086c008c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) [ 3473.593536] FAT-fs (loop5): bogus number of reserved sectors [ 3473.623361] FAT-fs (loop5): Can't find a valid FAT filesystem 03:47:21 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2fbc512, 0x80000) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000080)={r1}) 03:47:21 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3473.708853] FAULT_INJECTION: forcing a failure. [ 3473.708853] name failslab, interval 1, probability 0, space 0, times 0 [ 3473.721861] CPU: 0 PID: 30622 Comm: syz-executor0 Not tainted 4.19.0+ #319 [ 3473.728933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3473.738297] Call Trace: [ 3473.740931] dump_stack+0x244/0x39d [ 3473.745556] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3473.750772] ? debug_smp_processor_id+0x1c/0x20 [ 3473.755461] ? perf_trace_lock+0x14d/0x7a0 [ 3473.759722] should_fail.cold.4+0xa/0x17 [ 3473.763803] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3473.768941] ? __lock_is_held+0xb5/0x140 [ 3473.773033] ? zap_class+0x640/0x640 [ 3473.776769] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3473.782324] ? pcpu_alloc+0x190/0x15e0 [ 3473.786233] ? find_held_lock+0x36/0x1c0 [ 3473.790318] ? __lock_is_held+0xb5/0x140 [ 3473.794411] ? __lockdep_init_map+0x105/0x590 [ 3473.798946] ? perf_trace_sched_process_exec+0x860/0x860 [ 3473.804429] ? kobject_init+0x23d/0x2f0 [ 3473.808460] __should_failslab+0x124/0x180 [ 3473.812720] should_failslab+0x9/0x14 [ 3473.816540] kmem_cache_alloc_node_trace+0x270/0x740 [ 3473.821671] ? find_next_bit+0x104/0x130 [ 3473.825762] __kmalloc_node+0x3c/0x70 [ 3473.829595] blk_mq_init_allocated_queue+0x227/0x1680 [ 3473.834803] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3473.840358] ? blk_alloc_queue_node+0x988/0xe80 [ 3473.845052] ? blk_mq_map_swqueue+0xa50/0xa50 [ 3473.849566] ? __mutex_init+0x1f7/0x290 [ 3473.853583] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3473.859139] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 3473.863945] ? blk_mq_update_nr_hw_queues+0xf00/0xf00 [ 3473.869164] blk_mq_init_queue+0x63/0xb0 [ 3473.873243] loop_add+0x376/0xa40 [ 3473.876718] ? loop_queue_rq+0x690/0x690 [ 3473.880810] loop_control_ioctl+0x199/0x530 [ 3473.885145] ? loop_add+0xa40/0xa40 [ 3473.888800] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 3473.893753] ? loop_add+0xa40/0xa40 [ 3473.897422] do_vfs_ioctl+0x1de/0x1790 [ 3473.901346] ? ioctl_preallocate+0x300/0x300 [ 3473.905774] ? __fget_light+0x2e9/0x430 [ 3473.909768] ? fget_raw+0x20/0x20 [ 3473.913243] ? __sb_end_write+0xd9/0x110 [ 3473.917327] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3473.922880] ? fput+0x130/0x1a0 [ 3473.926191] ? do_syscall_64+0x9a/0x820 [ 3473.930190] ? do_syscall_64+0x9a/0x820 [ 3473.934184] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3473.938796] ? security_file_ioctl+0x94/0xc0 [ 3473.943230] ksys_ioctl+0xa9/0xd0 [ 3473.946707] __x64_sys_ioctl+0x73/0xb0 [ 3473.950613] do_syscall_64+0x1b9/0x820 [ 3473.954516] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3473.959940] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3473.964908] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3473.969776] ? trace_hardirqs_on_caller+0x310/0x310 [ 3473.974811] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3473.979847] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3473.984890] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3473.989781] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3473.994986] RIP: 0033:0x457569 [ 3473.998197] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3474.017146] RSP: 002b:00007f1259a65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3474.024872] RAX: ffffffffffffffda RBX: 00007f1259a65c90 RCX: 0000000000457569 [ 3474.032165] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 3474.039447] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3474.046723] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1259a666d4 [ 3474.054002] R13: 00000000004c0606 R14: 00000000004d0a30 R15: 0000000000000006 03:47:22 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3474.090648] FAT-fs (loop5): bogus number of reserved sectors [ 3474.103384] FAT-fs (loop5): Can't find a valid FAT filesystem 03:47:22 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xb08e0000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:47:22 executing program 0 (fault-call:7 fault-nth:33): r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:47:22 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) socket$inet_smc(0x2b, 0x1, 0x0) 03:47:22 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xffffff7f00000000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:47:22 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000000036915fa2c1ec28656aaa79bb94b46fe0000000700020800048c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) 03:47:22 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0000, 0x4002, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:47:22 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) 03:47:22 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000000036915fa2c1ec28656aaa79bb94b46fe00000007000208006c8c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) [ 3474.459068] FAULT_INJECTION: forcing a failure. [ 3474.459068] name failslab, interval 1, probability 0, space 0, times 0 03:47:22 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000000036915fa2c1ec28656aaa79bb94b46fe00000007000208000f8c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) [ 3474.518985] CPU: 1 PID: 30644 Comm: syz-executor0 Not tainted 4.19.0+ #319 [ 3474.526053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3474.535430] Call Trace: [ 3474.538044] dump_stack+0x244/0x39d [ 3474.541706] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3474.546952] ? lock_downgrade+0x900/0x900 [ 3474.551131] should_fail.cold.4+0xa/0x17 [ 3474.555218] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3474.560343] ? rcu_softirq_qs+0x20/0x20 [ 3474.564335] ? unwind_dump+0x190/0x190 03:47:22 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3474.568260] ? is_bpf_text_address+0xd3/0x170 [ 3474.572773] ? zap_class+0x640/0x640 [ 3474.576511] ? __kernel_text_address+0xd/0x40 [ 3474.581023] ? unwind_get_return_address+0x61/0xa0 [ 3474.585970] ? __save_stack_trace+0x8d/0xf0 [ 3474.590319] ? __lock_is_held+0xb5/0x140 [ 3474.594430] ? kasan_kmalloc+0xc7/0xe0 [ 3474.598342] ? loop_add+0x376/0xa40 [ 3474.602005] ? perf_trace_sched_process_exec+0x860/0x860 [ 3474.607478] ? __x64_sys_ioctl+0x73/0xb0 [ 3474.611563] ? do_syscall_64+0x1b9/0x820 [ 3474.615649] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3474.621037] ? zap_class+0x640/0x640 [ 3474.624791] __should_failslab+0x124/0x180 [ 3474.629053] should_failslab+0x9/0x14 [ 3474.632879] kmem_cache_alloc_node_trace+0x270/0x740 [ 3474.638007] ? __lock_is_held+0xb5/0x140 [ 3474.642100] blk_alloc_flush_queue+0x120/0x460 [ 3474.646704] ? __kmalloc_node+0x3c/0x70 [ 3474.650699] ? blk_insert_flush+0xb00/0xb00 [ 3474.655044] ? kasan_unpoison_shadow+0x35/0x50 [ 3474.659647] ? kasan_kmalloc+0xc7/0xe0 [ 3474.663559] ? __lockdep_init_map+0x105/0x590 [ 3474.668090] blk_mq_realloc_hw_ctxs+0x8c2/0x12a0 [ 3474.672887] ? blk_mq_free_map_and_requests+0x160/0x160 [ 3474.678282] ? __lock_is_held+0xb5/0x140 [ 3474.682379] ? __kmalloc_node+0x3c/0x70 [ 3474.686380] ? __kmalloc_node+0x3c/0x70 [ 3474.690383] ? rcu_read_lock_sched_held+0x14f/0x180 [ 3474.695431] ? kmem_cache_alloc_node_trace+0x34b/0x740 [ 3474.700733] ? kasan_unpoison_shadow+0x35/0x50 [ 3474.705338] ? kasan_kmalloc+0xc7/0xe0 [ 3474.709262] blk_mq_init_allocated_queue+0x2bb/0x1680 [ 3474.714479] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3474.720056] ? blk_alloc_queue_node+0x988/0xe80 [ 3474.724758] ? blk_mq_map_swqueue+0xa50/0xa50 [ 3474.729281] ? __mutex_init+0x1f7/0x290 [ 3474.733306] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3474.738863] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 3474.743680] ? blk_mq_update_nr_hw_queues+0xf00/0xf00 [ 3474.748908] blk_mq_init_queue+0x63/0xb0 [ 3474.752990] loop_add+0x376/0xa40 [ 3474.756466] ? loop_queue_rq+0x690/0x690 [ 3474.760558] loop_control_ioctl+0x199/0x530 [ 3474.764900] ? loop_add+0xa40/0xa40 [ 3474.768557] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 3474.773508] ? loop_add+0xa40/0xa40 [ 3474.777164] do_vfs_ioctl+0x1de/0x1790 [ 3474.781088] ? ioctl_preallocate+0x300/0x300 [ 3474.785521] ? __fget_light+0x2e9/0x430 [ 3474.789515] ? fget_raw+0x20/0x20 [ 3474.792996] ? __sb_end_write+0xd9/0x110 [ 3474.797089] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3474.802643] ? fput+0x130/0x1a0 [ 3474.805952] ? do_syscall_64+0x9a/0x820 [ 3474.809945] ? do_syscall_64+0x9a/0x820 [ 3474.813942] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3474.818547] ? security_file_ioctl+0x94/0xc0 [ 3474.822984] ksys_ioctl+0xa9/0xd0 [ 3474.826462] __x64_sys_ioctl+0x73/0xb0 [ 3474.830371] do_syscall_64+0x1b9/0x820 [ 3474.834288] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3474.839679] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3474.844632] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3474.849497] ? trace_hardirqs_on_caller+0x310/0x310 [ 3474.854581] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3474.859622] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3474.864665] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3474.869560] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3474.874766] RIP: 0033:0x457569 [ 3474.877988] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3474.896904] RSP: 002b:00007f1259a65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3474.904629] RAX: ffffffffffffffda RBX: 00007f1259a65c90 RCX: 0000000000457569 [ 3474.911908] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 3474.919190] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3474.926469] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1259a666d4 [ 3474.933751] R13: 00000000004c0606 R14: 00000000004d0a30 R15: 0000000000000006 [ 3474.947320] FAT-fs (loop5): bogus number of reserved sectors [ 3474.953246] FAT-fs (loop5): Can't find a valid FAT filesystem 03:47:22 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:47:22 executing program 4: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x2) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000240)={0x8, 0x1, 0x1, 0x2}) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000002c0)=0x100000000, 0x4) r1 = dup(0xffffffffffffffff) syz_emit_ethernet(0xb6, &(0x7f0000000140)={@empty, @random="3f2558edc247", [], {@mpls_mc={0x8848, {[{0x61, 0x2, 0x1000, 0xafc7}], @llc={@llc={0x4e, 0xdc, "b552", "0cb1ef21d5036d908784fffae3c6c5dde850ccf64dbaa3ef111935cb63f0b99f52cc146650e0bac42267f61ee1938e1143e751c19ecb74dcbca4f5a46539e467106504da92f6a82dfc79d7618c07ae13556556b4f2b98c67de40fa63c4b399d55234c2a8d6eb7be72903102b7dcaaef105b79df64bd767ea7e69a230f9ab2978a0fd4c296e4239aa4a45a3efec6f12c9afe08c16b84bee7c43c906b11ce87825"}}}}}}, &(0x7f0000000000)={0x0, 0x3, [0xa30, 0x940, 0x9ac, 0x416]}) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000080)={0x6, 0x1, @stop_pts=0x2cb}) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000280)=0x56) [ 3475.018442] FAT-fs (loop5): bogus number of reserved sectors [ 3475.024426] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3475.072834] __nla_parse: 11 callbacks suppressed [ 3475.072845] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:47:23 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x6c000000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:47:23 executing program 0 (fault-call:7 fault-nth:34): r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:47:23 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:47:23 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff000a, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:47:23 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000140)={0x2, {{0xa, 0x4e23, 0x1, @mcast2}}}, 0x88) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2000, 0x0) write$P9_RCREATE(r1, &(0x7f0000000040)={0x18, 0x73, 0x2, {{0x80, 0x0, 0x8}, 0x5}}, 0x18) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000240)={0x9, 0x0, [{0x40000bfa, 0x0, 0xff}, {0xfff, 0x0, 0x8}, {0x817}, {0xbfd, 0x0, 0xfffffffffffff9e0}, {0x3b2, 0x0, 0x2}, {0xaf7, 0x0, 0x7fffffff}, {0x9d7, 0x0, 0xffffffffffffffc1}, {0xb7f, 0x0, 0x1}, {0x9b9, 0x0, 0x1}]}) [ 3475.279184] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3475.317276] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:47:23 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0000, 0x507a000000000000, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:47:23 executing program 4: accept4(0xffffffffffffff9c, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000080)=0x80, 0x80000) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x4e23, @rand_addr=0x1ff}, 0x10) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) [ 3475.378803] FAULT_INJECTION: forcing a failure. [ 3475.378803] name failslab, interval 1, probability 0, space 0, times 0 [ 3475.396222] CPU: 0 PID: 30682 Comm: syz-executor0 Not tainted 4.19.0+ #319 [ 3475.403276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3475.413145] Call Trace: [ 3475.415757] dump_stack+0x244/0x39d [ 3475.419423] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3475.424646] ? lock_downgrade+0x900/0x900 [ 3475.428830] should_fail.cold.4+0xa/0x17 [ 3475.432949] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3475.438069] ? rcu_softirq_qs+0x20/0x20 [ 3475.442059] ? unwind_dump+0x190/0x190 [ 3475.445978] ? is_bpf_text_address+0xd3/0x170 [ 3475.450493] ? zap_class+0x640/0x640 [ 3475.454228] ? __kernel_text_address+0xd/0x40 [ 3475.458740] ? unwind_get_return_address+0x61/0xa0 [ 3475.463691] ? __save_stack_trace+0x8d/0xf0 [ 3475.468066] ? __lock_is_held+0xb5/0x140 [ 3475.472158] ? kasan_kmalloc+0xc7/0xe0 [ 3475.476066] ? loop_add+0x376/0xa40 [ 3475.479710] ? perf_trace_sched_process_exec+0x860/0x860 [ 3475.485174] ? __x64_sys_ioctl+0x73/0xb0 [ 3475.489257] ? do_syscall_64+0x1b9/0x820 [ 3475.493338] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3475.498721] ? zap_class+0x640/0x640 [ 3475.502462] __should_failslab+0x124/0x180 [ 3475.506720] should_failslab+0x9/0x14 [ 3475.510545] kmem_cache_alloc_node_trace+0x270/0x740 [ 3475.515971] ? __lock_is_held+0xb5/0x140 [ 3475.520069] blk_alloc_flush_queue+0x120/0x460 [ 3475.524690] ? __kmalloc_node+0x3c/0x70 [ 3475.528684] ? blk_insert_flush+0xb00/0xb00 [ 3475.533024] ? kasan_unpoison_shadow+0x35/0x50 [ 3475.537626] ? kasan_kmalloc+0xc7/0xe0 [ 3475.541540] ? __lockdep_init_map+0x105/0x590 [ 3475.546060] blk_mq_realloc_hw_ctxs+0x8c2/0x12a0 [ 3475.550860] ? blk_mq_free_map_and_requests+0x160/0x160 [ 3475.556252] ? __lock_is_held+0xb5/0x140 [ 3475.560337] ? __kmalloc_node+0x3c/0x70 [ 3475.564326] ? __kmalloc_node+0x3c/0x70 [ 3475.568317] ? rcu_read_lock_sched_held+0x14f/0x180 [ 3475.573642] ? kmem_cache_alloc_node_trace+0x34b/0x740 [ 3475.578952] ? kasan_unpoison_shadow+0x35/0x50 [ 3475.583553] ? kasan_kmalloc+0xc7/0xe0 [ 3475.587468] blk_mq_init_allocated_queue+0x2bb/0x1680 [ 3475.592675] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3475.598232] ? blk_alloc_queue_node+0x988/0xe80 [ 3475.602939] ? blk_mq_map_swqueue+0xa50/0xa50 [ 3475.607476] ? __mutex_init+0x1f7/0x290 [ 3475.611513] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3475.617078] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 3475.621870] ? blk_mq_update_nr_hw_queues+0xf00/0xf00 [ 3475.627100] blk_mq_init_queue+0x63/0xb0 [ 3475.631181] loop_add+0x376/0xa40 [ 3475.634650] ? loop_queue_rq+0x690/0x690 [ 3475.638737] loop_control_ioctl+0x199/0x530 [ 3475.643854] ? loop_add+0xa40/0xa40 [ 3475.647509] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 3475.652463] ? loop_add+0xa40/0xa40 [ 3475.656104] do_vfs_ioctl+0x1de/0x1790 [ 3475.660017] ? ioctl_preallocate+0x300/0x300 [ 3475.664444] ? __fget_light+0x2e9/0x430 [ 3475.668436] ? fget_raw+0x20/0x20 [ 3475.671927] ? __sb_end_write+0xd9/0x110 [ 3475.676011] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3475.681560] ? fput+0x130/0x1a0 [ 3475.684868] ? do_syscall_64+0x9a/0x820 [ 3475.689615] ? do_syscall_64+0x9a/0x820 [ 3475.693632] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3475.698231] ? security_file_ioctl+0x94/0xc0 [ 3475.702659] ksys_ioctl+0xa9/0xd0 [ 3475.706135] __x64_sys_ioctl+0x73/0xb0 [ 3475.710046] do_syscall_64+0x1b9/0x820 [ 3475.713978] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3475.719370] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3475.724316] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3475.729199] ? trace_hardirqs_on_caller+0x310/0x310 [ 3475.734233] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3475.739270] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3475.744306] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3475.749178] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3475.754386] RIP: 0033:0x457569 [ 3475.757592] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:47:23 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3475.776502] RSP: 002b:00007f1259a65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3475.784236] RAX: ffffffffffffffda RBX: 00007f1259a65c90 RCX: 0000000000457569 [ 3475.791515] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 3475.798825] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3475.806103] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1259a666d4 [ 3475.813380] R13: 00000000004c0606 R14: 00000000004d0a30 R15: 0000000000000006 [ 3475.851582] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3475.856539] FAT-fs (loop5): bogus number of reserved sectors [ 3475.873400] FAT-fs (loop5): Can't find a valid FAT filesystem 03:47:23 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400, 0x0) r1 = getegid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000240)=0x0) getpgrp(r2) r3 = semget(0x0, 0x4, 0x459) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f00000002c0)=""/152) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000280)) mount$9p_xen(&(0x7f0000000080)='GPL^\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x1850400, &(0x7f0000000180)={'trans=xen,', {[{@dfltgid={'dfltgid', 0x3d, r1}}], [{@smackfsroot={'smackfsroot', 0x3d, '/dev/vga_arbiter\x00'}}, {@measure='measure'}]}}) r4 = getpid() write$FUSE_LK(r0, &(0x7f0000000040)={0x28, 0x0, 0x6, {{0x9, 0x1000, 0x0, r4}}}, 0x28) 03:47:23 executing program 0 (fault-call:7 fault-nth:35): r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:47:23 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3475.988048] FAT-fs (loop5): bogus number of reserved sectors [ 3476.005779] FAT-fs (loop5): Can't find a valid FAT filesystem 03:47:24 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000040)=0x2) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x400000, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x3f, &(0x7f00000000c0)=""/4096, &(0x7f00000010c0)=0x1000) [ 3476.043578] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:47:24 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x5104, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:47:24 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000000036915fa2c1ec28656aaa79bb94b46fe00000007000208007a8c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) 03:47:24 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbffff0f, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:47:24 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3476.141959] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3476.176228] FAULT_INJECTION: forcing a failure. [ 3476.176228] name failslab, interval 1, probability 0, space 0, times 0 [ 3476.217158] CPU: 0 PID: 30703 Comm: syz-executor0 Not tainted 4.19.0+ #319 [ 3476.224224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3476.233589] Call Trace: [ 3476.236206] dump_stack+0x244/0x39d [ 3476.239860] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3476.245083] ? debug_smp_processor_id+0x1c/0x20 [ 3476.249775] ? perf_trace_lock+0x14d/0x7a0 [ 3476.254056] should_fail.cold.4+0xa/0x17 [ 3476.258145] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3476.263286] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3476.268841] ? check_preemption_disabled+0x48/0x280 [ 3476.273879] ? zap_class+0x640/0x640 [ 3476.277627] ? debug_smp_processor_id+0x1c/0x20 [ 3476.282322] ? perf_trace_lock+0x14d/0x7a0 [ 3476.286586] ? find_held_lock+0x36/0x1c0 [ 3476.290668] ? __lock_is_held+0xb5/0x140 [ 3476.294764] ? perf_trace_sched_process_exec+0x860/0x860 [ 3476.300229] ? zap_class+0x640/0x640 [ 3476.304008] __should_failslab+0x124/0x180 [ 3476.308269] should_failslab+0x9/0x14 [ 3476.312086] kmem_cache_alloc_node_trace+0x270/0x740 [ 3476.317308] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3476.322868] ? find_next_bit+0x104/0x130 [ 3476.326968] blk_mq_init_tags+0x79/0x2b0 [ 3476.331051] blk_mq_alloc_rq_map+0x9f/0x220 [ 3476.335420] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3476.341280] blk_mq_init_sched+0x21d/0x770 [ 3476.345544] elevator_init_mq+0xd7/0x160 [ 3476.349628] blk_mq_init_allocated_queue+0x1074/0x1680 [ 3476.354949] ? blk_mq_map_swqueue+0xa50/0xa50 [ 3476.359462] ? __mutex_init+0x1f7/0x290 [ 3476.363481] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3476.369032] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 3476.373821] ? blk_mq_update_nr_hw_queues+0xf00/0xf00 [ 3476.379046] blk_mq_init_queue+0x63/0xb0 [ 3476.383123] loop_add+0x376/0xa40 [ 3476.386594] ? loop_queue_rq+0x690/0x690 [ 3476.390692] loop_control_ioctl+0x199/0x530 [ 3476.395027] ? loop_add+0xa40/0xa40 [ 3476.398678] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 3476.403628] ? loop_add+0xa40/0xa40 [ 3476.407275] do_vfs_ioctl+0x1de/0x1790 [ 3476.411183] ? ioctl_preallocate+0x300/0x300 [ 3476.415645] ? __fget_light+0x2e9/0x430 [ 3476.419638] ? fget_raw+0x20/0x20 [ 3476.423129] ? __sb_end_write+0xd9/0x110 [ 3476.427213] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3476.432765] ? fput+0x130/0x1a0 [ 3476.436059] ? do_syscall_64+0x9a/0x820 [ 3476.440047] ? do_syscall_64+0x9a/0x820 [ 3476.444040] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3476.448642] ? security_file_ioctl+0x94/0xc0 [ 3476.453073] ksys_ioctl+0xa9/0xd0 [ 3476.456548] __x64_sys_ioctl+0x73/0xb0 [ 3476.460455] do_syscall_64+0x1b9/0x820 [ 3476.464360] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3476.469745] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3476.474690] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3476.479561] ? trace_hardirqs_on_caller+0x310/0x310 [ 3476.484594] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3476.489632] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3476.494919] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3476.499804] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3476.505007] RIP: 0033:0x457569 [ 3476.508216] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3476.527132] RSP: 002b:00007f1259a65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3476.534864] RAX: ffffffffffffffda RBX: 00007f1259a65c90 RCX: 0000000000457569 [ 3476.542150] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 3476.549426] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3476.556717] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1259a666d4 03:47:24 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x0}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) [ 3476.563992] R13: 00000000004c0606 R14: 00000000004d0a30 R15: 0000000000000006 [ 3476.586977] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:47:24 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0000, 0x700000000000000, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:47:24 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000000036915fa2c1ec28656aaa79bb94b46fe0000000700020800058c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) 03:47:24 executing program 0 (fault-call:7 fault-nth:36): r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:47:24 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x20000, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) [ 3476.744452] FAT-fs (loop5): bogus number of reserved sectors [ 3476.755426] FAT-fs (loop5): Can't find a valid FAT filesystem 03:47:24 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000000036915fa2c1ec28656aaa79bb94b46fe00000007000208004c8c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) [ 3476.814979] FAT-fs (loop5): bogus number of reserved sectors [ 3476.824021] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3476.830693] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:47:24 executing program 4: socketpair(0x1d, 0x2, 0x5, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) [ 3476.920295] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:47:24 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000000036915fa2c1ec28656aaa79bb94b46fe0000000700020800688c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) [ 3476.990507] FAULT_INJECTION: forcing a failure. [ 3476.990507] name failslab, interval 1, probability 0, space 0, times 0 [ 3477.035442] CPU: 1 PID: 30732 Comm: syz-executor0 Not tainted 4.19.0+ #319 [ 3477.042543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3477.051916] Call Trace: [ 3477.054532] dump_stack+0x244/0x39d [ 3477.058196] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3477.063422] ? rcu_softirq_qs+0x20/0x20 [ 3477.063876] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3477.067436] should_fail.cold.4+0xa/0x17 [ 3477.067462] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3477.067481] ? kernel_text_address+0x79/0xf0 [ 3477.067499] ? __kernel_text_address+0xd/0x40 [ 3477.067522] ? __save_stack_trace+0x8d/0xf0 [ 3477.067545] ? zap_class+0x640/0x640 [ 3477.102223] ? save_stack+0xa9/0xd0 [ 3477.105875] ? __lock_is_held+0xb5/0x140 [ 3477.109950] ? loop_add+0x376/0xa40 [ 3477.113612] ? perf_trace_sched_process_exec+0x860/0x860 [ 3477.119100] __should_failslab+0x124/0x180 [ 3477.123454] should_failslab+0x9/0x14 [ 3477.127274] kmem_cache_alloc_node_trace+0x270/0x740 [ 3477.132391] ? __kmalloc_node+0x3c/0x70 [ 3477.136388] ? __kmalloc_node+0x3c/0x70 [ 3477.140388] ? rcu_read_lock_sched_held+0x14f/0x180 [ 3477.145444] __kmalloc_node+0x3c/0x70 [ 3477.149267] sbitmap_init_node+0x288/0x440 [ 3477.153529] blk_mq_realloc_hw_ctxs+0x6a5/0x12a0 [ 3477.158322] ? blk_mq_free_map_and_requests+0x160/0x160 [ 3477.163713] ? __lock_is_held+0xb5/0x140 [ 3477.167804] ? __kmalloc_node+0x3c/0x70 [ 3477.171798] ? __kmalloc_node+0x3c/0x70 [ 3477.175796] ? rcu_read_lock_sched_held+0x14f/0x180 [ 3477.180833] ? kmem_cache_alloc_node_trace+0x34b/0x740 [ 3477.186134] ? kasan_unpoison_shadow+0x35/0x50 [ 3477.190748] ? kasan_kmalloc+0xc7/0xe0 [ 3477.194667] blk_mq_init_allocated_queue+0x2bb/0x1680 [ 3477.199880] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3477.205444] ? blk_alloc_queue_node+0x988/0xe80 [ 3477.210143] ? blk_mq_map_swqueue+0xa50/0xa50 [ 3477.214655] ? __mutex_init+0x1f7/0x290 [ 3477.218677] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3477.224240] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 3477.229033] ? blk_mq_update_nr_hw_queues+0xf00/0xf00 [ 3477.234250] blk_mq_init_queue+0x63/0xb0 [ 3477.238328] loop_add+0x376/0xa40 [ 3477.241804] ? loop_queue_rq+0x690/0x690 [ 3477.245900] loop_control_ioctl+0x199/0x530 [ 3477.250242] ? loop_add+0xa40/0xa40 [ 3477.253904] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 3477.258860] ? loop_add+0xa40/0xa40 [ 3477.262511] do_vfs_ioctl+0x1de/0x1790 [ 3477.266435] ? ioctl_preallocate+0x300/0x300 [ 3477.270867] ? __fget_light+0x2e9/0x430 [ 3477.274870] ? fget_raw+0x20/0x20 [ 3477.278349] ? __sb_end_write+0xd9/0x110 [ 3477.282444] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3477.287998] ? fput+0x130/0x1a0 [ 3477.291296] ? do_syscall_64+0x9a/0x820 [ 3477.295286] ? do_syscall_64+0x9a/0x820 [ 3477.299319] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3477.303921] ? security_file_ioctl+0x94/0xc0 [ 3477.308356] ksys_ioctl+0xa9/0xd0 [ 3477.311834] __x64_sys_ioctl+0x73/0xb0 [ 3477.315743] do_syscall_64+0x1b9/0x820 [ 3477.319655] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3477.325046] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3477.329991] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3477.334854] ? trace_hardirqs_on_caller+0x310/0x310 [ 3477.339889] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3477.344924] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3477.349968] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3477.354842] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3477.360047] RIP: 0033:0x457569 [ 3477.363436] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:47:25 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x2f04, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:47:25 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3477.382356] RSP: 002b:00007f1259a65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3477.390079] RAX: ffffffffffffffda RBX: 00007f1259a65c90 RCX: 0000000000457569 [ 3477.397359] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 3477.404663] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3477.412147] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1259a666d4 [ 3477.419440] R13: 00000000004c0606 R14: 00000000004d0a30 R15: 0000000000000006 [ 3477.482584] can: request_module (can-proto-5) failed. 