P_CPU(r4, 0xc008ae88, &(0x7f0000000140)={0x77, 0x0, [0x176], [0xc0010058, 0x2]}) 01:28:20 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000280)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0xfffffffffffffe98) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') socket$nl_generic(0x10, 0x3, 0x10) sendfile(r1, r2, 0x0, 0x10000000000443) connect$l2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @loopback}, 0x2, 0x1, 0x0, 0x1}}, 0x2e) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f00000001c0)={0x0, 0xfffffffffffffffb, 0x8c4, 'queue1\x00', 0x1}) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x8, 0x1000, 0x4, 0xffffffffffff1e62, 0x7ff}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000180)={r3, 0x4}, 0x8) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) [ 2172.677792] FAT-fs (loop4): bogus number of reserved sectors [ 2172.689982] FAT-fs (loop4): Can't find a valid FAT filesystem 01:28:20 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2, 0x0, 0x1000000}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:20 executing program 0: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000180)='net/udplite6\x00') openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x4102, 0x0) fstat(r1, &(0x7f0000000080)) [ 2172.764710] FAT-fs (loop4): bogus number of reserved sectors 01:28:20 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x20, 0x40) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f0000000140)={0x77, 0x0, [0x176], [0xc0010058, 0x2]}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000540)=0x0) r7 = geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000600)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000640)={{{@in=@rand_addr, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000740)=0xe8) getresgid(&(0x7f0000000780)=0x0, &(0x7f00000007c0), &(0x7f0000000800)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000ec0)={0x0}, &(0x7f0000000f00)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000f40)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in=@multicast1}}, &(0x7f0000001040)=0xe8) stat(&(0x7f0000001080)='./file0\x00', &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r15 = gettid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001780)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000001880)=0xe8) getgroups(0x1, &(0x7f00000018c0)=[0xee00]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002c00)=0x0) r19 = getuid() r20 = getegid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000002c40)=0x0) fstat(r2, &(0x7f0000002c80)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002d00)={0x0, 0x0, 0x0}, &(0x7f0000002d40)=0xc) r24 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000002d80)='/selinux/validatetrans\x00', 0x1, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000040c0)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004100)={0x0, 0x0}, &(0x7f0000004140)=0xc) stat(&(0x7f0000004180)='./file0\x00', &(0x7f00000041c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004240)={0x0}, &(0x7f0000004280)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000042c0)={0x0, 0x0}, &(0x7f0000004300)=0xc) getresgid(&(0x7f0000004340), &(0x7f0000004380), &(0x7f00000043c0)=0x0) r31 = gettid() fstat(r1, &(0x7f0000004400)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000004480)=[0x0, 0xee00, 0x0, 0xee01, 0xffffffffffffffff, 0xee01]) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000044c0)={0x0}, &(0x7f0000004500)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000004540)={0x0, 0x0}, &(0x7f0000004580)=0xc) getresgid(&(0x7f00000045c0), &(0x7f0000004600)=0x0, &(0x7f0000004640)) r37 = socket$nl_crypto(0x10, 0x3, 0x15) r38 = gettid() getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000004ec0)={{{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000004fc0)=0xe8) fstat(r3, &(0x7f0000005000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r41 = gettid() r42 = getuid() getresgid(&(0x7f0000005080), &(0x7f00000050c0)=0x0, &(0x7f0000005100)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000005300)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000005340)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000005440)=0xe8) stat(&(0x7f0000005480)='./file0\x00', &(0x7f00000054c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r0, &(0x7f0000005580)=[{&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000004c0)=[{&(0x7f00000001c0)="708557a064fe2f0ba837a6ee7d542a9a11c89586", 0x14}, {&(0x7f0000000200)="4f47efbc022baa92809ce15ec91ab46911950b550623465b0808761dd2dfbc694bc587b784d56a53cd282d26", 0x2c}, {&(0x7f0000000240)="3c2bf2", 0x3}, {&(0x7f0000000280)="521d41a206b99cab8dca0bdf932900c9c55443", 0x13}, {&(0x7f00000002c0)="439ea92d888f87c5cba1740a5f002bebb2dd76001f2e82c3d804340f23fc854762a139396f757cd11c937886253ba31a84d105a71cad7dc2bbd6f15469b98161680f16e31179cfc04461f36494c7015641bdeea2c883770bc66c01499cfc5505094f748cd8932444ab7d272cbd5da124ddfb44bb09bfd6423730cb41283cab0f4ae818ab8d1606d78ea9ec449f331540ab6300f4d7c183327f6f70d3d3a17603a13f08df1d18d978534b5ba601f694f154dc30ad47d2b198a800e6b336c45d7278654f45586d1b398065d8be14ceadb5148f93bd", 0xd4}, {&(0x7f00000003c0)="2632748388ea0b070205fe6816eda90f536053e6e2e22cf33536a5d7cf996e18020ceceb0b505a39e3d58775f2c50f7531160033c9fa3acfc9ebb6bfe0233741d9766be192a2c4c9749d7171db065be5e4ceaa92a619145c6f7dcbe681ae89ace31e084e5e62cb2f438d91d960106deeb867d464cae594fe765fdf26c9e32330b279241648e1db770d2c1d6f", 0x8c}, {&(0x7f0000000480)="e90cb34da770d8ae97e306d0320ab1954f45d5ff66080b8e", 0x18}], 0x7, &(0x7f0000000840)=[@cred={0x20, 0x1, 0x2, r6, r7, r8}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @rights={0x18, 0x1, 0x1, [r1, r1]}, @rights={0x20, 0x1, 0x1, [r3, r3, r5]}], 0x78, 0x2000c040}, {&(0x7f00000008c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000940)="410cfe323341abc64a961c2e92066a29f1b84397df99b23c9aab3be7467d2ddb27cce29c69a314e5744242824c4ecf23aca16bbef7702590016885ccef1a5be43fa397ee812d28a8a0ca684215080caf586be9fb53ee2e76480cc729eaa31e8f1599dcc210e85cca6c5df6fa85400aa27f2d666bd94d858b43aea8e37fe4a907b5605edfcb471873fa21cda19b9849be25bc7ed08f49aa5dcb8ec6d6b41470cf51", 0xa1}, {&(0x7f0000000a00)="52b2bba2d2b57e8e294e9ccaf0c5010a48d43cf00ca8bee320c7e405f3cd0862ed7af5d134ff0e0a811acbf7daa2bcdf285d77d200fb902d4ed31b343c4f185c00573fa470118566edcb6ee6caff2061bc6c7fff8a8b4507270548ebd98cda4dbfd63c77da03d49b35b947dd0e5d467e970cffbf95f74c31be26c4fb9c7edf750b63229c47a2ae40e5ae931b84362043f05086f71267777827241d6991c5a378aae27c76ea3b4c5a54640d21f4b5d5adefb5f723e26f9354f8d5e830e79a445f673580d13a1281649a5c7e25ea", 0xcd}, {&(0x7f0000000b00)="6ca28e76dec9cc74c56bc1b92c2c11847428ace85673f235745844b975a418c6b42f11fd07f8982c81c2612ce2556ef7f4a5928c38429cf3f424fa86e83a9f7b1bf92293506999855e5c584d5f400bd609aedc477e6b569de40bd0c8a217c15e26f7bb953d6c8a906f2ec5b8b465cf1224f161044295f2b6fa55a037f04435c9cf062d9e1df4eb5f75df2910a429cacd71ef1b879990afc83023393fb004498a0168ce90769a9cd6bb9f", 0xaa}, {&(0x7f0000000bc0)="5fdbb7b1cad9e61017e21e581aa190e1790ec6e1dc32bd1f0c5071cfaf60b9c392a8301ceee47d4ac5b24d13cb2bf8ab36839301ebf822d70d0ab65dd8064f2df2e708ef9b7c41baff9e255b63fedae92a3124f819711a7c75f9c7e1c837a6f2cd97e64e808802b8204b18c2958f6e5a97ea08f499b8ad51dc40e150d03d845c0c939af4ddd7b2c7703bad348e71ba98cb51c2e6221cda99006c869612b41020c5fdb06478c38ff147641ec669fed87bc5abe4248f3a1ff6264ed5818d12862800", 0xc1}, {&(0x7f0000000cc0)="3f6ab6b70b0e2628b8ecea7532365e5ccf4e2c92096ca7ca6a25f1cab812877c8aa8ff539c8214ad12a91ad6a53413a1addf272f5873d09015292c0cb9673704f63a038f85a41df0879657867e3e0414289cd9e1a14430f1734edee0f9d60e1e2081a2cfa4723d3d3e962bb9e3f3659c9cee6e088fccda525bb605848683436a3e62d326aca8406fa5b514ac74717f15ef5b113906315c4c1f5e9a58c89f3d871bb6b9bd2a", 0xa5}, {&(0x7f0000000d80)="74e4bbdc12118736d4789b6a3098733de0fe2133fd0f95eb700fa3e89e3694465df1313932b98250eb00ba225ac533831dbe5854dc2ab8f766f456ed1a6406e315379f0b9d706952f3efa158bdbb2a8a88222a048d4a1f0dd1789093e85bc22ec647882a41c6abbdb73d72af50378fe88ae5ce40e4", 0x75}, {&(0x7f0000000e00)="ee5b876f", 0x4}], 0x7, &(0x7f0000001140)=[@rights={0x28, 0x1, 0x1, [r2, r4, r1, r4, r5]}, @cred={0x20, 0x1, 0x2, r12, r13, r14}], 0x48, 0x4008000}, {&(0x7f00000011c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001700)=[{&(0x7f0000001240)="57fdfe8c9b670ace1085ac38ced86dc28264dfec887774882b224aeed56b281c258976edb03f14678e801ab9d9d5c50d9c848fd62ea74e85422e761a52c2611d7dac3e68d8aa57b7901180e493e7b0f354936c4cac1f24213aa91dcd2dbbbac080209781f8a782860123d1698170cce6e145cf1abb296ca284beeadbf5a7c2a4d67ebf19f67cc1ef963fb9c57ec96cd3caac926c4ba394bddcba89956905e2eafd6c1d59447d9a91a6104c20c9f487dbb5937380d511d329", 0xb8}, {&(0x7f0000001300)="442e0f40ce0be84a6edfdbce06c6a1cdfb9eeb83e05c77e5eee706cc3a5abdce9a7743837e403ecb38a1b67ef3b5ed3244a2bfe9dc7c22a9ac8375f7359e3f30bc4b133b1aceb1f9c58125e08997531333e053e07188e81328b8a7207206157ce63b5e5d11e072ec75440ff5b38c404be7c8b70c6d4d17fcc5cb9138ea75ada19b5ca87a384ad9c22501e88b42eadfca64895b512df8cf08f56e5d31dbfbfa4fe3b7b9935934", 0xa6}, {&(0x7f00000013c0)="61599395a14f9878de67c1eb1ccc40f51c516f21c4893e88233e9b81c657bab3d698", 0x22}, {&(0x7f0000001400)="bb93627660d75b17135ebe3a2a79d18581b0c8696767a367110a839d85d54d3f2ca6894f8b5fa81d8089", 0x2a}, {&(0x7f0000001440)="5ac4499e764077b60eebe298a8ab1fe0af43926c8b95e687cdfcf895706d98e3681825d472468c31d4dfa38b3e2c76114893e617740b0c2694ba0e28c8b107e19aa81dbadb8dcb12eee63c49e79abab0df2b631fde4eb6b5ff5efb3eb859cddb065dc758d1089072dad6c96449f1f4fb74380035d6085eab7873252c282dc10165861783b678c7378c64abd3a9a704eea7fb8f8af8603af363", 0x99}, {&(0x7f0000001500)="401160566d3ca73e98eeec8713a92bf65ca35c782c4261a7331ebc247c15be14b1c199d5e1bfb8ec3e6de40783e67493b9f03530b8fea2de42185de94b3706552ee95b241d7eaca0d6e525d77e5407557c376992e10ae2056543b01a5abc36d45db7a3c2a710f6", 0x67}, {&(0x7f0000001580)="450a4ce0c8b5028183341f5be71b07f8b1439df031b1b363d48c8234027d48813da82ba37ab8af67e95ad3ff57df9af10ff9049f8c35f789d00ace244e6facde10ef1091262c810d2ea17341b96adba48253eea379b0cabdac8ed9fac409630c5ef6830b4646ad97359be2cdfe95546ff41453374daf5230f8c036cff5cecf4d4ce12ab8b1f164c9e33ff51b734ac75937b014088755802d1dfb24453abf474473760d3130192cc13640df0490ba717842ccf99c923f1e144a7deb3257dd8d6f7d1a365c88aa8af5d08f896eff04d40624f174d1", 0xd4}, {&(0x7f0000001680)="85816e1b2dab44799fc0d8219611c97b2fd2e666075e77045f40770576240f4aeb949a6edc0532e91dfd43738f816ff6bf10365748608fd6d83b06f668ac08aa1ed3f356e4e426a32a364dc56347ec658afb100badf095e0", 0x58}], 0x8, &(0x7f0000001900)=[@cred={0x20, 0x1, 0x2, r15, r16, r17}, @rights={0x28, 0x1, 0x1, [r4, r5, r2, r0, r3]}], 0x48, 0x10}, {&(0x7f0000001980)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000002bc0)=[{&(0x7f0000001a00)="dadb73e09c38e17aa26bab7ee712d54fd7936b259751526ef03addfd278765180efdfa73d40970e873fa9d3d9da75d61c202eb1da3c200dc301310bfb6eb672ee6eb1bf68d5b88b1d84bf73615a0f1b67c9b3eb05520a5a7185d742969aab8a4a5b392245641fd51dadb", 0x6a}, {&(0x7f0000001a80)="0e45f666f1e75321316c81b2a764c0dccf843851a542795931a332309095f1f610359e", 0x23}, {&(0x7f0000001ac0)="bfed6bfb66f9df4f8bf2f8c2273e01138285ccb975d5c0af188fb74dc77a0596606a0b983410df7d736d0e5ee64c581db333d3410f4d5c57b5b74f6c4bc83e07b65060e315328c67c5e44ed8e7285d96f7807083f08530772090d4e9afd1dcf3bfcf6d34511d9da04f9d0ce73b61ebd9a669802cba15acd31065a28b9448eaca8472c3656387d10d1ec0a07db0f35ae65ac911011c2c9cc9b7f7eb90c9256cf37d7f1a4f1e80a8967f0b9c3cb2d1b7163e54f072530c29d4478fabba367b33cd45ae3f4dec7bbc8aec5189eab80fb44c52b9dc7525d43659986fa46affe9182a", 0xe0}, {&(0x7f0000001bc0)="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", 0x1000}], 0x4, &(0x7f0000002dc0)=[@rights={0x18, 0x1, 0x1, [r0, r5]}, @cred={0x20, 0x1, 0x2, r18, r19, r20}, @rights={0x28, 0x1, 0x1, [r3, r3, r4, r0, r0, r3]}, @cred={0x20, 0x1, 0x2, r21, r22, r23}, @rights={0x18, 0x1, 0x1, [r0]}, @rights={0x18, 0x1, 0x1, [r24]}], 0xb0, 0x8000}, {&(0x7f0000002e80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004080)=[{&(0x7f0000002f00)="b69928eea5819c96ea30ac4cb443c47c0acbdc19a1ea59f011a6531e7805641dbbfafceef8a0d6724d3d33753589fcdc57d99dc4f3fddda4f28a740909d9bd04c61508c55f4366e0ce7db358874c597aa2cd03ab3b9af1ed29a33680449f19448464d9f2eada8277fc36d084e3de5d100ccc2ecb5f78438bf2571aa510abece3b4524ab1ccfc342ed4e075fa766e74a59b2d45c9213e5415d5075087cdbdfbc3e07f4f0775bf1efd5d654fdcd88de4a137949602a868d43d5cc9444bc33c5f16985c0403f8ee65b20ef98c256da3d7b5b0f99b446dd511429f4e0c6d2be965", 0xdf}, {&(0x7f0000003000)="e4b40ed6d3bb892be8f5db1acee4b69d71947f182157503c6ce4edf0f77e9a39424a57336aa2ec865d6bd91c134d2d66670d3aa2776238ba021b6b6f713f80476d7b9676500e4b64cd09a660", 0x4c}, {&(0x7f0000003080)="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", 0x1000}], 0x3, &(0x7f0000004680)=[@cred={0x20, 0x1, 0x2, r25, r26, r27}, @rights={0x20, 0x1, 0x1, [r1, r3, r3, r1]}, @cred={0x20, 0x1, 0x2, r28, r29, r30}, @cred={0x20, 0x1, 0x2, r31, r32, r33}, @cred={0x20, 0x1, 0x2, r34, r35, r36}], 0xa0, 0x8000}, {&(0x7f0000004740)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000004e00)=[{&(0x7f00000047c0)="eca34eca5a086c7017beff0638fea4d2f9750cae62bca0e4fb36e6b709cd0d17be47bcf34af06ff99b1172e7e3c0", 0x2e}, {&(0x7f0000004800)="4079a0bd6510ca94d59e736a57250f8992133ef11293216959d20fcc295170ab7b1644cdd5527f46291c895f0427cc3486522bd17eb93bf36b06fb42fda05a2b078cfb8c15245bd8e39924ff612dba4526b085d781ce3b12f6f614c94ba9f2c8c8479d939b1d2178d5e9461ca9af38c1ba17f7e7367d39fb88168514c09fa5a2e053e9c604f704c558704e634d35d9814dc16c1947", 0x95}, {&(0x7f00000048c0)}, {&(0x7f0000004900)="f1f5fc6857191df88cc989520e6fea5b28cc72eef55ad4cac0689902fde68d053f1cd817b8e4c0fd041f9420718ecc152546fcb5e4db11b309012329fd2ba215ac846d9fc294462e6bbb5e60d643388b14977ab71f14eeaeb1e0e58241821ab9e67a0a4f2baa84d3bd1867935027edb42fb5d828c30fb3c85011866d9d77cf3547bb6d61d35b259ef382aac5d26562b782f6c04993e603e357f794a51a6d7832915e9faa478f3e9cf97830277e76d6e58f13cdb1fdaa85bb13269400c57d69964db70a6912", 0xc5}, {&(0x7f0000004a00)="cc73b8846aeaaf68f17ed484e1f0b4fc723e7f3f6c50b6fb0dd1f045ea6062ca259656f74689a1c9af7fead3b9fe4d5a87161edc129ecd77933fc4c726978a93513d9d74cd5cdb637badc54184eda020ed040efb0236de1fd76383adeb0279dbb81df16f4efd4148f60f74", 0x6b}, {&(0x7f0000004a80)="94ef865bf7e8fc58305a8c4505acb2f7ac7278bc2fcafe1a076557fa2d397897aba479c65155e9f2afd0702d84ba182f4e5e498b512d5ea4f2643a7da547b61adda4b3c51f7cda62bcdcda51d7c00d76d9f4fe0a61398fa29506c5b7ea5a0422267fa760f2c284d16b9bb627c9b9bf9f9566a0f7db90dc002482ff9f765ef20383888c6972cb39f05db9a5745b62f2764a422023f129d564f0d4ee73c693fc2691727e5f9522dd3df97b9243ef7f00f73482d1c5bec66989d916ff359d24cc3c8c3348ded249634d84e3c650d916da46f9d970ab71f7bfacc2ccd9c1f909eed71c62151f", 