03:47:25 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0c00, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:47:25 executing program 0 (fault-call:7 fault-nth:37): r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:47:25 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0000, 0x91ffffff00000000, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:47:25 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3477.534210] can: request_module (can-proto-5) failed. 03:47:25 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000040)="5a032d6d00d1219fe3656bf0fc5fad000000000020009ee19dbd2547a3a5056f3bf59db564e528a200800000c2dd36dcad7b112522712a8cb74ffb62d2adeff04f2907718e94d381d8f2b05ac26a9d252fc0a64ef8cc4e73333ffc2841d3615e2fc28511642152c6c94f72b5055ada885d19e87db6ddc70c57d18554b530644a86ee74e0d5b27712e4339d921ec775937997bc9a38a5f6b5336444c071770637", 0xfffffffffffffe7d, 0xfffffffffffffffd) r0 = getpid() getpgid(r0) [ 3477.565237] FAT-fs (loop5): bogus number of reserved sectors [ 3477.595490] FAT-fs (loop5): Can't find a valid FAT filesystem 03:47:25 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3477.713296] FAULT_INJECTION: forcing a failure. [ 3477.713296] name failslab, interval 1, probability 0, space 0, times 0 03:47:25 executing program 4: syz_mount_image$ext4(&(0x7f0000000340)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x4, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000240)="182ea92ce703fb9cdee74c7bc425816a4d7a72975c6efbf3763ebbe9e1f75519f7c797eb6a9a14f28b39c2c7f8fc3d1712556874db68b014b1ebcb8a30d06325d058689bddf963b2b58afb830b11d977ec46a9048a1420da558e2e3fd21ffe2080ee163e37d5f64ae1639ff4fbeeab86292dd76aade2ccacae23ea7c10d8827aab1ea2d9ddcf06004b2ef0703671aef3ba4a50a5872fd8ade517d224e6606bce9cf8fcdcf0dea7a1c2e7ee362f7b139dd50ca0aa93076487ce00a23ac976d3950b3b670c88", 0x98}, {&(0x7f0000000080), 0x0, 0x1000}], 0x80402, &(0x7f00000003c0)=ANY=[@ANYBLOB="6e6f6d626c6b5f696f5f73756f7264657265642c626c6f636b5f76616c69646974796d646f6e745f61707072616973652c6f626a5f757365723d75736572002c646f616973652c00a2c4553c630272316a7b1e99e82b62425df5c508c6e2230fb8524856c31e4a6a8e60e010c4b47d88eae614408f41b42fa3bb8dde90f84fe4cf68c662caa9a1023a9c"]) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3ff, 0x14000) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000380)=0x10000001d) r1 = eventfd2(0x6, 0x80000) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x6000, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000001c0)={0x9, 0x1f, 0x1, 0x0, 0x0, [{r2, 0x0, 0x10001}]}) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) [ 3477.773547] CPU: 0 PID: 30760 Comm: syz-executor0 Not tainted 4.19.0+ #319 [ 3477.780612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3477.789974] Call Trace: [ 3477.792584] dump_stack+0x244/0x39d [ 3477.796238] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3477.801449] ? debug_smp_processor_id+0x1c/0x20 [ 3477.806139] ? perf_trace_lock+0x14d/0x7a0 [ 3477.810404] should_fail.cold.4+0xa/0x17 [ 3477.814488] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3477.819631] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3477.825196] ? check_preemption_disabled+0x48/0x280 [ 3477.830239] ? zap_class+0x640/0x640 [ 3477.833982] ? debug_smp_processor_id+0x1c/0x20 [ 3477.838670] ? perf_trace_lock+0x14d/0x7a0 [ 3477.842945] ? find_held_lock+0x36/0x1c0 [ 3477.847031] ? __lock_is_held+0xb5/0x140 [ 3477.851178] ? xfs_qm_vop_chown_reserve+0x108/0x760 [ 3477.856266] ? perf_trace_sched_process_exec+0x860/0x860 [ 3477.861737] ? zap_class+0x640/0x640 [ 3477.865481] __should_failslab+0x124/0x180 [ 3477.869740] should_failslab+0x9/0x14 [ 3477.873561] kmem_cache_alloc_node_trace+0x270/0x740 [ 3477.878685] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3477.884249] ? find_next_bit+0x104/0x130 [ 3477.888340] blk_mq_init_tags+0x79/0x2b0 [ 3477.892452] blk_mq_alloc_rq_map+0x9f/0x220 [ 3477.896794] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3477.902355] blk_mq_init_sched+0x21d/0x770 [ 3477.906627] elevator_init_mq+0xd7/0x160 [ 3477.910710] blk_mq_init_allocated_queue+0x1074/0x1680 [ 3477.916015] ? blk_mq_map_swqueue+0xa50/0xa50 [ 3477.920528] ? __mutex_init+0x1f7/0x290 [ 3477.924547] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3477.930104] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 3477.934896] ? blk_mq_update_nr_hw_queues+0xf00/0xf00 [ 3477.940134] blk_mq_init_queue+0x63/0xb0 [ 3477.944215] loop_add+0x376/0xa40 [ 3477.947687] ? loop_queue_rq+0x690/0x690 [ 3477.951776] loop_control_ioctl+0x199/0x530 [ 3477.956117] ? loop_add+0xa40/0xa40 [ 3477.959858] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 3477.964816] ? loop_add+0xa40/0xa40 [ 3477.968465] do_vfs_ioctl+0x1de/0x1790 [ 3477.972383] ? ioctl_preallocate+0x300/0x300 [ 3477.976810] ? __fget_light+0x2e9/0x430 [ 3477.980800] ? fget_raw+0x20/0x20 [ 3477.984279] ? __sb_end_write+0xd9/0x110 [ 3477.988362] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3477.993929] ? fput+0x130/0x1a0 [ 3477.997229] ? do_syscall_64+0x9a/0x820 [ 3478.001219] ? do_syscall_64+0x9a/0x820 [ 3478.005212] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3478.009815] ? security_file_ioctl+0x94/0xc0 [ 3478.014607] ksys_ioctl+0xa9/0xd0 [ 3478.018096] __x64_sys_ioctl+0x73/0xb0 [ 3478.022006] do_syscall_64+0x1b9/0x820 [ 3478.025927] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3478.031309] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3478.036269] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3478.041130] ? trace_hardirqs_on_caller+0x310/0x310 [ 3478.046168] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3478.051202] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3478.056244] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3478.061118] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3478.066320] RIP: 0033:0x457569 [ 3478.069530] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3478.088504] RSP: 002b:00007f1259a65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3478.096232] RAX: ffffffffffffffda RBX: 00007f1259a65c90 RCX: 0000000000457569 [ 3478.103514] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 3478.110800] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3478.118082] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1259a666d4 03:47:26 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:47:26 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3478.125377] R13: 00000000004c0606 R14: 00000000004d0a30 R15: 0000000000000006 03:47:26 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:47:26 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xfcfdffff, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:47:26 executing program 0 (fault-call:7 fault-nth:38): r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:47:26 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x23900000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:47:26 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000000036915fa2c1ec28656aaa79bb94b46fe00000007000208000b8c0000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) 03:47:26 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0000, 0x7000000, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) [ 3478.413785] FAULT_INJECTION: forcing a failure. [ 3478.413785] name failslab, interval 1, probability 0, space 0, times 0 [ 3478.442071] CPU: 0 PID: 30788 Comm: syz-executor0 Not tainted 4.19.0+ #319 [ 3478.449132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3478.458499] Call Trace: [ 3478.461119] dump_stack+0x244/0x39d [ 3478.464774] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3478.469992] ? debug_smp_processor_id+0x1c/0x20 [ 3478.474681] ? perf_trace_lock+0x14d/0x7a0 [ 3478.478948] should_fail.cold.4+0xa/0x17 [ 3478.483036] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3478.488172] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3478.493731] ? check_preemption_disabled+0x48/0x280 [ 3478.498763] ? zap_class+0x640/0x640 [ 3478.502548] ? debug_smp_processor_id+0x1c/0x20 [ 3478.507233] ? perf_trace_lock+0x14d/0x7a0 [ 3478.511493] ? find_held_lock+0x36/0x1c0 [ 3478.515577] ? __lock_is_held+0xb5/0x140 [ 3478.519670] ? perf_trace_sched_process_exec+0x860/0x860 [ 3478.525140] ? zap_class+0x640/0x640 [ 3478.528879] __should_failslab+0x124/0x180 [ 3478.533145] should_failslab+0x9/0x14 [ 3478.536966] kmem_cache_alloc_node_trace+0x270/0x740 [ 3478.542088] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3478.547645] ? find_next_bit+0x104/0x130 [ 3478.551733] blk_mq_init_tags+0x79/0x2b0 [ 3478.555816] blk_mq_alloc_rq_map+0x9f/0x220 [ 3478.560155] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3478.565711] blk_mq_init_sched+0x21d/0x770 [ 3478.569984] elevator_init_mq+0xd7/0x160 [ 3478.574064] blk_mq_init_allocated_queue+0x1074/0x1680 [ 3478.579371] ? blk_mq_map_swqueue+0xa50/0xa50 [ 3478.583889] ? __mutex_init+0x1f7/0x290 [ 3478.587921] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3478.593477] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 3478.598268] ? blk_mq_update_nr_hw_queues+0xf00/0xf00 [ 3478.603481] blk_mq_init_queue+0x63/0xb0 [ 3478.607562] loop_add+0x376/0xa40 [ 3478.611036] ? loop_queue_rq+0x690/0x690 [ 3478.615133] loop_control_ioctl+0x199/0x530 [ 3478.619475] ? loop_add+0xa40/0xa40 [ 3478.623126] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 3478.628079] ? loop_add+0xa40/0xa40 [ 3478.631725] do_vfs_ioctl+0x1de/0x1790 [ 3478.635636] ? ioctl_preallocate+0x300/0x300 [ 3478.640064] ? __fget_light+0x2e9/0x430 [ 3478.644087] ? fget_raw+0x20/0x20 [ 3478.647566] ? __sb_end_write+0xd9/0x110 [ 3478.651653] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3478.657205] ? fput+0x130/0x1a0 [ 3478.660505] ? do_syscall_64+0x9a/0x820 [ 3478.664494] ? do_syscall_64+0x9a/0x820 [ 3478.668490] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3478.673093] ? security_file_ioctl+0x94/0xc0 [ 3478.677552] ksys_ioctl+0xa9/0xd0 [ 3478.681033] __x64_sys_ioctl+0x73/0xb0 [ 3478.684955] do_syscall_64+0x1b9/0x820 [ 3478.688866] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3478.694262] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3478.699208] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3478.704070] ? trace_hardirqs_on_caller+0x310/0x310 [ 3478.709109] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3478.714144] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3478.719186] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3478.724061] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3478.729263] RIP: 0033:0x457569 [ 3478.732474] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3478.751410] RSP: 002b:00007f1259a65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 03:47:26 executing program 4: request_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='$wlan1\t--\'\x00', 0xfffffffffffffffe) add_key(&(0x7f00000001c0)='id_resolver\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000340)='cifs.idmap\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f00000003c0)='vboxnet1ppp1\x00', 0xfffffffffffffff8) r0 = add_key(&(0x7f0000000400)='.dead\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r0) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)="a609b0fd13abf6ee57f185ed2ffeff0110e73cfa3dcacb0d935cf68fb07c4961798eb7b40de9ccf5187e6e3171baf464e34d23947b99811b5652f43c1a81c931f67689607feeda90c6eaccb6955458d87e33a51f390500b258ab775921acee7a627085267fbf9285e7b4bd29929f1eff464197b2715df6328770665c66b5cf45cd335eae3634b81b69f9016600000000ee7b20bcbe0403f9366520c624be7332fb555aeb11e127da4ee0", 0xffffffffffffff58, r1) [ 3478.759151] RAX: ffffffffffffffda RBX: 00007f1259a65c90 RCX: 0000000000457569 [ 3478.766429] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 3478.773715] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3478.780997] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1259a666d4 [ 3478.788304] R13: 00000000004c0606 R14: 00000000004d0a30 R15: 0000000000000006 03:47:26 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3478.825146] FAT-fs (loop5): bogus number of reserved sectors [ 3478.830998] FAT-fs (loop5): Can't find a valid FAT filesystem 03:47:26 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x6, 0x20400) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x7e5, 0x20, 0x587d, 0x3f}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r1, 0x7}, &(0x7f0000000140)=0x8) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) 03:47:26 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:47:26 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x4, 0x103000) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x4, 0x0, 0x80000001, 0x3, 0x0}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={r1, @in={{0x2, 0x4e22, @broadcast}}, 0x400, 0xfffffffffffffff9, 0x23, 0x8, 0x81}, 0x98) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x10001, 0x40000) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0xffffffffffffffc1) [ 3478.943807] FAT-fs (loop5): bogus number of reserved sectors 03:47:27 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3478.984164] FAT-fs (loop5): Can't find a valid FAT filesystem 03:47:27 executing program 0 (fault-call:7 fault-nth:39): r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:47:27 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xf4ffffff, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:47:27 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)="f0", 0x1, 0xfffffffffffffffd) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000240)={0xffffffffffffffff}) fstat(r0, &(0x7f0000000280)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400080, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) gettid() ioctl$TIOCGPTPEER(r1, 0x5441, 0x6) 03:47:27 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x120000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:47:27 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3479.260496] FAULT_INJECTION: forcing a failure. [ 3479.260496] name failslab, interval 1, probability 0, space 0, times 0 [ 3479.285420] CPU: 0 PID: 30825 Comm: syz-executor0 Not tainted 4.19.0+ #319 [ 3479.292468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3479.301830] Call Trace: [ 3479.304437] dump_stack+0x244/0x39d [ 3479.308096] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3479.313317] ? debug_smp_processor_id+0x1c/0x20 [ 3479.318004] ? perf_trace_lock+0x14d/0x7a0 [ 3479.322264] should_fail.cold.4+0xa/0x17 [ 3479.326359] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3479.331497] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3479.337055] ? zap_class+0x640/0x640 [ 3479.340797] ? find_held_lock+0x36/0x1c0 [ 3479.344887] ? __lock_is_held+0xb5/0x140 [ 3479.349032] ? perf_trace_sched_process_exec+0x860/0x860 [ 3479.354498] ? __kmalloc_node+0x3c/0x70 [ 3479.358539] ? __kmalloc_node+0x3c/0x70 [ 3479.362571] __should_failslab+0x124/0x180 [ 3479.366828] should_failslab+0x9/0x14 [ 3479.370648] kmem_cache_alloc_node_trace+0x270/0x740 [ 3479.375770] ? check_preemption_disabled+0x48/0x280 [ 3479.380804] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 3479.385838] ? find_next_bit+0x104/0x130 [ 3479.389939] sbitmap_queue_init_node+0x34d/0x850 [ 3479.394710] ? __lock_is_held+0xb5/0x140 [ 3479.398802] ? sbitmap_init_node+0x440/0x440 [ 3479.403224] ? blk_mq_init_tags+0x79/0x2b0 [ 3479.407953] ? rcu_read_lock_sched_held+0x14f/0x180 [ 3479.412988] ? kmem_cache_alloc_node_trace+0x34b/0x740 [ 3479.418290] ? find_next_bit+0x104/0x130 [ 3479.422383] blk_mq_init_tags+0x116/0x2b0 [ 3479.426555] blk_mq_alloc_rq_map+0x9f/0x220 [ 3479.430933] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3479.436494] blk_mq_init_sched+0x21d/0x770 [ 3479.440782] elevator_init_mq+0xd7/0x160 [ 3479.444866] blk_mq_init_allocated_queue+0x1074/0x1680 [ 3479.450184] ? blk_mq_map_swqueue+0xa50/0xa50 [ 3479.454720] ? __mutex_init+0x1f7/0x290 [ 3479.458740] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3479.464295] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 3479.469088] ? blk_mq_update_nr_hw_queues+0xf00/0xf00 [ 3479.474303] blk_mq_init_queue+0x63/0xb0 [ 3479.478825] loop_add+0x376/0xa40 [ 3479.482296] ? loop_queue_rq+0x690/0x690 [ 3479.486386] loop_control_ioctl+0x199/0x530 [ 3479.490754] ? loop_add+0xa40/0xa40 [ 3479.494407] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 3479.499360] ? loop_add+0xa40/0xa40 [ 3479.503008] do_vfs_ioctl+0x1de/0x1790 [ 3479.506935] ? ioctl_preallocate+0x300/0x300 [ 3479.511364] ? __fget_light+0x2e9/0x430 [ 3479.515728] ? fget_raw+0x20/0x20 [ 3479.519204] ? __sb_end_write+0xd9/0x110 [ 3479.523286] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3479.528846] ? fput+0x130/0x1a0 [ 3479.532142] ? do_syscall_64+0x9a/0x820 [ 3479.536156] ? do_syscall_64+0x9a/0x820 [ 3479.540168] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3479.544796] ? security_file_ioctl+0x94/0xc0 [ 3479.549254] ksys_ioctl+0xa9/0xd0 [ 3479.552752] __x64_sys_ioctl+0x73/0xb0 [ 3479.557011] do_syscall_64+0x1b9/0x820 [ 3479.561301] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3479.566688] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3479.571634] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3479.576515] ? trace_hardirqs_on_caller+0x310/0x310 [ 3479.581550] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3479.586584] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3479.591623] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3479.596528] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3479.601753] RIP: 0033:0x457569 [ 3479.604963] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3479.623875] RSP: 002b:00007f1259a65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3479.631628] RAX: ffffffffffffffda RBX: 00007f1259a65c90 RCX: 0000000000457569 [ 3479.638930] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 3479.646213] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3479.653492] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1259a666d4 03:47:27 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0000, 0x8dffffff, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:47:27 executing program 4: add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz'}, &(0x7f0000000080)="99208e3fa2a426637fc8c49f6e17d520802d74e1c8ebdaff8f5683f5201105f11bf90c1a5452a3d802e5a1e9c25867d1fb486f24de4a882fe5ed0500000026450651b9ff8b50cb770996ad8e7b635a4450c903a5fc123c9f2904fb63a72518ebea8c1b68ee861f1aa30b4e630501ef36ab165f00b1ccba55ecf54fecf38299", 0x7f, 0xfffffffffffffffd) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0xffe51c390e2cd5af, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)=[0x0, 0x1000]) syz_open_dev$video4linux(&(0x7f00000001c0)='/dev/v4l-subdev#\x00', 0x6, 0x80) 03:47:27 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3479.660771] R13: 00000000004c0606 R14: 00000000004d0a30 R15: 0000000000000006 03:47:27 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3479.759430] FAT-fs (loop5): bogus number of reserved sectors [ 3479.776690] FAT-fs (loop5): Can't find a valid FAT filesystem 03:47:27 executing program 0 (fault-call:7 fault-nth:40): r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:47:27 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1000, 0x4000) write$P9_RFSYNC(r0, &(0x7f0000000040)={0x7, 0x33, 0x2}, 0x7) write$smack_current(r0, &(0x7f0000000080)='/dev/audio#\x00', 0xc) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x140) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f00000000c0)={0xfffffffffffffffa, "aa9ad7cdb1a9054803fde193ea0c5756bc099e2e316ffedd944b6fbb5d4bf5e1", 0x2, 0x1}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast2}}, 0x4, 0x2}, &(0x7f0000000240)=0x90) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000280)={r2, 0x800}, &(0x7f00000002c0)=0x8) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f0000000740)) getgroups(0x9, &(0x7f0000000340)=[0xee01, 0xee01, 0xee00, 0x0, 0xffffffffffffffff, 0xee01, 0xee01, 0xffffffffffffffff, 0x0]) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000780)={r2, 0x3f}, &(0x7f00000007c0)=0x8) stat(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000500)=0xc) fstat(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000700)={r2, 0xfffffffffffffff9}, 0x8) stat(&(0x7f0000000800)='./file2\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f00000006c0)=[r3, r4, r5, r6, r7, r8]) 03:47:27 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3479.875528] FAT-fs (loop5): bogus number of reserved sectors [ 3479.881403] FAT-fs (loop5): Can't find a valid FAT filesystem 03:47:27 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x4c04, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:47:27 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x3, 0x195040) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000340)=""/210) write$nbd(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="674466980000000002000400040000004c3c82c660fd5c01caab759d46a5596aae95394d524c6caf44fa53eef40159b349fb6962e48ca8f3cca84d12d97e118ed0af96168717ca8204fe4ce468a188993dafc38b81034773ba0c2aed328ce86da3a8c2239b8969a4578d6fa0a06578dc394736b2262f56e868549c2de7faa593945bfe68c13b431344b04e0e348cd46ae0f3f53fa6877508c41cfb4050e27b4324cccc3da73b4d55b3466ab21e2ff0902ea9dcf711b67c51b41cc7c1a54a90889cc28770087c2ac5382161b2414143c18ac623115fb142"], 0x9d) 03:47:28 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3480.060782] FAULT_INJECTION: forcing a failure. [ 3480.060782] name failslab, interval 1, probability 0, space 0, times 0 [ 3480.076588] CPU: 1 PID: 30855 Comm: syz-executor0 Not tainted 4.19.0+ #319 [ 3480.083636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3480.086883] __nla_parse: 15 callbacks suppressed [ 3480.086893] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3480.093001] Call Trace: [ 3480.093031] dump_stack+0x244/0x39d [ 3480.093060] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3480.093087] ? debug_smp_processor_id+0x1c/0x20 [ 3480.093112] ? perf_trace_lock+0x14d/0x7a0 [ 3480.126783] should_fail.cold.4+0xa/0x17 [ 3480.130875] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3480.136034] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3480.141582] ? zap_class+0x640/0x640 [ 3480.145356] ? find_held_lock+0x36/0x1c0 [ 3480.149451] ? __lock_is_held+0xb5/0x140 [ 3480.153523] ? perf_trace_sched_process_exec+0x860/0x860 [ 3480.159001] ? __kmalloc_node+0x3c/0x70 [ 3480.162998] ? __kmalloc_node+0x3c/0x70 [ 3480.167001] __should_failslab+0x124/0x180 [ 3480.171263] should_failslab+0x9/0x14 [ 3480.175085] kmem_cache_alloc_node_trace+0x270/0x740 [ 3480.180210] ? check_preemption_disabled+0x48/0x280 [ 3480.185250] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 3480.190286] ? find_next_bit+0x104/0x130 [ 3480.194405] sbitmap_queue_init_node+0x34d/0x850 [ 3480.199191] ? __lock_is_held+0xb5/0x140 [ 3480.203278] ? sbitmap_init_node+0x440/0x440 [ 3480.207708] ? blk_mq_init_tags+0x79/0x2b0 [ 3480.211966] ? rcu_read_lock_sched_held+0x14f/0x180 [ 3480.217011] ? kmem_cache_alloc_node_trace+0x34b/0x740 [ 3480.222313] ? find_next_bit+0x104/0x130 [ 3480.226403] blk_mq_init_tags+0x116/0x2b0 [ 3480.230586] blk_mq_alloc_rq_map+0x9f/0x220 [ 3480.234948] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3480.240513] blk_mq_init_sched+0x21d/0x770 [ 3480.244791] elevator_init_mq+0xd7/0x160 [ 3480.248877] blk_mq_init_allocated_queue+0x1074/0x1680 [ 3480.254209] ? blk_mq_map_swqueue+0xa50/0xa50 [ 3480.258728] ? __mutex_init+0x1f7/0x290 [ 3480.262782] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3480.268341] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 3480.273136] ? blk_mq_update_nr_hw_queues+0xf00/0xf00 [ 3480.278351] blk_mq_init_queue+0x63/0xb0 [ 3480.282437] loop_add+0x376/0xa40 [ 3480.285915] ? loop_queue_rq+0x690/0x690 [ 3480.290007] loop_control_ioctl+0x199/0x530 [ 3480.294351] ? loop_add+0xa40/0xa40 [ 3480.298011] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 3480.302968] ? loop_add+0xa40/0xa40 [ 3480.306619] do_vfs_ioctl+0x1de/0x1790 [ 3480.310530] ? ioctl_preallocate+0x300/0x300 [ 3480.314985] ? __fget_light+0x2e9/0x430 [ 3480.318980] ? fget_raw+0x20/0x20 [ 3480.322459] ? __sb_end_write+0xd9/0x110 [ 3480.326585] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3480.332144] ? fput+0x130/0x1a0 [ 3480.335454] ? do_syscall_64+0x9a/0x820 [ 3480.339456] ? do_syscall_64+0x9a/0x820 [ 3480.343458] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3480.348065] ? security_file_ioctl+0x94/0xc0 [ 3480.352496] ksys_ioctl+0xa9/0xd0 [ 3480.355983] __x64_sys_ioctl+0x73/0xb0 [ 3480.359894] do_syscall_64+0x1b9/0x820 [ 3480.363804] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3480.369186] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3480.374141] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3480.379006] ? trace_hardirqs_on_caller+0x310/0x310 [ 3480.384050] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3480.389089] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3480.394130] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3480.399004] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3480.404209] RIP: 0033:0x457569 [ 3480.407429] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3480.426355] RSP: 002b:00007f1259a65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3480.434101] RAX: ffffffffffffffda RBX: 00007f1259a65c90 RCX: 0000000000457569 [ 3480.441392] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 3480.448688] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3480.455971] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1259a666d4 [ 3480.463262] R13: 00000000004c0606 R14: 00000000004d0a30 R15: 0000000000000006 03:47:28 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x3d8d0000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:47:28 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3480.597280] FAT-fs (loop5): bogus number of reserved sectors [ 3480.608642] FAT-fs (loop5): Can't find a valid FAT filesystem 03:47:28 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0000, 0x2700, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:47:28 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r0 = request_key(&(0x7f00000000c0)='.request_key_auth\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)='syz', 0x0) request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='user\x00', r0) 03:47:28 executing program 0 (fault-call:7 fault-nth:41): r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 3480.666959] FAT-fs (loop5): bogus number of reserved sectors [ 3480.672823] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3480.680023] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:47:28 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:47:28 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f00000000c0)="006582a47f2dc81155dc129709485f48b8a9ca701ed328f797bf1a9ef5109bdb6d2e6d52a6c5d38087dc044b80f1d6630b1b70042e3e359bd8e5f332bca45d984dc49bbdbf3c77484e164093235976cd13338041f3a342c32e3656ec93a1fef927add60c329fb81724e024049d78d2", 0x6f, 0xfffffffffffffffd) 03:47:28 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x4804, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) [ 3480.803356] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:47:28 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000000036915fa2c1ec28656aaa79bb94b46fe0000000700020800008c007a036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) [ 3480.909673] FAULT_INJECTION: forcing a failure. [ 3480.909673] name failslab, interval 1, probability 0, space 0, times 0 [ 3480.912883] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3480.931400] CPU: 1 PID: 30880 Comm: syz-executor0 Not tainted 4.19.0+ #319 [ 3480.938570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3480.947943] Call Trace: [ 3480.950574] dump_stack+0x244/0x39d [ 3480.954239] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3480.959491] ? debug_smp_processor_id+0x1c/0x20 [ 3480.964186] ? perf_trace_lock+0x14d/0x7a0 [ 3480.968458] should_fail.cold.4+0xa/0x17 [ 3480.972544] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3480.977690] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3480.983247] ? zap_class+0x640/0x640 [ 3480.987005] ? find_held_lock+0x36/0x1c0 [ 3480.991091] ? __lock_is_held+0xb5/0x140 [ 3480.995190] ? perf_trace_sched_process_exec+0x860/0x860 [ 3481.000668] ? __kmalloc_node+0x3c/0x70 [ 3481.004666] ? __kmalloc_node+0x3c/0x70 [ 3481.008677] __should_failslab+0x124/0x180 [ 3481.012935] should_failslab+0x9/0x14 [ 3481.016763] kmem_cache_alloc_node_trace+0x270/0x740 [ 3481.021892] ? check_preemption_disabled+0x48/0x280 [ 3481.026935] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 3481.031987] ? find_next_bit+0x104/0x130 [ 3481.036111] sbitmap_queue_init_node+0x34d/0x850 [ 3481.040890] ? __lock_is_held+0xb5/0x140 [ 3481.044985] ? sbitmap_init_node+0x440/0x440 [ 3481.049428] ? blk_mq_init_tags+0x79/0x2b0 [ 3481.053691] ? rcu_read_lock_sched_held+0x14f/0x180 [ 3481.058731] ? kmem_cache_alloc_node_trace+0x34b/0x740 [ 3481.064034] ? find_next_bit+0x104/0x130 [ 3481.068124] blk_mq_init_tags+0x116/0x2b0 [ 3481.072301] blk_mq_alloc_rq_map+0x9f/0x220 [ 3481.076647] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3481.082212] blk_mq_init_sched+0x21d/0x770 [ 3481.086483] elevator_init_mq+0xd7/0x160 [ 3481.090569] blk_mq_init_allocated_queue+0x1074/0x1680 [ 