0xe4}, {&(0x7f0000004b80)="c471a5af25a08e0acb8b34bc0a2586d1eb7dfbc8879b456803fa60123657edf86582550996b5171f38ce5af47e60bc406ca793a7c11e86fa7464c6b92611783611e0f95a53638552968f386e031860c5d34dd79de31c7914edfa0ec6e28d4e14ecaa328113955d2b7717e2", 0x6b}, {&(0x7f0000004c00)="910ba677e222d607bc9c1f29e3f521345e6531b8428b3256adef4b50913b05c1c905bd5d803331dfe8cead4e4646857a1d12f7b90bfc0aefa20877d740a1f4fcc3f326a58d6e7e9c1e71a63f9b54a7918ea0a49a378f5bd59aef21c485f42925688740f47c72528c826603db8c79666bd833e2bb6b749ee0e4b40ad985ac790650bf393214f79301d6c060010dff04ac377528421083e32b0b5d6f43e9d5cda3e49a1a2d632483aa827ebec8fe723b4a92d687e78bccb8cc85a6cace1ff6682d9d77992f32d4f4696e166d925571135a725b0ee43bd26c88451d8408b504569adfd512755ba7", 0xe6}, {&(0x7f0000004d00)="73f3b77d3c7dff1b97a3f2253b2091087c8ec8b32cb852dc4b5635a141f5527942bf679e3dbb2fe2ea3b0003272783bab44992a2a024ec32796c970f3db96cce449af0ca578c5baabbb48dcdaeb7ecf7181c0c97d197b3d9c2055bf488a151a5bce61b8a06c071d625af037fde463eaa944b9a3da6b5e0203136ab5fee7ab5dabc15a16ce6e7ebaa3af3dcaba33c0c4b22fb6a7b8455f647d95864bb0beafcd2e8379366ee1f453f411df3d88852f6f44d0ba32230f12d819c66fc30844a772731eee1c1496bef81219496c0a61303aa7ab3409ac43002b41bb09de6c069dd98c232fe17fec9b2", 0xe7}], 0x9, &(0x7f0000005140)=[@rights={0x30, 0x1, 0x1, [r3, r0, r0, r4, r3, r3, r0]}, @rights={0x20, 0x1, 0x1, [r0, r4, r5, r2]}, @rights={0x18, 0x1, 0x1, [r4]}, @rights={0x20, 0x1, 0x1, [r0, r37, r0]}, @cred={0x20, 0x1, 0x2, r38, r39, r40}, @cred={0x20, 0x1, 0x2, r41, r42, r43}], 0xc8, 0x4}, {&(0x7f0000005240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000052c0), 0x0, &(0x7f0000005540)=[@cred={0x20, 0x1, 0x2, r44, r45, r46}], 0x20, 0x8000}], 0x7, 0x4004040) [ 2172.834417] FAT-fs (loop4): Can't find a valid FAT filesystem 01:28:20 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r3, &(0x7f0000000040), 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) write$cgroup_pid(r5, &(0x7f0000000100), 0x12) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') sendfile(r1, r6, 0x0, 0x10000000000443) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], 0x6, 0x3, 0x5, 0x2}) 01:28:20 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:28:21 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$GIO_FONT(r4, 0x4b60, &(0x7f00000002c0)=""/34) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000040)=0x80) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/access\x00', 0x2, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10077, 0x0, [0x176, 0x4, 0x4], [0xc0010058, 0x2]}) r5 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x2, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000200)=0x36) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000240)={r6, 0x37, "cd13a263917335b9b50d12f888b2b21c510fdccd8c83c4702ec84b42d3ae8facc5578acc3a311efb0e78d25a97423d8472069a01cf3cb7"}, &(0x7f0000000280)=0x3f) [ 2173.194412] FAT-fs (loop4): bogus number of reserved sectors [ 2173.237003] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2173.365957] FAT-fs (loop4): bogus number of reserved sectors [ 2173.371946] FAT-fs (loop4): Can't find a valid FAT filesystem 01:28:21 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x1000000000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:28:21 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2, 0x0, 0x7300}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:21 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000080)=0x400, 0x4) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x77, 0x0, [0x176], [0xc0010058, 0x2]}) 01:28:21 executing program 0: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000100)="2e00a7af0ca0fed7f9b00723e3872cdbd43e43f9250aa857a4f68d74299940fc7dd42090e0a3bb7679f9f7fe101fdc8603ab9043097c7504ac2f3431831ef199dcc069f83398be958328021677e8e230074f9e6c5de077ae5a0f23cb0f4a7e225d4a9e05ac6b2871a21eb02cf7d94991bd5c1e6c2f70f6926f477083b341c03cb9be8ac16b28c45b13821af1bb77") fstat(r1, &(0x7f0000000380)) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x157}) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000200)={r2, 0x5}) write$UHID_CREATE(r1, &(0x7f0000000600)={0x0, 'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000240)=""/191, 0xbf, 0x7, 0x6, 0x2, 0x6, 0x4}, 0x120) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x117, 0x100a}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f0000000400), r3, 0x1}}, 0x18) 01:28:21 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:28:21 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2, 0x0, 0x7fffffffefff}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) [ 2173.896336] FAT-fs (loop4): bogus number of reserved sectors [ 2173.913673] FAT-fs (loop4): Can't find a valid FAT filesystem 01:28:21 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='.\x00') fstat(r0, &(0x7f0000000080)) 01:28:22 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2, 0x0, 0x730000}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) [ 2174.009681] FAT-fs (loop4): bogus number of reserved sectors 01:28:22 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x10000000000443) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0x1cf, 0x5452, 0x9, 0x0, 0x1, 0x1}, 0x3}, 0xa) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) [ 2174.072903] FAT-fs (loop4): Can't find a valid FAT filesystem 01:28:22 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:28:22 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)="3a03ca3c18212eab7d9800000000") fstat(r0, &(0x7f0000000080)) connect$netlink(r0, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x340}, 0xc) 01:28:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x80000, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000180)={0xffffffffffffffe0, 0xeb1d, 0x206, 0x0, 0x80, 0x0, 0x3c1, 0x7}, &(0x7f0000000340)=0x20) write(r1, &(0x7f0000000400)="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", 0x200) sendfile(r1, r2, 0x0, 0x10000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000600)=0x3, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r6, 0xc008ae88, &(0x7f0000000140)={0x77, 0x0, [0x176], [0xc0010058, 0x2]}) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r7, 0xaf02, 0x0) [ 2174.405069] audit: type=1800 audit(1542850102.398:307): pid=24491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor5" name="file0" dev="sda1" ino=18123 res=0 [ 2174.436143] FAT-fs (loop4): bogus number of reserved sectors [ 2174.442680] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2174.672106] audit: type=1804 audit(1542850102.428:308): pid=24491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir187456500/syzkaller.OXsPvz/2539/file0" dev="sda1" ino=18123 res=1 [ 2175.373899] audit: type=1804 audit(1542850103.378:309): pid=24491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir187456500/syzkaller.OXsPvz/2539/file0" dev="sda1" ino=18123 res=1 01:28:23 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='.