3481.095872] ? blk_mq_map_swqueue+0xa50/0xa50 [ 3481.100393] ? __mutex_init+0x1f7/0x290 [ 3481.104432] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 03:47:29 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0000, 0x91ffffff, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) [ 3481.109987] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 3481.114775] ? blk_mq_update_nr_hw_queues+0xf00/0xf00 [ 3481.119993] blk_mq_init_queue+0x63/0xb0 [ 3481.124075] loop_add+0x376/0xa40 [ 3481.127548] ? loop_queue_rq+0x690/0x690 [ 3481.131639] loop_control_ioctl+0x199/0x530 [ 3481.135978] ? loop_add+0xa40/0xa40 [ 3481.139636] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 3481.144596] ? loop_add+0xa40/0xa40 [ 3481.148242] do_vfs_ioctl+0x1de/0x1790 [ 3481.152157] ? ioctl_preallocate+0x300/0x300 [ 3481.156585] ? __fget_light+0x2e9/0x430 [ 3481.160579] ? fget_raw+0x20/0x20 [ 3481.164060] ? __sb_end_write+0xd9/0x110 [ 3481.168147] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3481.173703] ? fput+0x130/0x1a0 [ 3481.176999] ? do_syscall_64+0x9a/0x820 [ 3481.180991] ? do_syscall_64+0x9a/0x820 [ 3481.184987] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3481.189592] ? security_file_ioctl+0x94/0xc0 [ 3481.194028] ksys_ioctl+0xa9/0xd0 [ 3481.197497] __x64_sys_ioctl+0x73/0xb0 [ 3481.201404] do_syscall_64+0x1b9/0x820 [ 3481.205345] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3481.210731] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3481.215682] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3481.220549] ? trace_hardirqs_on_caller+0x310/0x310 [ 3481.225597] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3481.230632] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3481.235679] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3481.240562] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3481.245765] RIP: 0033:0x457569 03:47:29 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000000036915fa2c1ec28656aaa79bb94b46fe0000000700020800008c000b036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) [ 3481.249010] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3481.267927] RSP: 002b:00007f1259a65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3481.275654] RAX: ffffffffffffffda RBX: 00007f1259a65c90 RCX: 0000000000457569 [ 3481.282935] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 3481.290223] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3481.297506] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1259a666d4 [ 3481.304791] R13: 00000000004c0606 R14: 00000000004d0a30 R15: 0000000000000006 03:47:29 executing program 0 (fault-call:7 fault-nth:42): r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 3481.340174] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3481.448974] FAT-fs (loop5): bogus number of reserved sectors [ 3481.464931] FAT-fs (loop5): Can't find a valid FAT filesystem 03:47:29 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff3c00, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:47:29 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) bind$nfc_llcp(r0, &(0x7f0000000040)={0x27, 0x0, 0x1, 0x2, 0x9, 0x3, "61743be5dc9ec9b6417ebb9e1a427816962b72699488956c026ef3e8277bfef2e7a2cadefb1ef17d4881e092c1e8af086f9907e4d5dbac499dfee986d5981c", 0x12}, 0x60) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000140)=0x0) sched_getaffinity(r1, 0x8, &(0x7f0000000180)) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) 03:47:29 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000000036915fa2c1ec28656aaa79bb94b46fe0000000700020800008c0011036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) [ 3481.579646] FAULT_INJECTION: forcing a failure. [ 3481.579646] name failslab, interval 1, probability 0, space 0, times 0 [ 3481.606277] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3481.614181] CPU: 1 PID: 30901 Comm: syz-executor0 Not tainted 4.19.0+ #319 [ 3481.622089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3481.631458] Call Trace: [ 3481.634078] dump_stack+0x244/0x39d [ 3481.637732] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3481.642962] ? debug_smp_processor_id+0x1c/0x20 [ 3481.647656] ? perf_trace_lock+0x14d/0x7a0 [ 3481.651935] should_fail.cold.4+0xa/0x17 [ 3481.656028] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3481.661172] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3481.666735] ? zap_class+0x640/0x640 [ 3481.670490] ? find_held_lock+0x36/0x1c0 [ 3481.674578] ? __lock_is_held+0xb5/0x140 [ 3481.678664] ? i915_gem_userptr_init__mmu_notifier+0x9b8/0xbe0 [ 3481.684691] ? perf_trace_sched_process_exec+0x860/0x860 [ 3481.690181] ? __lockdep_init_map+0x105/0x590 [ 3481.694747] __should_failslab+0x124/0x180 [ 3481.699014] should_failslab+0x9/0x14 [ 3481.702855] kmem_cache_alloc_node_trace+0x270/0x740 [ 3481.708009] ? init_wait_entry+0x1c0/0x1c0 [ 3481.712272] ? check_preemption_disabled+0x48/0x280 [ 3481.717328] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 3481.722380] sbitmap_queue_init_node+0x34d/0x850 [ 3481.727167] ? __lock_is_held+0xb5/0x140 [ 3481.731262] ? sbitmap_init_node+0x440/0x440 [ 3481.735695] ? blk_mq_init_tags+0x79/0x2b0 [ 3481.739956] ? rcu_read_lock_sched_held+0x14f/0x180 [ 3481.745010] ? kmem_cache_alloc_node_trace+0x34b/0x740 [ 3481.750322] ? find_next_bit+0x104/0x130 [ 3481.754432] blk_mq_init_tags+0x177/0x2b0 [ 3481.758617] blk_mq_alloc_rq_map+0x9f/0x220 [ 3481.762961] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3481.768530] blk_mq_init_sched+0x21d/0x770 [ 3481.772811] elevator_init_mq+0xd7/0x160 [ 3481.776912] blk_mq_init_allocated_queue+0x1074/0x1680 [ 3481.782231] ? blk_mq_map_swqueue+0xa50/0xa50 [ 3481.786752] ? __mutex_init+0x1f7/0x290 [ 3481.790779] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3481.796338] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 3481.801140] ? blk_mq_update_nr_hw_queues+0xf00/0xf00 [ 3481.806375] blk_mq_init_queue+0x63/0xb0 [ 3481.810470] loop_add+0x376/0xa40 [ 3481.813958] ? loop_queue_rq+0x690/0x690 [ 3481.818058] loop_control_ioctl+0x199/0x530 [ 3481.822399] ? loop_add+0xa40/0xa40 [ 3481.826069] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 3481.831028] ? loop_add+0xa40/0xa40 [ 3481.834677] do_vfs_ioctl+0x1de/0x1790 [ 3481.838601] ? ioctl_preallocate+0x300/0x300 [ 3481.843057] ? __fget_light+0x2e9/0x430 [ 3481.847057] ? fget_raw+0x20/0x20 [ 3481.850539] ? __sb_end_write+0xd9/0x110 [ 3481.854627] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3481.860192] ? fput+0x130/0x1a0 [ 3481.863499] ? do_syscall_64+0x9a/0x820 [ 3481.867495] ? do_syscall_64+0x9a/0x820 [ 3481.871494] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3481.876105] ? security_file_ioctl+0x94/0xc0 [ 3481.880546] ksys_ioctl+0xa9/0xd0 [ 3481.884028] __x64_sys_ioctl+0x73/0xb0 [ 3481.887948] do_syscall_64+0x1b9/0x820 [ 3481.891876] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3481.897273] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3481.902227] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3481.907094] ? trace_hardirqs_on_caller+0x310/0x310 [ 3481.912142] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3481.917182] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3481.922257] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3481.927146] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3481.932357] RIP: 0033:0x457569 [ 3481.935574] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3481.954511] RSP: 002b:00007f1259a65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3481.962254] RAX: ffffffffffffffda RBX: 00007f1259a65c90 RCX: 0000000000457569 [ 3481.969549] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 03:47:29 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3481.976842] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3481.984135] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1259a666d4 [ 3481.991437] R13: 00000000004c0606 R14: 00000000004d0a30 R15: 0000000000000006 03:47:30 executing program 0 (fault-call:7 fault-nth:43): r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 3482.038756] FAT-fs (loop5): bogus number of reserved sectors [ 3482.051944] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3482.061488] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:47:30 executing program 4: r0 = accept$inet(0xffffffffffffff9c, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x800, 0x3, [0xeb1, 0x3, 0x9]}, &(0x7f00000000c0)=0xe) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) 03:47:30 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:47:30 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xffffff8c, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:47:30 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0000, 0x1802000000000000, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:47:30 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x8800) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f0000000040)={0x4, 0x1, [{0xd54e, 0x0, 0x100000000}, {0x3, 0x0, 0x7}, {0x9, 0x0, 0x3ff}, {0x2, 0x0, 0x101}]}) [ 3482.247479] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:47:30 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3482.319786] FAULT_INJECTION: forcing a failure. [ 3482.319786] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3482.346322] CPU: 0 PID: 30925 Comm: syz-executor0 Not tainted 4.19.0+ #319 [ 3482.353391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3482.362760] Call Trace: [ 3482.365374] dump_stack+0x244/0x39d [ 3482.369032] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3482.372319] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3482.374245] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 3482.374272] should_fail.cold.4+0xa/0x17 [ 3482.374296] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3482.397035] ? zap_class+0x640/0x640 [ 3482.400767] ? find_held_lock+0x36/0x1c0 [ 3482.404863] ? is_bpf_text_address+0xac/0x170 [ 3482.409390] ? __lock_is_held+0xb5/0x140 [ 3482.413474] ? rcu_softirq_qs+0x20/0x20 03:47:30 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3482.417467] ? perf_trace_sched_process_exec+0x860/0x860 [ 3482.422958] ? is_bpf_text_address+0xd3/0x170 [ 3482.427475] ? __might_sleep+0x95/0x190 [ 3482.431472] __alloc_pages_nodemask+0x34b/0xde0 [ 3482.436170] ? __alloc_pages_slowpath+0x2e10/0x2e10 [ 3482.441215] ? save_stack+0xa9/0xd0 [ 3482.444861] ? save_stack+0x43/0xd0 [ 3482.448509] ? kasan_kmalloc+0xc7/0xe0 [ 3482.452413] ? __kmalloc_node+0x50/0x70 [ 3482.456401] ? blk_mq_alloc_rq_map+0x10d/0x220 [ 3482.461009] ? blk_mq_init_sched+0x21d/0x770 [ 3482.465444] ? do_vfs_ioctl+0x1de/0x1790 [ 3482.469548] ? ksys_ioctl+0xa9/0xd0 [ 3482.471455] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3482.473211] ? __x64_sys_ioctl+0x73/0xb0 [ 3482.473230] ? do_syscall_64+0x1b9/0x820 [ 3482.473250] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3482.473273] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3482.500951] ? find_next_bit+0x104/0x130 [ 3482.505037] ? __cpu_to_node+0x7d/0xa0 [ 3482.508957] ? blk_mq_hw_queue_to_node+0xcc/0x110 [ 3482.513819] blk_mq_alloc_rqs+0x31c/0x980 [ 3482.518001] ? blk_mq_alloc_rq_map+0x220/0x220 [ 3482.522601] ? kmem_cache_alloc_node_trace+0x34b/0x740 [ 3482.527894] ? kasan_unpoison_shadow+0x35/0x50 [ 3482.532525] ? __kmalloc_node+0x50/0x70 [ 3482.536556] blk_mq_init_sched+0x279/0x770 [ 3482.540825] elevator_init_mq+0xd7/0x160 [ 3482.544928] blk_mq_init_allocated_queue+0x1074/0x1680 [ 3482.550235] ? blk_mq_map_swqueue+0xa50/0xa50 [ 3482.554754] ? __mutex_init+0x1f7/0x290 [ 3482.558773] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3482.564326] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 3482.569114] ? blk_mq_update_nr_hw_queues+0xf00/0xf00 [ 3482.574330] blk_mq_init_queue+0x63/0xb0 [ 3482.578410] loop_add+0x376/0xa40 [ 3482.581895] ? loop_queue_rq+0x690/0x690 [ 3482.586001] loop_control_ioctl+0x199/0x530 [ 3482.590340] ? loop_add+0xa40/0xa40 [ 3482.593992] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 3482.598957] ? loop_add+0xa40/0xa40 [ 3482.602603] do_vfs_ioctl+0x1de/0x1790 [ 3482.606518] ? ioctl_preallocate+0x300/0x300 [ 3482.610957] ? __fget_light+0x2e9/0x430 [ 3482.614954] ? fget_raw+0x20/0x20 [ 3482.618427] ? __sb_end_write+0xd9/0x110 [ 3482.622522] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3482.628075] ? fput+0x130/0x1a0 [ 3482.631370] ? do_syscall_64+0x9a/0x820 [ 3482.635359] ? do_syscall_64+0x9a/0x820 [ 3482.639351] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3482.643960] ? security_file_ioctl+0x94/0xc0 [ 3482.648390] ksys_ioctl+0xa9/0xd0 [ 3482.651863] __x64_sys_ioctl+0x73/0xb0 [ 3482.655780] do_syscall_64+0x1b9/0x820 [ 3482.659686] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3482.665091] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3482.670047] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3482.676331] ? trace_hardirqs_on_caller+0x310/0x310 [ 3482.681366] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3482.686401] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3482.691440] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3482.696313] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3482.701518] RIP: 0033:0x457569 [ 3482.704728] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3482.723651] RSP: 002b:00007f1259a65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3482.731384] RAX: ffffffffffffffda RBX: 00007f1259a65c90 RCX: 0000000000457569 [ 3482.738668] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 3482.745950] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3482.753322] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1259a666d4 [ 3482.760601] R13: 00000000004c0606 R14: 00000000004d0a30 R15: 0000000000000006 03:47:30 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000000036915fa2c1ec28656aaa79bb94b46fe0000000700020800008c000a036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) 03:47:30 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xef73c57f, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:47:30 executing program 0 (fault-call:7 fault-nth:44): r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 3482.825997] FAT-fs (loop5): bogus number of reserved sectors [ 3482.849897] FAT-fs (loop5): Can't find a valid FAT filesystem 03:47:30 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x301400, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000240)={'nat\x00', 0x0, 0x4, 0x82, [], 0x7, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000140)=""/130}, &(0x7f00000000c0)=0x78) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f00000002c0)=0x1) socket$alg(0x26, 0x5, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000300)=""/232) 03:47:30 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3482.950311] FAT-fs (loop5): bogus number of reserved sectors [ 3482.975272] FAT-fs (loop5): Can't find a valid FAT filesystem 03:47:31 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x44f, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:47:31 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:47:31 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x7, 0x400900) [ 3483.119420] FAULT_INJECTION: forcing a failure. [ 3483.119420] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3483.154886] CPU: 0 PID: 30951 Comm: syz-executor0 Not tainted 4.19.0+ #319 [ 3483.161977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3483.171350] Call Trace: [ 3483.173976] dump_stack+0x244/0x39d [ 3483.177642] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3483.182862] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 3483.187833] should_fail.cold.4+0xa/0x17 [ 3483.191959] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3483.197099] ? zap_class+0x640/0x640 [ 3483.200839] ? find_held_lock+0x36/0x1c0 [ 3483.204952] ? is_bpf_text_address+0xac/0x170 [ 3483.209471] ? __lock_is_held+0xb5/0x140 [ 3483.213584] ? rcu_softirq_qs+0x20/0x20 [ 3483.217604] ? perf_trace_sched_process_exec+0x860/0x860 [ 3483.223094] ? is_bpf_text_address+0xd3/0x170 [ 3483.227616] ? __might_sleep+0x95/0x190 [ 3483.231618] __alloc_pages_nodemask+0x34b/0xde0 [ 3483.236321] ? __alloc_pages_slowpath+0x2e10/0x2e10 [ 3483.241371] ? save_stack+0xa9/0xd0 [ 3483.245023] ? save_stack+0x43/0xd0 [ 3483.248672] ? kasan_kmalloc+0xc7/0xe0 [ 3483.252724] ? __kmalloc_node+0x50/0x70 [ 3483.256716] ? blk_mq_alloc_rq_map+0x10d/0x220 [ 3483.261318] ? blk_mq_init_sched+0x21d/0x770 [ 3483.265748] ? do_vfs_ioctl+0x1de/0x1790 [ 3483.269825] ? ksys_ioctl+0xa9/0xd0 [ 3483.273465] ? __x64_sys_ioctl+0x73/0xb0 [ 3483.277544] ? do_syscall_64+0x1b9/0x820 [ 3483.281623] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3483.287007] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3483.292563] ? find_next_bit+0x104/0x130 [ 3483.296649] ? __cpu_to_node+0x7d/0xa0 [ 3483.300560] ? blk_mq_hw_queue_to_node+0xcc/0x110 [ 3483.305425] blk_mq_alloc_rqs+0x31c/0x980 [ 3483.309607] ? blk_mq_alloc_rq_map+0x220/0x220 [ 3483.314213] ? kmem_cache_alloc_node_trace+0x34b/0x740 [ 3483.319513] ? kasan_unpoison_shadow+0x35/0x50 [ 3483.324123] ? __kmalloc_node+0x50/0x70 [ 3483.328132] blk_mq_init_sched+0x279/0x770 [ 3483.332403] elevator_init_mq+0xd7/0x160 [ 3483.336492] blk_mq_init_allocated_queue+0x1074/0x1680 [ 3483.342713] ? blk_mq_map_swqueue+0xa50/0xa50 [ 3483.347234] ? __mutex_init+0x1f7/0x290 [ 3483.351265] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3483.356831] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 3483.361622] ? blk_mq_update_nr_hw_queues+0xf00/0xf00 [ 3483.366839] blk_mq_init_queue+0x63/0xb0 [ 3483.370940] loop_add+0x376/0xa40 [ 3483.374418] ? loop_queue_rq+0x690/0x690 [ 3483.378512] loop_control_ioctl+0x199/0x530 [ 3483.382859] ? loop_add+0xa40/0xa40 [ 3483.386535] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 3483.391494] ? loop_add+0xa40/0xa40 [ 3483.395142] do_vfs_ioctl+0x1de/0x1790 [ 3483.399061] ? ioctl_preallocate+0x300/0x300 [ 3483.403486] ? __fget_light+0x2e9/0x430 [ 3483.407966] ? fget_raw+0x20/0x20 [ 3483.411442] ? __sb_end_write+0xd9/0x110 [ 3483.415531] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3483.421103] ? fput+0x130/0x1a0 [ 3483.424404] ? do_syscall_64+0x9a/0x820 [ 3483.428394] ? do_syscall_64+0x9a/0x820 [ 3483.432393] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3483.436999] ? security_file_ioctl+0x94/0xc0 [ 3483.441427] ksys_ioctl+0xa9/0xd0 [ 3483.444939] __x64_sys_ioctl+0x73/0xb0 [ 3483.448853] do_syscall_64+0x1b9/0x820 [ 3483.452760] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3483.458145] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3483.463094] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3483.467966] ? trace_hardirqs_on_caller+0x310/0x310 [ 3483.473007] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3483.478870] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3483.483943] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3483.488823] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3483.494024] RIP: 0033:0x457569 [ 3483.497234] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3483.516838] RSP: 002b:00007f1259a65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3483.524560] RAX: ffffffffffffffda RBX: 00007f1259a65c90 RCX: 0000000000457569 [ 3483.531840] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 3483.539122] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3483.546402] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1259a666d4 [ 3483.553681] R13: 00000000004c0606 R14: 00000000004d0a30 R15: 0000000000000006 03:47:31 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0000, 0x300000000000000, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:47:31 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:47:31 executing program 0 (fault-call:7 fault-nth:45): r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:47:31 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x18000, 0x0) r1 = msgget(0x0, 0xa) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000140)=""/110) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000240)) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000040)={0x8, 0x10b, "6faa2a8e56a753bd767f5aafa4704196b6caa0550334a241d6e411e9a7cb75cb", 0x29, 0xfefffffffffffffc, 0x91ab, 0x21e4, 0x11}) 03:47:31 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x460e0000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:47:31 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r0 = add_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="bd0d115e69faed51916a6785ab41f368336aefa02feffbdaf5a1bddeac118e5340a4a2a15cc899afe196905e16a3f9fdab4d725b13f47df837d2fca1a6b9d6b28754aba360c1e4ebc30eac751be6368f6d59b4f54890628ba3dcbf0ba58a5a29225cbc1f11bcfa0ab0b72b0b21188f03c5", 0x71, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="0b2c63e9c240793e", 0x8, r0) 03:47:31 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3483.839651] FAULT_INJECTION: forcing a failure. [ 3483.839651] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3483.863445] CPU: 1 PID: 30970 Comm: syz-executor0 Not tainted 4.19.0+ #319 [ 3483.870494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3483.879857] Call Trace: [ 3483.882472] dump_stack+0x244/0x39d [ 3483.886131] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3483.891363] should_fail.cold.4+0xa/0x17 [ 3483.895459] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3483.900591] ? zap_class+0x640/0x640 [ 3483.904325] ? find_held_lock+0x36/0x1c0 [ 3483.908423] ? is_bpf_text_address+0xac/0x170 [ 3483.912939] ? __lock_is_held+0xb5/0x140 [ 3483.917020] ? zap_class+0x640/0x640 [ 3483.920761] ? check_preemption_disabled+0x48/0x280 [ 3483.925804] ? perf_trace_sched_process_exec+0x860/0x860 [ 3483.931278] ? __lock_is_held+0xb5/0x140 [ 3483.935369] ? __might_sleep+0x95/0x190 [ 3483.939365] __alloc_pages_nodemask+0x34b/0xde0 [ 3483.944069] ? __alloc_pages_slowpath+0x2e10/0x2e10 [ 3483.949144] ? save_stack+0xa9/0xd0 [ 3483.952796] ? save_stack+0x43/0xd0 [ 3483.956447] ? kasan_kmalloc+0xc7/0xe0 [ 3483.960354] ? __kmalloc_node+0x50/0x70 [ 3483.964341] ? blk_mq_alloc_rq_map+0x10d/0x220 [ 3483.968938] ? blk_mq_init_sched+0x21d/0x770 [ 3483.973368] ? do_vfs_ioctl+0x1de/0x1790 [ 3483.977455] ? memset+0x31/0x40 [ 3483.980757] ? loop_init_request+0x83/0x180 [ 3483.985096] ? loop_info64_from_compat+0x940/0x940 [ 3483.990045] ? __cpu_to_node+0x7d/0xa0 [ 3483.993952] ? blk_mq_hw_queue_to_node+0xcc/0x110 [ 3483.998817] blk_mq_alloc_rqs+0x31c/0x980 [ 3484.003000] ? blk_mq_alloc_rq_map+0x220/0x220 [ 3484.007607] ? kasan_unpoison_shadow+0x35/0x50 [ 3484.012227] ? __kmalloc_node+0x50/0x70 [ 3484.016241] blk_mq_init_sched+0x279/0x770 [ 3484.020514] elevator_init_mq+0xd7/0x160 [ 3484.024612] blk_mq_init_allocated_queue+0x1074/0x1680 [ 3484.029928] ? blk_mq_map_swqueue+0xa50/0xa50 [ 3484.034458] ? __mutex_init+0x1f7/0x290 [ 3484.038490] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3484.044060] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 3484.048852] ? blk_mq_update_nr_hw_queues+0xf00/0xf00 [ 3484.054065] blk_mq_init_queue+0x63/0xb0 [ 3484.058153] loop_add+0x376/0xa40 [ 3484.061638] ? loop_queue_rq+0x690/0x690 [ 3484.065728] loop_control_ioctl+0x199/0x530 [ 3484.070064] ? loop_add+0xa40/0xa40 [ 3484.073723] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 3484.078678] ? loop_add+0xa40/0xa40 [ 3484.082326] do_vfs_ioctl+0x1de/0x1790 [ 3484.086240] ? ioctl_preallocate+0x300/0x300 [ 3484.090666] ? __fget_light+0x2e9/0x430 [ 3484.094661] ? fget_raw+0x20/0x20 [ 3484.098138] ? __sb_end_write+0xd9/0x110 [ 3484.102222] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3484.107780] ? fput+0x130/0x1a0 [ 3484.111087] ? do_syscall_64+0x9a/0x820 [ 3484.115084] ? do_syscall_64+0x9a/0x820 [ 3484.119083] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3484.123685] ? security_file_ioctl+0x94/0xc0 [ 3484.128121] ksys_ioctl+0xa9/0xd0 [ 3484.131612] __x64_sys_ioctl+0x73/0xb0 [ 3484.135525] do_syscall_64+0x1b9/0x820 [ 3484.139441] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3484.144828] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3484.149774] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3484.154641] ? trace_hardirqs_on_caller+0x310/0x310 [ 3484.159678] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3484.164718] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3484.169762] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3484.174637] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3484.179846] RIP: 0033:0x457569 [ 3484.183055] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3484.201996] RSP: 002b:00007f1259a65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3484.209717] RAX: ffffffffffffffda RBX: 00007f1259a65c90 RCX: 0000000000457569 [ 3484.217001] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 3484.224286] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3484.231577] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1259a666d4 03:47:32 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3484.238863] R13: 00000000004c0606 R14: 00000000004d0a30 R15: 0000000000000006 03:47:32 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3484.347486] FAT-fs (loop5): bogus number of reserved sectors [ 3484.365209] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3484.432707] FAT-fs (loop5): bogus number of reserved sectors [ 3484.445578] FAT-fs (loop5): Can't find a valid FAT filesystem 03:47:32 executing program 0 (fault-call:7 fault-nth:46): r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:47:32 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0000, 0x1000000000000000, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) 03:47:32 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x0, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f00000000c0)) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)={0xfc4, 0xbc80, 0x3, 0x0, 0x0, [{r0, 0x0, 0x8}, {r1, 0x0, 0xffffffff}, {r1, 0x0, 0x1}]}) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x8000000, 0x4, 0x14}) 03:47:32 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x2, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:47:32 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:47:32 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x80000, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000080)=0x40, 0x4) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000140)={{0x0, 0x9, 0x9, 0x5, 0xffffffffffffffff, 0x3}, 0x2c61, 0x200, 0x9, 0x9, 0x401, "f54fcfbbcb599285e2157a4fb9bb261b442e27dc310c208f3b48a098f1881df430043debefb765aaba92e926ef14d8d214efc0f5878288da3c25e138a6918848b7e833e67418afb5444338a22ba9d0461dfca1ae662ca7971e4f1dcd44f633bed24b4e7678776ab0bb7d843d44ae019476bc949643052aef44dc140e49ed4a33"}) 03:47:32 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:47:32 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x35920000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) [ 3484.695753] FAULT_INJECTION: forcing a failure. [ 3484.695753] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3484.746930] CPU: 1 PID: 31004 Comm: syz-executor0 Not tainted 4.19.0+ #319 [ 3484.753999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3484.763365] Call Trace: [ 3484.765978] dump_stack+0x244/0x39d [ 3484.769638] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3484.774856] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 3484.779815] should_fail.cold.4+0xa/0x17 [ 3484.783901] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3484.789037] ? zap_class+0x640/0x640 [ 3484.792767] ? find_held_lock+0x36/0x1c0 [ 3484.796861] ? is_bpf_text_address+0xac/0x170 [ 3484.801377] ? __lock_is_held+0xb5/0x140 [ 3484.805472] ? rcu_softirq_qs+0x20/0x20 [ 3484.809478] ? perf_trace_sched_process_exec+0x860/0x860 [ 3484.814961] ? is_bpf_text_address+0xd3/0x170 [ 3484.819481] ? __might_sleep+0x95/0x190 [ 3484.823479] __alloc_pages_nodemask+0x34b/0xde0 [ 3484.828173] ? __alloc_pages_slowpath+0x2e10/0x2e10 [ 3484.833214] ? save_stack+0xa9/0xd0 [ 3484.836857] ? save_stack+0x43/0xd0 [ 3484.840503] ? kasan_kmalloc+0xc7/0xe0 [ 3484.844403] ? __kmalloc_node+0x50/0x70 [ 3484.848397] ? blk_mq_alloc_rq_map+0x10d/0x220 [ 3484.853002] ? blk_mq_init_sched+0x21d/0x770 [ 3484.857437] ? do_vfs_ioctl+0x1de/0x1790 [ 3484.861511] ? ksys_ioctl+0xa9/0xd0 [ 3484.865156] ? __x64_sys_ioctl+0x73/0xb0 [ 3484.869233] ? do_syscall_64+0x1b9/0x820 [ 3484.873314] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3484.878697] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3484.884251] ? find_next_bit+0x104/0x130 [ 3484.888336] ? __cpu_to_node+0x7d/0xa0 [ 3484.892240] ? blk_mq_hw_queue_to_node+0xcc/0x110 [ 3484.897302] blk_mq_alloc_rqs+0x31c/0x980 [ 3484.901482] ? blk_mq_alloc_rq_map+0x220/0x220 [ 3484.906086] ? kmem_cache_alloc_node_trace+0x34b/0x740 [ 3484.911383] ? kasan_unpoison_shadow+0x35/0x50 [ 3484.916009] ? __kmalloc_node+0x50/0x70 [ 3484.920020] blk_mq_init_sched+0x279/0x770 [ 3484.924294] elevator_init_mq+0xd7/0x160 [ 3484.928393] blk_mq_init_allocated_queue+0x1074/0x1680 [ 3484.933725] ? blk_mq_map_swqueue+0xa50/0xa50 [ 3484.938245] ? __mutex_init+0x1f7/0x290 [ 3484.942273] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3484.947831] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 3484.952626] ? blk_mq_update_nr_hw_queues+0xf00/0xf00 [ 3484.957845] blk_mq_init_queue+0x63/0xb0 [ 3484.961932] loop_add+0x376/0xa40 [ 3484.965495] ? loop_queue_rq+0x690/0x690 [ 3484.969596] loop_control_ioctl+0x199/0x530 [ 3484.973976] ? loop_add+0xa40/0xa40 [ 