\x00') fstat(r0, &(0x7f0000000380)) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000080)={'dummy0\x00', {0x2, 0x4e23, @remote}}) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x20, 0x4) 01:28:23 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2, 0x0, 0x100000000000000}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:23 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:28:23 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="7a00000063ea88cc4e4776d6ed29f9a7bbf072e0fbea467a5e8d332a19f9e08583e9187c5f9c5aa0f3a6be415eea14e5f7f632146114abfba14f7b1a8e914eeb9e515b6fafd4d80f4b1163afac6d0e4381e0c2ff9a16921c383cf8350476945850b4a31a6c0c6a1f177d6498dd855d62f15c51e754118c5187dd9cb9514daf16ef59efa4aa99f6d2086573c6cbaad849576aa874d9f44a0c1792d205740ae76abebd1f8755d40b8c25927a21628f360c474d130cadc2822ed80520271bf702ae258b583d2e7f0f72f04ff67f663d6a10453c63765ba99ad698b84314e23fe7dcdb6db61102a003f4b9b25fdac94c5f4478a7c7dc7d451fe5cc"], &(0x7f0000000200)=0x82) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000240)={r3, 0xfffffffffffffffd}, &(0x7f0000000280)=0x8) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') sendfile(r1, r4, 0x0, 0x10000000000443) syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x5, 0xa0c00) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) 01:28:23 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0xfffffff5, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:28:23 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0xc008ae88, &(0x7f0000000140)={0x77, 0x0, [0x176], [0xc0010058, 0x2]}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f00000000c0)={@empty, @broadcast}, &(0x7f00000001c0)=0xc) ioctl$sock_ifreq(r0, 0x891a, &(0x7f0000000080)={'veth1_to_team\x00', @ifru_data=&(0x7f0000000040)="23e2b6baf76d8199c867722a29d3f007b3088cd0506e4d1689f9d49220b891f2"}) 01:28:23 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='.\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x13f, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000300)={0x13, 0x10, 0xfa00, {&(0x7f0000000080), r1, 0x2}}, 0x18) fstat(r0, &(0x7f0000000380)) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) [ 2175.768820] FAT-fs (loop4): bogus number of reserved sectors [ 2175.798894] FAT-fs (loop4): Can't find a valid FAT filesystem 01:28:23 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2, 0x0, 0x710000000000}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) [ 2175.913014] FAT-fs (loop4): bogus number of reserved sectors [ 2175.918874] FAT-fs (loop4): Can't find a valid FAT filesystem 01:28:24 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x40, 0x0) unlinkat(r2, &(0x7f0000000080)='./file0\x00', 0x200) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$nbd(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xbf) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) getsockopt(r0, 0xffffffffffffdca6, 0x80, &(0x7f0000000280)=""/109, &(0x7f0000000300)=0x6d) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f00000000c0), 0x4) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f0000000140)={0x77, 0x0, [0x176], [0xc0010058, 0x2]}) 01:28:24 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='.\x00') openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) fstat(r0, &(0x7f0000000180)) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="66409ccff480534d281793fa9cf583010b3d2072633def790522ea1386d87eb855be3bb2ef4a3b2c134be6a196d51af77356c1a386529983b3694f5eb3b8fd8d3e4f90ce34fbc9edd45a18c351e15ba15ec7e805c8135e17c27711876404dcb54523e65fb7451ec3202983b877e4723db0adba075199b3e589ea3bcd538f0a11dc85e8ee30265a5d9b1331ebaf9f85e33b5832dab6233ae3d9fb62bc1bd581c10943fb2b7121c4638054553fddc7a2dc83cd664513fc1cc30c99c80619d38624f477519765a8fc250bac727e1686d95351468fa8433189a8638c7bacc58c5186efabe0f423b0a49bf1", 0xe9}], 0x1, 0x0) 01:28:24 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:28:24 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2, 0x0, 0x11000000}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:24 executing program 0: r0 = getpgid(0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f0000000100)='.\x00') fstat(r1, &(0x7f0000000380)) 01:28:24 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2, 0x0, 0x400300}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) [ 2176.348802] FAT-fs (loop4): bogus number of reserved sectors [ 2176.368572] FAT-fs (loop4): Can't find a valid FAT filesystem 01:28:24 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/enforce\x00', 0x400000, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000380)={0x8}, 0x4) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x77, 0x0, [0x176], [0xc0010058, 0x2]}) [ 2176.433582] FAT-fs (loop4): bogus number of reserved sectors [ 2176.439612] FAT-fs (loop4): Can't find a valid FAT filesystem 01:28:24 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:28:24 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x21000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:28:24 executing program 0: stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_rdma(&(0x7f00000000c0)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000240)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@rq={'rq', 0x3d, 0x8}}, {@sq={'sq', 0x3d, 0x5}}, {@rq={'rq', 0x3d, 0x7}}, {@common=@loose='loose'}, {@rq={'rq', 0x3d, 0x2000000040}}], [{@appraise_type='appraise_type=imasig'}, {@smackfshat={'smackfshat'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.\x00'}}, {@euid_gt={'euid>', r0}}, {@obj_type={'obj_type', 0x3d, '.\x00'}}, {@subj_role={'subj_role', 0x3d, 'wlan1keyringvboxnet0>!-.vboxnet0'}}, {@dont_hash='dont_hash'}]}}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='.\x00') ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000000)={0xffffffffffff8000, 0x3, 0xfffffffffffffffe, 0x0, 0x80000000, 0x2, 0x81, 0x14, 0x800, 0x4, 0xffffffffffffff0d, 0x4, 0x0, 0x3, 0x7fffffff, 0x962f, 0x100, 0x1, 0xfffffffffffff000}) write$input_event(r1, &(0x7f0000000080)={{}, 0x4, 0x1c0000, 0x3}, 0x18) fstat(r1, &(0x7f0000000380)) 01:28:24 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2, 0x0, 0xffffffffff600000}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:24 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0x80009, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x2c) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r3, 0x40045730, &(0x7f00000002c0)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r4, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_IPPROTO={0x8}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e21}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x2b}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x3c}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') sendfile(r1, r5, 0x0, 0x10000000000443) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) 01:28:24 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x77, 0x0, [0x176], [0xc0010058, 0x2]}) [ 2176.780198] FAT-fs (loop4): bogus number of reserved sectors [ 2176.803038] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2176.869464] FAT-fs (loop4): bogus number of reserved sectors [ 2176.907850] FAT-fs (loop4): Can't find a valid FAT filesystem 01:28:24 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2, 0x0, 0x507000}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:25 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='.