3484.977634] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 3484.982593] ? loop_add+0xa40/0xa40 [ 3484.986249] do_vfs_ioctl+0x1de/0x1790 [ 3484.990162] ? ioctl_preallocate+0x300/0x300 [ 3484.994595] ? __fget_light+0x2e9/0x430 [ 3484.998586] ? fget_raw+0x20/0x20 [ 3485.002067] ? __sb_end_write+0xd9/0x110 [ 3485.006157] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3485.011715] ? fput+0x130/0x1a0 [ 3485.015022] ? do_syscall_64+0x9a/0x820 [ 3485.019045] ? do_syscall_64+0x9a/0x820 [ 3485.023051] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3485.027653] ? security_file_ioctl+0x94/0xc0 [ 3485.032083] ksys_ioctl+0xa9/0xd0 [ 3485.035566] __x64_sys_ioctl+0x73/0xb0 [ 3485.039483] do_syscall_64+0x1b9/0x820 [ 3485.043393] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3485.048783] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3485.053731] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3485.058594] ? trace_hardirqs_on_caller+0x310/0x310 [ 3485.063634] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3485.068674] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3485.073712] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3485.078584] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3485.083785] RIP: 0033:0x457569 [ 3485.086995] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3485.105911] RSP: 002b:00007f1259a65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3485.113633] RAX: ffffffffffffffda RBX: 00007f1259a65c90 RCX: 0000000000457569 [ 3485.120912] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 3485.128194] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3485.135474] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1259a666d4 03:47:33 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000000036915fa2c1ec28656aaa79bb94b46fe0000000700020800008c004c036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) 03:47:33 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000100), 0xaa, 0xfffffffffffffffd) socket$inet_smc(0x2b, 0x1, 0x0) [ 3485.142754] R13: 00000000004c0606 R14: 00000000004d0a30 R15: 0000000000000006 [ 3485.187369] FAT-fs (loop5): bogus number of reserved sectors [ 3485.206222] FAT-fs (loop5): Can't find a valid FAT filesystem 03:47:33 executing program 0 (fault-call:7 fault-nth:47): r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 3485.231360] __nla_parse: 13 callbacks suppressed [ 3485.231371] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3485.269835] FAT-fs (loop5): bogus number of reserved sectors 03:47:33 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.overlay.nlink\x00') r0 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x1, 0x2400) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff}, 0x800) r2 = syz_open_dev$video(&(0x7f0000000300)='/dev/video#\x00', 0xe00, 0x80000) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000340)='\x00', 0xffffffffffffffff}, 0x30) getresuid(&(0x7f00000003c0), &(0x7f0000000400)=0x0, &(0x7f0000000440)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000004c0)=0xc) r7 = syz_open_pts(0xffffffffffffff9c, 0x80000) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vga_arbiter\x00', 0x341, 0x0) r9 = accept(0xffffffffffffff9c, &(0x7f0000000540)=@rc, &(0x7f0000001600)=0x80) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002800)={&(0x7f0000001640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc0, 0xd8, 0x2, {"4b207523a5d4d70b5bca3910a3ba29ad7fb71e552b3933499c7a6bcbe076910f4dc591ec6e0bc1eb21a3fcc275b671430f2873f36ddbb42d90f79ba680ccd3f98890ba37ab99ca62e475e9dc1a1c9c399a3813d903dc281934250094a8ed1cf69d640091deae7b788f4465356c033222ebd3b40380ca901223113fe9575106e765b1837cee66320656ca80745fa5a82455eef7090df2fccb3cfbda0d2046587af48659ee3cab7549d544fd55ca77f8efeea4fb67d30db1522b59b58e08"}}, {0x0, "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"}}, &(0x7f0000002740)=""/162, 0x10da, 0xa2, 0x1}, 0x20) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000007bc0)=0x0) r13 = getuid() r14 = getegid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000007c00)={0x0}, &(0x7f0000007c40)=0xc) stat(&(0x7f0000007c80)='./file0\x00', &(0x7f0000007cc0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000007d40)=[0xee00, 0xffffffffffffffff, 0x0]) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000007d80)=0x0) fstat(0xffffffffffffff9c, &(0x7f0000007dc0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000007e40)='./file0\x00', &(0x7f0000007e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = accept$alg(0xffffffffffffff9c, 0x0, 0x0) r22 = socket$nl_netfilter(0x10, 0x3, 0xc) r23 = socket$kcm(0x29, 0x2, 0x0) r24 = accept(0xffffffffffffff9c, &(0x7f0000007f00)=@in={0x2, 0x0, @broadcast}, &(0x7f0000007f80)=0x80) r25 = openat$dsp(0xffffffffffffff9c, &(0x7f0000007fc0)='/dev/dsp\x00', 0x0, 0x0) r26 = gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000008000)={{{@in6, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f0000008100)=0xe8) lstat(&(0x7f0000008140)='./file0\x00', &(0x7f0000008180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r29 = open$dir(&(0x7f0000008200)='./file0\x00', 0x200080, 0x4) accept4(0xffffffffffffff9c, &(0x7f0000008240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f00000082c0)=0x80, 0x80000) r31 = syz_open_dev$usbmon(&(0x7f0000008300)='/dev/usbmon#\x00', 0xffe000000, 0x40000) r32 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) r33 = openat$md(0xffffffffffffff9c, &(0x7f00000028c0)='/dev/md0\x00', 0x101400, 0x0) r34 = fcntl$getown(0xffffffffffffffff, 0x9) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000008900)={0x0, 0x0}, &(0x7f0000008940)=0xc) getgroups(0x3, &(0x7f0000008980)=[0xee00, 0xffffffffffffffff, 0xee00]) r37 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000089c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r38 = socket$inet_tcp(0x2, 0x1, 0x0) r39 = openat$ion(0xffffffffffffff9c, &(0x7f0000008a00)='/dev/ion\x00', 0x10003, 0x0) r40 = socket$netlink(0x10, 0x3, 0x1d) r41 = syz_open_dev$vcsn(&(0x7f0000008a40)='/dev/vcs#\x00', 0x1, 0x201) r42 = openat$null(0xffffffffffffff9c, &(0x7f0000008a80)='/dev/null\x00', 0x2000, 0x0) r43 = openat$rtc(0xffffffffffffff9c, &(0x7f0000008ac0)='/dev/rtc0\x00', 0x240, 0x0) r44 = getpgid(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000008b00)={0x0, 0x0}, &(0x7f0000008b40)=0xc) fstat(0xffffffffffffff9c, &(0x7f0000008b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r47 = syz_open_dev$sndseq(&(0x7f0000008c00)='/dev/snd/seq\x00', 0x0, 0x80800) r48 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f0000008c40)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x0) r49 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000008c80), 0x4) r50 = socket$can_raw(0x1d, 0x3, 0x1) r51 = syz_open_dev$audion(&(0x7f0000008cc0)='/dev/audio#\x00', 0x3f, 0x200) r52 = socket$inet_udp(0x2, 0x2, 0x0) r53 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000091c0)=0x0) fstat(0xffffffffffffffff, &(0x7f0000009200)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffff9c, &(0x7f0000009280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r0, &(0x7f0000009340)=[{&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000600)="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", 0x1000}], 0x1, &(0x7f0000007580)=[@rights={0x20, 0x1, 0x1, [r1, r2, r3]}, @rights={0x10}, @cred={0x20, 0x1, 0x2, r4, r5, r6}, @rights={0x28, 0x1, 0x1, [r7, r8, r9, r10, r11]}], 0x78, 0x4000040}, {&(0x7f0000007600)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000007b40)=[{&(0x7f0000007680)="a94c4fe4086a972b228efa6f69e5816bbd96ca67e665f396e78d96c6ce9b9f27ae6da4585998aad4d960e5c0158a891913a8cb55defd9419f8ecc38135de74368681def8bc7b133c6650fb03257dbf2bd35281957c5f250c8760ea11e9d07e7a99f3b38e91c12365dd550cfee7c2848f2eeebe9ad0769596571fd32f5ea8f47ebea5217eb190e8b1ffabd5fa8b77f9584f19d3c1b66b2c052a0021db77ffe817b6d9728e8d37d5ecb320e20e3cb5961fd6ca1cecef64d9f283d4dbada5f5e01b224df07e78d66be9f1730659c072f18e5ca7caa3d6756bac22797306260da821b45eda749d9b09ab046c7026822ee282", 0xf0}, {&(0x7f0000007780)="8e41787ab161165a943c77f30122a50d6d806d243dbdd6f5353a5caae778b7edadb52a4c85db254f5bc466595f2c1272238986b584ab9a2d975ff5571aae2ce0b40662e60725af01fb3d058e6ee81b4b3e4afe2eb27051b90bf8838de544a7fbbeb774a3e7f167186e0286c151bd99fb16eef047576507cc391eee0d83533491d4d9b37d0ad35d817d5645a3b6cbc4dcda4a116827062b2a84ee8302a40b1de48e2377327093a1efe053729d44e5", 0xae}, {&(0x7f0000007840)="101e10c4e98957d6c39bd9623e76c3e4f64c562e03aba423cae6d890ff5eddfd416ec3457ba4b0be107c32fe96b05f649e8c9c1cfc551d691b16bd5d6ba6c822b5e0dd47ec4ee11dacdcf238f5", 0x4d}, {&(0x7f00000078c0)="24ec95fc55b4d6780f7ad0610d33f87c37055c3e13acffd3c7403bd9e100cdb207b373273f02949d7d2101b862ff34945839c38843177a748cb9c720d39533d82866819b7dedd55e53c7f220a016d35c6321b53964afe435e9f739e1180c9a1ebacdf7f3006b1fd60951733731948b04294ea0c676ecd6825383f27fe78800e17ce1872ee5fbce9bd5bd16", 0x8b}, {&(0x7f0000007980)="8dea6d8388576ab91e9608df5eb75e9619bad7df2a6013caac606363ba8826ea16a00937b398c08ea4155e129e7096667d6dad352b9725d39b40a741157356f20554a619b2348310aa8ce54e76077ebef8ae74d6041b654ed40e6605fbf1a3b82e10f5863e9bc7d14fa8e1146e0d773e687e8ee1e607470e29591d94f3a911671183c2f9d9481d37c2122ea69aa62b291fe8e111f8e012ef5aa5c9a75c5e27d17e4589739c659b465b550f6faf5e602ca30b09c4e6e501b71ea18135da7b7eae0ad07432128508ed13578c354901e64fa515d4ded2174fbe4320adddf95c87267a1b8bde0bb4caf6a05933b439ecee1f42402e76d47bec", 0xf7}, {&(0x7f0000007a80)="e8ade31f9159ac8968326633c912932d902cd8c4e8d1ab934d538aad066cb45b9c964e47d3aad464b906929ab2ccd5a4e3f148ff3021a9cd15ad1fa500d9fca79c1f635b0a927d6c5ef48c909ef10db92fb4c469a7e8c7de0824238591048d00d1890542cb5b9843bfdcfd0b468fd3c29269a9060e8846528827f7d13cb7b1a21b7e5854f5688b789c9ea6cf919fe4edf4f6f73220d44c07d01927", 0x9b}], 0x6, &(0x7f0000008380)=[@cred={0x20, 0x1, 0x2, r12, r13, r14}, @cred={0x20, 0x1, 0x2, r15, r16, r17}, @cred={0x20, 0x1, 0x2, r18, r19, r20}, @rights={0x28, 0x1, 0x1, [r21, r22, r23, r24, r25]}, @cred={0x20, 0x1, 0x2, r26, r27, r28}, @rights={0x18, 0x1, 0x1, [r29, r30]}, @rights={0x20, 0x1, 0x1, [r31, r32, r33]}], 0xe0, 0x8000}, {&(0x7f0000008480)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000085c0)=[{&(0x7f0000008500)="abed9e4e40db6f0eb658fdb79c375bbfbcc259d114701ced49aa3d972ba311c1576a0a61918bdada43596ea6dd3ad2ee53e15d3cf15f701e7f370ff8fc2996524c9ffbf194c96c03c38055c7ad", 0x4d}, {&(0x7f0000008580)="30d51ef45cb2be47deacdb9a61f56b64a1", 0x11}], 0x2, 0x0, 0x0, 0x40}, {&(0x7f0000008600)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000088c0)=[{&(0x7f0000008680)="b107bc0a302b4b65bf95a606026ed5d134f5fd1c3e8433c981d102ee881adbada10b4e7b4c31ff8ccf89546e3c65c489a62bd7932f441698d5fc5348f0315f5cda7244fe0eae30a49094dd2cb419ec84209a1d0e4f0959870dc81f87ec3f82faf40c362c2e77130fae49cf76b484f0ddaa97d4286e4c22f09af23dfca9e1c0925d88682f1815f98238de332d3b59d4bdb0e60e40f3731136eb0332174508dfaf7a9f1fc9e1b1d911f14077793567064c961c647e1922fbd1f09020539be3fe0e1cad7c0fe42ecfabe5e7437ce1a27f", 0xcf}, {&(0x7f0000008780)="30e756a23e538417c8155173470efa88ea9b000608cca8b61e52458796f38389155858b05665e3f86d8784041f5a418a20705a4499f517e81aa46b350ce3a37c853177002ac09eef53b035", 0x4b}, {&(0x7f0000008800)="3857c85ab395b913955feb340b6ede2a40ac6c3733278d546551585375871c231cc5a60c00cb30394c7077454708c5c697afc8f4ccc663f5d76484c6f998398af4068fa05bc8e515b51c7e2313db9c6c9c925f0ca494cb81d83d7a7f70478ac181898e2c51e8dfdd166c0ef270407397eeaeb3f7ce64f803f6322c1950ade54049925d54b1aad447092065c393d4478f49107f4f0a458abe26616360b6463cf93ccd41b170e91320fa401a5c135344dfdb2c62", 0xb3}], 0x3, &(0x7f0000008d00)=[@cred={0x20, 0x1, 0x2, r34, r35, r36}, @rights={0x18, 0x1, 0x1, [r37, r38]}, @rights={0x28, 0x1, 0x1, [r39, r40, r41, r42, r43]}, @cred={0x20, 0x1, 0x2, r44, r45, r46}, @rights={0x30, 0x1, 0x1, [r47, r48, r49, r50, r51, r52, r53]}], 0xb0, 0x4001}, {&(0x7f0000008dc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000009140)=[{&(0x7f0000008e40)="1d543907f6d817e5a724e79110f6b0fd92d9ad12373dc43dd4e6a168435c7b4bf7562221b44bd1648669f592e1936dae63dcb368b08f7e5442abdb847b04440b83c75046fbbe22e1184de00c2916145442744c241c62376246ea8bd739e2fa2a1a4983efde72048e12b1ddb4507d32988e4abb5181b0695d4a8f032b8f69223b6742bfc4f9959386dc2fc78634f5b7dbd576b7605c4ecbc9d7715bbbf830ad153ac2aba882ad3b0d2a2a7bf3538531f84ad8ca13df2fa0f0dd82a2c6484dd663dea127c6d2ec", 0xc6}, {&(0x7f0000008f40)="19c9e9e52341d3cbf886ec6481213f0257edf692651d89a0a1cd25", 0x1b}, {&(0x7f0000008f80)="07e99734fdd227798809f4e0ed1c9a58796cc7250c6a07fc754320e7fe8e4cbb2e9f826bcefb8ce142929f2d768275485f6f68a5711f3c4898dc70ef1a202aae04b16cd4501c3a2adf44fb4d554dce9c7e4ac6b388f035441783aae5d3ce7322539cd2f5ec03ca0e899641eeb2aa5b75691e1189ae4eda86fd68626e8d3f79768ba726c5b73a6fe1ce145dcaa285ea24b1d3bf84302e8bcfd75ff2c8338bcc1365be30eb3d8fe912d99b6dc604b274a794d0cdf45e80653b59376973c7fcdc97a738012e2ed1f47b4bb3425da1cc6f40fa24944a10cf49d5282f8490652bc93321f980276fe87eab4c7aec7d6a14d13252b91838664810a253a834e7", 0xfc}, {&(0x7f0000009080)="393859322fac496306ea1d6009d7f62acd43df606589b6ca4791b42d805e58a3d027e3db48182f37", 0x28}, {&(0x7f00000090c0)="ab079f099489aa", 0x7}, {&(0x7f0000009100)}], 0x6, &(0x7f0000009300)=[@cred={0x20, 0x1, 0x2, r54, r55, r56}], 0x20, 0x4}], 0x5, 0x40) r57 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2200, 0x1) ioctl$EVIOCGBITSW(r57, 0x80404525, &(0x7f0000000040)=""/108) 03:47:33 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) [ 3485.308594] FAT-fs (loop5): Can't find a valid FAT filesystem 03:47:33 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0000, 0x5000000, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) [ 3485.403616] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:47:33 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x3f00000000000000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 03:47:33 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:47:33 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r0 = openat$cgroup_ro(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000240)={r0, 0x0, 0x1, 0x4}) r2 = getegid() fchownat(r0, &(0x7f00000003c0)='./file0\x00', r1, r2, 0x1040) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xc, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="e4d1cae0632a817c000000004e08008ea669010af424cc0c46cc5ad321b0843276c1d6ed96b489c73195d0790867b74598ab443e95fed4728ccc4d8ad49a71cf51429c07b4bddd99e629ece55dbc280686b932505d8bd78f9d5e1d373d73d06b5f28f8fb9123e03c11cd099fbfe604577b13d7f39a32f45fd9b7273781d112303277275cd941563b1e61de28fae5ae9d3a3ba0ebe35480553e63eba63b28dc75df1ed2975923e23d27922034a42913d8e3bf1c59422c840a6ad5fbc52c5d8cb86b2302e410f216fae36c28c11b8c2ed1f5890f105215f8aa9985abbe73c3bdfce80ef11c72"], 0x71, 