\x00') write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {&(0x7f0000000100)={0xffffffffffffffff}, 0x4, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x9, 0x8, {"44f1d8cfdc793dd96752227838253709"}, 0xdeb, 0x4b1b, 0x3}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000200)={0x11, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x18) fstat(r0, &(0x7f0000000080)) 01:28:25 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)="6d73646f7304", &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:28:25 executing program 0: r0 = getpid() ptrace$setregset(0x4205, r0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)="510ce234ce90a3e1d41212b8583eccaf4d3ad0e7750cf0c65955a9dac4e2386f7ceb845e6c3cbd119b05668f2091287766141e7a6e11a42a7032595b88a5336d406ba830c878bf3fa23f5fdb2c6d68ad2ab2e271df4e2b962ed5ff0d1b212721f30df41fdefffec2c1ebc7f5a65c48a7a820455beaeb3cf6128ea3ae3f1b4373ac7663f341b208dbbb3b1a7a8d363e1df30880d0c4f8456799f384df6a3db29b3fef30fce4b2001669dae1456ee7ee7201a670c16dbefbd107b27acb4dfb615d33ad773ca42465e6344a0e1f2139f26483db570d402fafc60080bc7f803cc9a85c3dbbf5c1f0c0c8b5d3dc15048b116399293ca1c0ee41", 0xf7}) r1 = syz_open_procfs(r0, &(0x7f0000000040)='.\x00') io_setup(0x8, &(0x7f0000000180)=0x0) io_cancel(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0xc00000000000, r1, &(0x7f0000000400)="fd546a9ec8abcfcf1e62de1bbb72864fcd887048cb060b4868eee07352cf8ee9a497a5692c05788dcec274e633e4a3624bfb7662a0df2110586b76b0fcd0b5a312a744674eb1deda41a4a48ac377fce6d358f4e13050ac2378b691eca05e9d16cc29a9e199a41b32c1cc643e919261f37c3554bf412baac6d1b4c1575b0f5608843db61c8beb6c403f519aa69ecbaadb1a0ffc2bde79d9bcc9ad4901dbb3d7480393f3f450f794f84afd0450c17b44775bffdb9b1b42b7c56959c7ad5d91b5b5fbfb713cf014d4a6e33c51c3f040183df8cb143d6897860e072ed65cb3fea7f3f4efeef711e1d4a3ee823bff215a80541dfde38c3f8ff34510b7555c945feb688c00e3655bc7af42b5e36bc424ba453cb407a6f707493eb7cb4d8f4b29724d9e76c479e44d2c6c79d4fc761fcb7df077e6adf0bcdda56022ffe22c422f34e57e37424d8345d5adb2b43a3f88c2b428f36fc1f47e373626eacb07fef9349d3cdf1f42d5df658fbce8e08a5197522f7f2e3e4390be0013122dd6ec3c9797ec1b0627e975bf6871f42285105600b6373bc370316769fffdcbba6bd67f6fa6ace7cb023c02091ffd58d9bb8c6f34c8d1593391ab3c133aace27f35401092f470bb5fbbcfab51ff0f8369ce451403c8d71eebf419ee79bcc1d9ccec4bd64447d0aa56f0930b036d657b390f1d98b13ef96c8ee166f09567d34e939fc08aed79eca87cb57b3191037c3418abf7eba06ab481245bf183bfbc6808def17be4ec80a33b82065d63e4b2fc0a2e78930362273e77d8b0da5ea220eeec5bbb6dcea1de6cb4af7003005bc1f905ff5b21415d7e3a14ec1dacc445560d4db7b6263c8196da312548da60bd2a0605454ca923b96bbaed0968908aa0e671d725d7c1fda366e01823c6e4adbcc478a0e1f04bd26f7b3b4e66029e4c169e89824d8dfcc152d06bda4e6ab499b51addd80c5e0f6043e7a293ba23f71e335acb21d08f4d78109366e7255c3b8cd5b855dea34b997fa225566437940f8eec7da9d5541d8f9c6f121edfa229ab357a652901191d86f17410f1abc566ecbee97d472145e7581f746415426f22d45b408dfbcb9991a3114c68be64037b91174dd3bb429e7173a54831206a7d1fcc2e74d3900feb1a423fd52c99e0334d1a9acc7b390b115d4ff0b660cf316bc79fd17084f592dbdef66deffc5fc1d1ac548f40ebb53f16b6b17ed6bc6aa2a1ed0011200c054f039b21eb603cdc17e62deed1670669bed092dcf54c2bb85963cee174d8cd53ebac214de1c9215758ffd1b6a08a62249aa0c31c8d02a460b986a94f2191ec4b3c3687cd848306f95f4a105f33d0eb41c8a3135c0994e12381b3fcf9d784c216b4025be0e4ca3f13952569edf98ce8ca83b58f8731168e405d8b210acff65e71cc5b65749053a64ee150d49014357730e46def9df69721f7bcad0269f6dee7d520dcd1578de845bd49d31a5fe895ec6f7b00daa13605bc241e1fd227e3165c562410e386766d204f0c5e960e46eb35ad5dfc37f08786a5d7f0d0c6591e0731f7731a2ff6002fb0cc5e13d2b8343944d388329b68e4e6dca4dc764cdee593bd1fcdeb0ea251e98b3e8ffe9270c0ce8814e3407f7f0e6c03775e1d4390d3846410983764963f1d8ba391093d2c8395c7b9aea61aefeec036d506c802d21162846823f6c2047a0c3cb84dd7326e94789f3903f25dc44f1b5e381ea724701d5dd7f186154d3616754fce2ce9438799bdf59a3b8bc358844bab58365b0916aabd0589ac730162f7ac52dda75f296e206e80e0bf595726c661bf819d4c046d452f12503c427d50e0dd3ab4b1e0a5209d50aa08a6af294967204e2ce3a60ea634a0ebcb13c79a59445c5b205bb32f611460c032ab42a080f5898c00f1350acc88ac1437c67a8328659778509d56bc85439b4e533d5a734f6a6445f23c81e82df8c234106c19d5acb44da540a85808632bb84fffbe3f5fb3eb8209f5bbafcac1e4945f9800fe83be553a05e4aaac38de5d4fbd6f22f586544d9fecbd0e58a80e9c088a59958c9d87dfea20f7a7b31c9212fc18c47edaa741db3777df593ad8448ea17dee3d9e1448248bf7761e4b96f5d824c696c219f14383422ea832facab85f6610e1475dd8a521a5a303570811aaa10ce1a02a6f8f8f649b0d0c6350af4bff0cbabd164727dcaacd5a1fcbadab373e3170daf4509f87e4c100bb67aeda7ca460675e0a01900e14a734e3524d9308331d6b6e81a24ecb70d29cb8ac7dbdfe5873d28c8d10b630d39cd86e50c5c51e0100ddf8a4b5187ac0868f35fe9fc0b3642a716f300eb10137af228ec656e0d0c2e531b01046bb0cb27171c3607b7feb7a880e7310a2c5d6210bd1155451bd11ac1a41bc9538ee0a45fa12f6b4710557e68e47308a52ec8684fd6c4ad1e010dd48e1db128b30f5816ebb8ffc6df4920126d01ce6af8c7cf82a667506ddecab981217b6602fbc1e22b42802559462dc6a793c355ecd27af30600ee5bfb26f274e4d2720bf88614dc765577ba9cc5ada220d26740596ec740a9ca1545ae396bf44c39e46bdaf740b76f7090679c7ef1ec9941523f7ef4287b6fc34902da5ab3573399afaa3eace591459c0006a3f5c643dc538a717e183054678c2b04418d5ebde6dd85391e6e5367d92931d75ba54320b4e13501a3b2205f857fa3b4116a3bf5d030e33171f5a58192186db0534d4fd1571adb14477ab9fff690d91cc768fdd944b3abab9b6b022bb5fad0bc24b5e1e45bec0520737186153a2bd4baf4d71f748f234e2848bfea256ebc9f0a8cbb90e099f7cf1482c61dcaace13fb38547658bdb976d0da250e3f687a345b30b6a8ae902d72afb65eb37b735dba0cad01cd413ab937ac5854537bfcd04cccf4185b7ec456d781b54b25e82cb2854e225de8eded1f25eaf3df3d2e4f411380ae95bcda4de5408d835cc4bc3001ee7f25c55de5f6ed5babe510e0850af82bddc228706395da4a7c4200c3737bbafdc4587350060549a7d9d186711269e285ce1394c721ebea27966ad80dc2e04becb2e923668c713dbfee456bdba9eaba58b6a3eff01f64bd6a6d3d18af686cc0556a2e53c7dd3033dc1b33e7c67710d205c63d4a348e35071ec648ca6ce1f658381c5b88107d1f469bb9f7bd4f9221da32f2494e0d245b7364a412933cffd9050d58b6ffab8ad0efd12d028fe86e8e1b40d65cb3d461d245c8e9e07cebe461734c4ab08273ba5aaa6e2e45ee4dbdc06e6fb0c11f072427c9006836aa40da00fa3d979dd52938c6a532ea0ce541a756e74281bc17efe914bd3b0b997f5c3658b5b61a5e9b4054ed649ca1bc407ae7715904441487a2c85f3322ba790cc011e619deea90324fbeb1bdfa0904a34e8bd9d235a790b24d73142cbeac6fbefa7bae0a36dfb2aa530ce58931e545dee483bae9516679d84230218660b6dd87f291a51f4a865c4e256359ffb80d580c72c4c22dc0c0a98ab705a269daf4fdb6ed0cefd28249df133512fb0d5aafac2e00ea738976add7b0bb1ccb3396b6f419c347ea1c157308ec0e6a286aa67bc36ceb562160e1138c8bfcc1fb7ea116a4ad2ee8d79cad0d4deb9068ad0dff829f919fa6440e7e0f950ea0b9781bfd76655d50a1607eb91efe331650175bab85f3354c97c5c9eae56256e333d843967a166ec2eb7669e37ad6326fada38a8d1631a8bfc4b18c11e6d00649d1815f1452006fbbee452b65b246e1c8dc8196df7a0fcc88bce133e5d203ebb11315883eaf552a8b7a3d5e21580478a03b923916b18cadec4abcc28be5756e85a1f22617b5410a9b1485a969762bd7bd391d7c3246c7be0dfd8ad0fc0daeccb2bb3da37bfa0e1b7fed7ebff11834fa91bd4e4a42ac7b6ec956ee74a196dea63520fd22a4c588baf0e135603b5fd13e3c2c598a21dc21cfc2ae0242d3b863f90c732792d7e39472d4581677cb0f6754682df4d89ad4fe6b253fbadd63eb57817ac670cbd4484c0c7295ff7c2bda97a68cc0ff14d4f434b5f0717b9371026d0b5872c37b00bd183034269cd322a0e50ee0b323aa719809fedd5106b6403f2eaa9442f36b746e921c8c2138fdd7c16943c1a47cf08e59414e2d7c5cb4dc27d14d05efa582fe16254fa789b61eca82a72d2477b848734a9596d1e2627fe0dd6ff462b4f9cd44af31e9e345ff73dce980b5c272068ec7d3f5bcf10c6d89ed7dfecd9f1c6c4037ab5387d0f41668bb8c3ffd8b637838ad809d5ca659bfb46682cb816da5e90df6b26b76ea77612554534132b31aaa2f08e9a46c3daacb87c6b437136e5eb3ba41ff63136168cd4dc82f07895c6572e0a02ff006379785d73874991e590b97cfcd978beb7715113d2742fe8c9476d4cb7b80764df7e61e752a028b53c257f396cac90ef7fcda8e91067aef7c7580dc69f6c329038655877ee7ae2ce2cfdc32c4c1164638e6b4eeb3c38e2bbf134150f3ed14ff32c3d130b70d6cd009fd39bf7966f4b791ef8efb15d3db5be89d1c4b5007f14b72e66d53a1042dd98a61fdbb4fc389b95881484c45f9b610dfa1063f86e47658f1ad95d21159acf0c98644d21ae1c843b1aa3638d33b335fc7aa20b34cba4678dc44b227fc3abf78f011a0ecb6e702aa29d6e4b8e10c6bfb6cbc00deffbe835f57c0a739ed0ac9c1c6d4a540c1e449f43f81c25435fef28bf54c8bdbe50008be7110eb39ca5a77fbb9449a09eedaaf4a70f3b55677f06c6f2bdba855da7b48065442668ab2d406e933ac92997890033b672f2d475ad4fb40c77f1be21573eb98d0a5ff1d61496a73fcef9d13b34d8b35fe5c9dcd528d4e03940fc4b5cc99bf816b78a191519e1b10a685830d243b3a2071c7c24e5b91a4125cc9fd4d946d9aa9a7036a216c1841e6b35b61984b0d1f22809983417541ea3bba3e84a72de7cd8896aa87ff8d852861a4219472b3f57692e512e693a9d2c2f0b16d023461742216712d06eb15fb0d8164b64fa3b262df951f65fad1f27ee2ed9c68cae95f017d987c0c396398be7c5f5d21b5ce23aff06c439dc01a16d68a7f8439da330895d906e54bef4c41b3fdbf2b12b8cb129153908f652754f5579975861cbdd2b66e780bf1c9b36abdf9bceddcd0c5b64b8ce6bef0cca38cde0515389c4e57c1a16234707811fab40e0f0c0faf2633d52315d7fffa39734ce69050f3d062627db4e33e916c95e27505c7276c5d9fa793826324aaf98189dfb9949da7a41c594e88a5b1871858e637785d1cf8d4b4bd94185d7c92a68291fb28e607bd5b3337cb8f0e3723a8d6200128236ecc0b96714969432d066f4b983bc21bb1e774e6728760c7f4a955b6429da016a3ccedea2d7c9b552cb40500281cbff056f61e8102a0aaa4ae527c8db89bd51f576d4e992419ace9bbd619c4587e5d4fcf5b0064603cb29907e11ad870d173c2c65406c90bf514d0d88ab01c84c3887512c4694cc60586580a2fd4418d238fb4cf8a86270973bab918a2e2d581947628f428aadcafc474ceeb3e7e97069097a8c7db0c428e18a5eb5673f23b6530b3009b025b3b0118d62cd44810e6723da65d8b0a386a6b5057632eae8522eb59657136524806f4810eca6a79ec5f0b3cb3bf7dd15437b5d1de8be018b6459f410c749ee477f096d20704f64c38a59ff345935a04adf847eb181a44358046a3738f762702dccf4c3de228c4997e11ddead9dd2b576df7f396c29ae8667117059d2f4528ff95ea38c1ea36ffd4b87021953400d609517f194eaecac62eeb00ce2dddc05a11acd24151017a715180a1c3e50486b1737d95", 0x1000, 0x7, 0x0, 0x3, r1}, &(0x7f0000000200)) fstat(r1, &(0x7f0000000380)) 01:28:25 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x0, 0x400080) ioctl$VT_DISALLOCATE(r2, 0x5608) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000001c0)=@assoc_id=0x0, &(0x7f0000000200)=0x4) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000240)={r3, 0x3}, &(0x7f0000000280)=0x8) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$NBD_CLEAR_QUE(r2, 0xab05) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) setsockopt$IP_VS_SO_SET_EDIT(r6, 0x0, 0x483, &(0x7f0000000080)={0x0, @local, 0x4e20, 0x4, 'rr\x00', 0x2, 0x7, 0x33}, 0x2c) getrusage(0x0, &(0x7f00000002c0)) getsockopt$inet6_buf(r6, 0x29, 0xcc, &(0x7f0000000380)=""/2, &(0x7f00000003c0)=0x2) ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f0000000140)={0x77, 0x0, [0x176], [0xc0010058, 0x2]}) 01:28:25 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2, 0x0, 0x800000000000000}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:25 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) prctl$PR_GET_TIMERSLACK(0x1e) r1 = accept4(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x10000000000443) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e22, 0x9fd, @loopback}}, 0x3}, &(0x7f0000000000)=0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000540)={r3, @in6={{0xa, 0x4e24, 0xec5, @remote, 0x8}}, 0x7, 0x2}, &(0x7f0000000380)=0x90) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) 01:28:26 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3f, 0x0) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f00000001c0)={0x4, 0x0, [{}, {}, {}, {}]}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = getpgid(0x0) timer_create(0x7, &(0x7f0000000100)={0x0, 0x3b, 0x6, @tid=r5}, &(0x7f0000000280)) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000080)={0x8f, 0x0, 0xff, 0x100000000}, 0x10) ioctl$sock_netdev_private(r0, 0x89f8, &(0x7f00000002c0)="e264accfe34d6706010cadfc3e3f33743f04e39f443704c084f63244d760e31f0db1c36e6453afa53b9a3d894555b02a74a6f392cf06650af9b780d78aed98ef0cc3524c0fbbd08af86f3abb") ioctl$KVM_ENABLE_CAP_CPU(r4, 0xc008ae88, &(0x7f0000000140)={0x77, 0x0, [0x176], [0xc0010058, 0x2]}) 01:28:26 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)="6d73646f73fd", &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:28:26 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0xf00, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:28:26 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2, 0x0, 0x70700000000000}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:26 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply}}}}, 0x0) 01:28:26 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23}}, 0x9, 0x4, 0x7fffffff, 0x6}, &(0x7f0000000000)=0x98) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000001c0)={r2, 0x4a, "4f8ce5883603693e59f2a62f6462fa2ffdc90c1ccc969f9ca11e0237804d2c28e35ce580a6454772bdbd7c7d23ae4da44838461bfe3454f832ee6a09e6a1796de23c58b39c356f7f524f"}, &(0x7f0000000240)=0x52) r3 = accept4(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000280)=0xff3, 0x1) sendfile(r3, r4, 0x0, 0x10000000000443) read(r3, &(0x7f00000003c0)=""/72, 0x100000104) 01:28:26 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x4000008000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$UHID_DESTROY(r1, &(0x7f0000000040), 0x4) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x77, 0x0, [0x176], [0xc0010058, 0x2]}) r4 = accept4(r0, &(0x7f00000001c0)=@un=@abs, &(0x7f0000000080)=0x80, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x5) 01:28:26 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2, 0x0, 0x710000}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000480)="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") readv(r0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/73, 0x49}], 0x1) 01:28:26 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:28:26 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2, 0x0, 0x930000}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:26 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ppoll(&(0x7f0000000080)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) 01:28:26 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x9) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x77, 0x0, [0x176], [0xc0010058, 0x2]}) r4 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x5, 0x20000) setsockopt$inet_mreqsrc(r4, 0x0, 0x2d, &(0x7f0000000080)={@rand_addr=0x5, @rand_addr=0x2, @multicast2}, 0xc) [ 2179.011946] FAT-fs (loop4): bogus number of reserved sectors [ 2179.050980] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2179.138070] FAT-fs (loop4): bogus number of reserved sectors [ 2179.154055] FAT-fs (loop4): Can't find a valid FAT filesystem 01:28:27 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ppoll(&(0x7f0000000080)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) 01:28:27 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2, 0x0, 0x930000000000}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:27 executing program 5: socket$inet(0x2, 0x800, 0xffffffffffffff81) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)={0xb, 'syz1\x00', 'syz0\x00', 'syz1\x00', 0x25, 0x5, 0x1, 0x6, 0xfffffffffffffc00, 0x6, "0917510c4fec5c7463ff804f35b3e01df6d3e40560419824668b72ca68666c8b5d2da56e31"}, 0x13d) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x400000, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x3) syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x4, 0x200001) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0xc008ae88, &(0x7f0000000140)={0x77, 0x0, [0x176], [0xc0010058, 0x2]}) 01:28:27 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) setsockopt$inet_dccp_buf(r0, 