0x0, &(0x7f0000000080)="488f0913b5bad924377e7eed564faa1bc95166c39c3a32b4125b78c20a2055119ab56741d3f596a0ebb4c1c2d455bfe1b0d91d7594ba7dce848e9029343fde91c3d96711cc1e969437323c13d0fd53ac02499b8d01e16373ebd6111594267eb1fcacb7d80ab9128f39b176ffa7580f8180"}) [ 3485.519862] FAULT_INJECTION: forcing a failure. [ 3485.519862] name failslab, interval 1, probability 0, space 0, times 0 [ 3485.562355] CPU: 0 PID: 31031 Comm: syz-executor0 Not tainted 4.19.0+ #319 [ 3485.569432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3485.576076] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3485.579791] Call Trace: [ 3485.579820] dump_stack+0x244/0x39d [ 3485.579848] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3485.579874] ? debug_smp_processor_id+0x1c/0x20 [ 3485.604525] ? perf_trace_lock+0x14d/0x7a0 [ 3485.608796] should_fail.cold.4+0xa/0x17 [ 3485.612878] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3485.618023] ? save_stack+0x43/0xd0 [ 3485.621664] ? kasan_kmalloc+0xc7/0xe0 [ 3485.625563] ? kmem_cache_alloc_node_trace+0x14c/0x740 [ 3485.630856] ? elevator_alloc+0x82/0x1f0 [ 3485.634952] ? blk_mq_init_allocated_queue+0x1074/0x1680 [ 3485.640423] ? blk_mq_init_queue+0x63/0xb0 [ 3485.644670] ? loop_add+0x376/0xa40 [ 3485.648307] ? loop_control_ioctl+0x199/0x530 [ 3485.652814] ? do_vfs_ioctl+0x1de/0x1790 [ 3485.656886] ? ksys_ioctl+0xa9/0xd0 [ 3485.660570] ? zap_class+0x640/0x640 [ 3485.664308] ? find_held_lock+0x36/0x1c0 [ 3485.668390] ? find_held_lock+0x36/0x1c0 [ 3485.672479] ? __lock_is_held+0xb5/0x140 [ 3485.676571] ? perf_trace_sched_process_exec+0x860/0x860 [ 3485.682042] ? psi_task_change.cold.11+0x1ac/0x1ac [ 3485.686990] ? kasan_check_write+0x14/0x20 [ 3485.691249] ? kobject_init+0x23d/0x2f0 [ 3485.695256] __should_failslab+0x124/0x180 [ 3485.699520] should_failslab+0x9/0x14 [ 3485.703341] kmem_cache_alloc_node_trace+0x270/0x740 [ 3485.708478] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3485.714334] dd_init_queue+0x10e/0x600 [ 3485.718982] ? dd_exit_queue+0x250/0x250 [ 3485.723068] ? kasan_unpoison_shadow+0x35/0x50 [ 3485.727684] ? __kmalloc_node+0x50/0x70 [ 3485.731690] blk_mq_init_sched+0x3b3/0x770 [ 3485.735971] elevator_init_mq+0xd7/0x160 [ 3485.740056] blk_mq_init_allocated_queue+0x1074/0x1680 [ 3485.745358] ? blk_mq_map_swqueue+0xa50/0xa50 [ 3485.749875] ? __mutex_init+0x1f7/0x290 [ 3485.753921] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3485.759490] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 3485.764282] ? blk_mq_update_nr_hw_queues+0xf00/0xf00 [ 3485.769501] blk_mq_init_queue+0x63/0xb0 [ 3485.773583] loop_add+0x376/0xa40 [ 3485.777058] ? loop_queue_rq+0x690/0x690 [ 3485.781150] loop_control_ioctl+0x199/0x530 [ 3485.785489] ? loop_add+0xa40/0xa40 [ 3485.789147] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 3485.794102] ? loop_add+0xa40/0xa40 [ 3485.797780] do_vfs_ioctl+0x1de/0x1790 [ 3485.801701] ? ioctl_preallocate+0x300/0x300 [ 3485.806130] ? __fget_light+0x2e9/0x430 [ 3485.810124] ? fget_raw+0x20/0x20 [ 3485.813604] ? __sb_end_write+0xd9/0x110 [ 3485.817691] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3485.823253] ? fput+0x130/0x1a0 [ 3485.826555] ? do_syscall_64+0x9a/0x820 [ 3485.830549] ? do_syscall_64+0x9a/0x820 [ 3485.834546] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3485.839151] ? security_file_ioctl+0x94/0xc0 [ 3485.843588] ksys_ioctl+0xa9/0xd0 [ 3485.847064] __x64_sys_ioctl+0x73/0xb0 [ 3485.850973] do_syscall_64+0x1b9/0x820 [ 3485.854879] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3485.860282] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3485.865228] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3485.870088] ? trace_hardirqs_on_caller+0x310/0x310 [ 3485.875125] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3485.880164] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3485.885204] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3485.890078] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3485.895283] RIP: 0033:0x457569 03:47:33 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000000036915fa2c1ec28656aaa79bb94b46fe0000000700020800008c0013036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) 03:47:33 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x80d0000, 0x0, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) [ 3485.898493] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3485.917436] RSP: 002b:00007f1259a65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3485.925164] RAX: ffffffffffffffda RBX: 00007f1259a65c90 RCX: 0000000000457569 [ 3485.932447] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 3485.939741] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3485.947025] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1259a666d4 [ 3485.954304] R13: 00000000004c0606 R14: 00000000004d0a30 R15: 0000000000000006 03:47:34 executing program 4: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x142, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) [ 3486.054314] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:47:34 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="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", 0xfc) 03:47:34 executing program 0 (fault-call:7 fault-nth:48): r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8010, 0xffffffffffffffff, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 3486.151678] FAT-fs (loop5): bogus number of reserved sectors [ 3486.187146] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3486.194740] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:47:34 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) [ 3486.222290] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. 03:47:34 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc0000004a000700ab092509070007000aab80ff010000000000369321000100ff010000000500000000000000036915fa2c1ec28656aaa79bb94b46fe0000000700020800008c1000036c6c256f1a272f2e117c22ebc205214000200000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) 03:47:34 executing program 4: [ 3486.330040] FAULT_INJECTION: forcing a failure. [ 3486.330040] name failslab, interval 1, probability 0, space 0, times 0 [ 3486.349478] netlink: 180 bytes leftover after parsing attributes in process `syz-executor1'. [ 3486.355227] CPU: 0 PID: 31065 Comm: syz-executor0 Not tainted 4.19.0+ #319 [ 3486.365118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3486.374479] Call Trace: [ 3486.377088] dump_stack+0x244/0x39d [ 3486.380728] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3486.385947] ? debug_smp_processor_id+0x1c/0x20 [ 3486.390624] ? perf_trace_lock+0x14d/0x7a0 [ 3486.394875] should_fail.cold.4+0xa/0x17 [ 3486.398987] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3486.404363] ? mark_held_locks+0xc7/0x130 [ 3486.408528] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 3486.413644] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3486.418252] ? zap_class+0x640/0x640 [ 3486.421978] ? trace_hardirqs_off_caller+0x310/0x310 [ 3486.427090] ? do_raw_spin_trylock+0x270/0x270 [ 3486.431688] ? find_held_lock+0x36/0x1c0 [ 3486.435768] ? __lock_is_held+0xb5/0x140 [ 3486.439857] ? perf_trace_sched_process_exec+0x860/0x860 [ 3486.445320] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 3486.450439] ? __debug_object_init+0x57d/0x1290 [ 3486.455151] __should_failslab+0x124/0x180 [ 3486.459404] should_failslab+0x9/0x14 [ 3486.463211] kmem_cache_alloc_trace+0x2d7/0x750 [ 3486.467888] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3486.473447] ? check_preemption_disabled+0x48/0x280 [ 3486.478549] device_create_groups_vargs+0xa7/0x270 [ 3486.483502] device_create_vargs+0x46/0x60 [ 3486.487752] bdi_register_va.part.9+0xc3/0x9c0 [ 3486.492360] ? cgwb_kill+0x640/0x640 [ 3486.496092] ? lockdep_init_map+0x9/0x10 [ 3486.500160] ? __init_waitqueue_head+0x9e/0x150 [ 3486.505280] ? init_wait_entry+0x1c0/0x1c0 [ 3486.509527] ? __lockdep_init_map+0x105/0x590 [ 3486.514094] ? pm_runtime_init+0x459/0x560 [ 3486.518345] ? update_pm_runtime_accounting+0x1b0/0x1b0 [ 3486.523720] bdi_register+0x111/0x130 [ 3486.527530] ? bdi_register_va+0x80/0x80 [ 3486.531613] bdi_register_owner+0x5e/0x100 [ 3486.535859] __device_add_disk+0xebd/0x13e0 [ 3486.540197] ? blk_alloc_devt+0x2e0/0x2e0 [ 3486.544370] ? pointer+0x900/0x900 [ 3486.547940] ? __mutex_init+0x1f7/0x290 [ 3486.551939] ? psi_task_change.cold.11+0x1ac/0x1ac [ 3486.556881] ? sprintf+0xb0/0xe0 [ 3486.560269] ? scnprintf+0x130/0x130 [ 3486.563993] ? __lockdep_init_map+0x105/0x590 [ 3486.568500] device_add_disk+0x2a/0x40 [ 3486.572395] loop_add+0x75b/0xa40 [ 3486.575871] ? loop_queue_rq+0x690/0x690 [ 3486.579976] loop_control_ioctl+0x199/0x530 [ 3486.584301] ? loop_add+0xa40/0xa40 [ 3486.587953] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 3486.592897] ? loop_add+0xa40/0xa40 [ 3486.596545] do_vfs_ioctl+0x1de/0x1790 [ 3486.600444] ? ioctl_preallocate+0x300/0x300 [ 3486.604858] ? __fget_light+0x2e9/0x430 [ 3486.608838] ? fget_raw+0x20/0x20 [ 3486.612300] ? __sb_end_write+0xd9/0x110 [ 3486.616376] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3486.621928] ? fput+0x130/0x1a0 [ 3486.625217] ? do_syscall_64+0x9a/0x820 [ 3486.629199] ? do_syscall_64+0x9a/0x820 [ 3486.633185] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3486.637776] ? security_file_ioctl+0x94/0xc0 [ 3486.642197] ksys_ioctl+0xa9/0xd0 [ 3486.645661] __x64_sys_ioctl+0x73/0xb0 [ 3486.649560] do_syscall_64+0x1b9/0x820 [ 3486.653454] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3486.658841] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3486.663778] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3486.668634] ? trace_hardirqs_on_caller+0x310/0x310 [ 3486.673656] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3486.678682] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3486.683710] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3486.688568] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3486.693763] RIP: 0033:0x457569 [ 3486.696982] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3486.715913] RSP: 002b:00007f1259a65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3486.723644] RAX: ffffffffffffffda RBX: 00007f1259a65c90 RCX: 0000000000457569 03:47:34 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x2) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0000, 0xe803, 0x0, 0xcc00]}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0xffffffff) [ 3486.730928] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 3486.738199] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3486.745474] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1259a666d4 [ 3486.752747] R13: 00000000004c0606 R14: 00000000004d0a30 R15: 0000000000000006 [ 3486.772860] WARNING: CPU: 0 PID: 31065 at block/genhd.c:704 __device_add_disk+0x10e6/0x13e0 [ 3486.781401] Kernel panic - not syncing: panic_on_warn set ... [ 3486.787302] CPU: 0 PID: 31065 Comm: syz-executor0 Not tainted 4.19.0+ #319 [ 3486.794323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3486.803686] Call Trace: [ 3486.806298] dump_stack+0x244/0x39d [ 3486.809961] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3486.815190] panic+0x2ad/0x55c [ 3486.818407] ? add_taint.cold.5+0x16/0x16 [ 3486.822579] ? __warn.cold.8+0x5/0x45 [ 3486.826403] ? __device_add_disk+0x10e6/0x13e0 [ 3486.831000] __warn.cold.8+0x20/0x45 [ 3486.834729] ? rcu_softirq_qs+0x20/0x20 [ 3486.838726] ? __device_add_disk+0x10e6/0x13e0 [ 3486.843325] report_bug+0x254/0x2d0 [ 3486.847052] do_error_trap+0x11b/0x200 [ 3486.850965] do_invalid_op+0x36/0x40 [ 3486.854696] ? __device_add_disk+0x10e6/0x13e0 [ 3486.859294] invalid_op+0x14/0x20 [ 3486.862770] RIP: 0010:__device_add_disk+0x10e6/0x13e0 [ 3486.867979] Code: 00 80 a3 dc 00 00 00 ef e9 57 f7 ff ff e8 52 9d ff fd 0f 0b e9 cf f7 ff ff e8 46 9d ff fd 0f 0b e9 eb f6 ff ff e8 3a 9d ff fd <0f> 0b e9 e5 fd ff ff 4c 89 f7 e8 fb e7 42 fe e9 97 f0 ff ff e8 11 [ 3486.886891] RSP: 0018:ffff88018094f870 EFLAGS: 00010246 [ 3486.892281] RAX: 0000000000040000 RBX: ffff8801b8c965c0 RCX: ffffc9000275a000 [ 3486.899566] RDX: 0000000000040000 RSI: ffffffff837fed86 RDI: 0000000000000005 [ 3486.906849] RBP: ffff88018094fa48 R08: ffff8801d1cfe580 R09: ffffed003b5c5b67 [ 3486.914131] R10: ffffed003b5c5b67 R11: ffff8801dae2db3b R12: ffff88018094fa20 [ 3486.921439] R13: 00000000fffffff4 R14: ffff8801b8c96b30 R15: ffff8801b8c965c4 [ 3486.928748] ? __device_add_disk+0x10e6/0x13e0 [ 3486.933371] ? blk_alloc_devt+0x2e0/0x2e0 [ 3486.937560] ? pointer+0x900/0x900 [ 3486.941131] ? __mutex_init+0x1f7/0x290 [ 3486.945124] ? psi_task_change.cold.11+0x1ac/0x1ac [ 3486.950082] ? sprintf+0xb0/0xe0 [ 3486.953467] ? scnprintf+0x130/0x130 [ 3486.957203] ? __lockdep_init_map+0x105/0x590 [ 3486.961719] device_add_disk+0x2a/0x40 [ 3486.966565] loop_add+0x75b/0xa40 [ 3486.970054] ? loop_queue_rq+0x690/0x690 [ 3486.974145] loop_control_ioctl+0x199/0x530 [ 3486.978486] ? loop_add+0xa40/0xa40 [ 3486.982138] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 3486.987091] ? loop_add+0xa40/0xa40 [ 3486.990741] do_vfs_ioctl+0x1de/0x1790 [ 3486.994656] ? ioctl_preallocate+0x300/0x300 [ 3486.999085] ? __fget_light+0x2e9/0x430 [ 3487.003078] ? fget_raw+0x20/0x20 [ 3487.006556] ? __sb_end_write+0xd9/0x110 [ 3487.010639] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3487.016193] ? fput+0x130/0x1a0 [ 3487.019494] ? do_syscall_64+0x9a/0x820 [ 3487.023490] ? do_syscall_64+0x9a/0x820 [ 3487.027489] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3487.032091] ? security_file_ioctl+0x94/0xc0 [ 3487.036526] ksys_ioctl+0xa9/0xd0 [ 3487.040031] __x64_sys_ioctl+0x73/0xb0 [ 3487.043954] do_syscall_64+0x1b9/0x820 [ 3487.047864] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3487.053257] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3487.058202] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3487.063063] ? trace_hardirqs_on_caller+0x310/0x310 [ 3487.068097] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3487.073133] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3487.078178] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3487.083049] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3487.088255] RIP: 0033:0x457569 [ 3487.091467] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3487.110380] RSP: 002b:00007f1259a65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3487.118108] RAX: ffffffffffffffda RBX: 00007f1259a65c90 RCX: 0000000000457569 [ 3487.125389] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 3487.132683] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3487.139962] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1259a666d4 [ 3487.147275] R13: 00000000004c0606 R14: 00000000004d0a30 R15: 0000000000000006 [ 3487.155908] Kernel Offset: disabled [ 3487.159758] Rebooting in 86400 seconds..