0x21, 0xd, &(0x7f0000000340)="ee6b1d9d7c73f74a46899eed6f11cecf7040ff79f4d025768a57d57839010d", 0x1f) r1 = accept4(r0, 0x0, 0x0, 0x0) socketpair$inet(0x2, 0x6, 0xc515, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r4, 0xc008551c, &(0x7f0000000180)={0x3eb, 0x4, [0x8001]}) sendfile(r1, r4, 0x0, 0x10000000000443) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e17ca2bb75e59e6fc1df10736f120464548fbbaa18bf524d91efb14cda02f718652c6be4a85e9e9047e755c156528b9507e6e773094a34cacf122bbe9e4fd041aa24ed1a652166284beb08d145b835d515a00bb66c4c1099b1d50106678fb72973b87305a76f7a"], 0x58) name_to_handle_at(r4, &(0x7f0000000200)='./file0\x00', &(0x7f0000000440)={0xe5, 0x3ff, "15d9c9a751722d4977311b8ef1a76fd10ca1c000d0d796150ab5393823e66e9e03e0efeb46913d1b91878363dab37e75f38e0edf295790fb94114787f8ab3c0c375424c2244416ea1d158bb82b5f3b68aa58a2a7a56e546f31be807076c040b9a9f0be56e8ea05797cf2e0d31caaeac6e4457fc508212d0183d052d87424effc8e93c93cc164c0e298572a6ebf6037ef828ac3fa88b0e7035b8330e339d7b8d7508bfbdd2511a363182685816b4d1c39bb96c98e09cc9873999f3bb8801efcb737cc9ffe1edfb3829148a6836f29661e024e7f00849bd59973b624c701"}, &(0x7f0000000300), 0x1400) 01:28:27 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:28:27 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x1500000000000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:28:28 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2, 0x0, 0x60ff}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) [ 2180.023994] FAT-fs (loop4): bogus number of reserved sectors [ 2180.030106] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2180.124236] FAT-fs (loop4): bogus number of reserved sectors [ 2180.130066] FAT-fs (loop4): Can't find a valid FAT filesystem 01:28:28 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ppoll(&(0x7f0000000080)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) 01:28:28 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x77, 0x0, [0x176], [0xc0010058, 0x2]}) r4 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x200, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) 01:28:28 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:28:28 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2, 0x0, 0x400000}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) [ 2180.399054] FAT-fs (loop4): bogus number of reserved sectors [ 2180.432046] FAT-fs (loop4): Can't find a valid FAT filesystem 01:28:28 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x77, 0x0, [0x176], [0xc0010058, 0x2]}) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f00000000c0), 0x4) syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) 01:28:28 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:28:28 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ppoll(&(0x7f0000000080)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) 01:28:28 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2, 0x0, 0xffffff7f00000000}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) [ 2180.718352] FAT-fs (loop4): bogus number of reserved sectors [ 2180.743117] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2180.814659] FAT-fs (loop4): bogus number of reserved sectors [ 2180.859621] FAT-fs (loop4): Can't find a valid FAT filesystem 01:28:28 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000100)=0x2e, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x10000000000443) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000000)={0x101fd, 0x0, &(0x7f0000ffe000/0x1000)=nil}) 01:28:28 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x10002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x77, 0x0, [0x176], [0xc0010058, 0x2]}) 01:28:28 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2, 0x0, 0x705000}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:28 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x74000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:28:29 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:28:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 01:28:29 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0xab3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x7) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x77, 0x0, [0x176], [0xc0010058, 0x2]}) 01:28:29 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2, 0x0, 0x7100}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) [ 2181.218160] FAT-fs (loop4): bogus number of reserved sectors [ 2181.276124] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2181.321866] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2181.354134] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2181.435066] FAT-fs (loop4): bogus number of reserved sectors [ 2181.471047] FAT-fs (loop4): Can't find a valid FAT filesystem 01:28:29 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdosH', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:28:29 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2, 0x0, 0x3f00}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) [ 2181.708546] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 01:28:29 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) pread64(r1, &(0x7f00000001c0)=""/213, 0xd5, 0x1a) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x77, 0x0, [0x176], [0xc0010058, 0x2]}) 01:28:29 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2, 0x0, 0x400000000000}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:30 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x3, 0x8000) ioctl$sock_bt_hci(r1, 0x0, &(0x7f0000000140)="be4712b2becd292ea23c55b86283c1540ac4b57a744d352a6a9f042216d22a2be9d5fa0251517ae91720f97de54e9c96541dad8ae160966a3046053574d8e4d33c8a5610da284c834acf96c79337c386657125802146ad") ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f0000000540)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') utime(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x5}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x1ff) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000000)=0xffffffff00000, 0x4) sendfile(r1, r3, 0x0, 0x10000000000443) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) 01:28:30 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffd) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet(0x2, 0x0, 0x0, 0x0) exit(0x0) mmap(&(0x7f00006fc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) lseek(r0, 0x0, 0x0) 01:28:30 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 2182.213772] audit: type=1400 audit(1542850110.208:310): avc: denied { associate } for pid=24892 comm="syz-executor1" name="syz1" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 2182.318102] FAT-fs (loop4): bogus number of reserved sectors [ 2182.357256] FAT-fs (loop4): Can't find a valid FAT filesystem 01:28:30 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x2300000000000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:28:30 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2, 0x0, 0x1100000000000000}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:30 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000140)={0x77, 0x0, [0x176], [0xc0010058, 0x2]}) [ 2182.465039] FAT-fs (loop4): bogus number of reserved sectors [ 2182.495933] FAT-fs (loop4): Can't find a valid FAT filesystem 01:28:30 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2, 0x0, 0x60ffffffffff}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:30 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:28:30 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) memfd_create(&(0x7f0000000040)='/dev/kvm\x00', 0x2) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x77, 0x0, [0x176], [0xc0010058, 0x2]}) 01:28:30 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2, 0x0, 0x8000000}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) [ 2182.747905] FAT-fs (loop4): bogus number of reserved sectors [ 2182.764632] FAT-fs (loop4): Can't find a valid FAT filesystem 01:28:30 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000240)="8da4363a0000000004000000000000000100000000fffffff600000100000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4dd2f873574f257e0a01e2a6a02f5e071383fa5a669a53f2fe9eb4eb7918628af41b035fb1e78478a8d8bcab6a1e84458c69a87d115eb4c3731a45ba9fc26d7d8e6778a032a7186d71911709704dd1da4cd72a58bbf0a41b1986f858fdbc549728abb515412ccbd6c9006fc56678f6132f5cc94449959a4365fdbce0c059ac7e26a4c3fe6bee3e690f16", 0xd1, 0x10000}], 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x80000000, 0x2000) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, &(0x7f0000000080)) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0xc008ae88, &(0x7f0000000140)={0x77, 0x0, [0x176], [0xc0010058, 0x2]}) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 01:28:30 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffd) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet(0x2, 0x0, 0x0, 0x0) exit(0x0) mmap(&(0x7f00006fc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) lseek(r0, 0x0, 0x0) [ 2182.883608] FAT-fs (loop4): bogus number of reserved sectors [ 2182.904537] FAT-fs (loop4): Can't find a valid FAT filesystem 01:28:31 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x200000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x2000000000000) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x141042, 0x0) fallocate(r3, 0x1, 0x0, 0x8010000101) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000100)={0x4, {{0xa, 0x4e20, 0x5, @empty, 0x4}}}, 0x88) getsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f00000001c0)=0x100000001, &(0x7f0000000200)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x12000000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') syz_genetlink_get_family_id$ipvs(&(0x7f0000000640)='IPVS\x00') getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x7}, &(0x7f0000000300)=0x8) getsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000380), &(0x7f0000000440)=0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000540)={r6, 0x8f, "215b2651ec4d7fa00b38c490c5e098f9900a7320225411193f3342c7ac8acdeedd1fa0aa57fb61f36c9988b8a5eb5247c22c50a705b496cc56a7dba9e4be7246c2a05ac2747c821d827b5d166fd1d41090c4e9210432cbca056f23650c8c1255a47d9f08b2fe4794bfc1e797d140f1384efa00b5a0750b780da919752ad22b9406e8cdcb0353929dc2459264eb460b"}, &(0x7f0000000340)=0x97) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r5, 0x810c5701, &(0x7f00000007c0)) sendfile(r2, r5, 0x0, 0x10000000000443) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) 01:28:31 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2, 0x0, 0x707000}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:31 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 2183.183390] FAT-fs (loop4): bogus number of reserved sectors [ 2183.208049] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2183.287837] FAT-fs (loop4): bogus number of reserved sectors [ 2183.351489] FAT-fs (loop4): Can't find a valid FAT filesystem 01:28:31 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x26000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:28:31 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x77, 0x0, [0x176, 0x0, 0x0, 0x200000000], [0xc0010058, 0x2]}) 01:28:31 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2, 0x0, 0x2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:31 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:28:31 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2, 0x0, 0x3f000000}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) [ 2183.605310] FAT-fs (loop4): bogus number of reserved sectors [ 2183.663813] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2183.762508] FAT-fs (loop4): bogus number of reserved sectors 01:28:31 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000480), &(0x7f00000004c0)=0x4) ioctl$sock_bt(r2, 0x541b, &(0x7f0000000380)="53acadb67fb4c85d1b1d71fb436abbe1191b5361b26615f9c885a3d5e81c93e7f7b5a7e0f6a4a4bd2b16b05598f7274f28c03f6c877d10bf4201d800fd0416b1352b38824ae96e90beea70df30728957ffd1e4b4a8190e02c96bbbc0d8d76fa003ee2da799ccdbcbe5cd6328a192caaf831519c75ab9c5e10fe614d4cc499014ae604d3722c3c45c86ff47cd7a437ddd1bce445bb0cb493c8cf4740109cb5ce082add66a33561b1679440d0acc548c316498899ffba12cf7239033fc6367dae5d9eda86d12d9") ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) fstatfs(r1, &(0x7f0000000240)=""/211) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0xc008ae88, &(0x7f0000000140)={0x77, 0x0, [0x176, 0x1], [0xc0010058, 0x2]}) fsetxattr$security_selinux(r0, &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:iptables_conf_t:s0\x00', 0x25, 0x2) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000500)=0xfffffffffffffffc, &(0x7f0000000540)=0x2) r5 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r5, 0xc0086423, &(0x7f00000001c0)={r6, 0x3}) 01:28:31 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2, 0x0, 0x2000000}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) [ 2183.842488] FAT-fs (loop4): Can't find a valid FAT filesystem 01:28:31 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffd) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet(0x2, 0x0, 0x0, 0x0) exit(0x0) mmap(&(0x7f00006fc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) lseek(r0, 0x0, 0x0) 01:28:32 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)="6d73646f73ff", &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 2184.047615] audit: type=1400 audit(1542850112.048:311): avc: denied { relabelto } for pid=25006 comm="syz-executor5" name="UNIX" dev="sockfs" ino=473190 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:iptables_conf_t:s0 tclass=unix_stream_socket permissive=1 01:28:32 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) sendfile(r1, r2, 0x0, 0x10000000000443) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x3) 01:28:32 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2, 0x0, 0xff600000}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:32 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000040)=']GPLvmnet0.&selinux/\x00'}, 0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x77, 0x0, [0x176], [0xc0010058, 0x2]}) 01:28:33 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2, 0x0, 0xffffff7f}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:33 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)="6d73646f73f5", &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:28:33 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r3, 0x80386433, &(0x7f00000001c0)=""/217) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0xc008ae88, &(0x7f0000000140)={0x77, 0x0, [0x176], [0xc0010058, 0x2]}) 01:28:33 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffd) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet(0x2, 0x0, 0x0, 0x0) exit(0x0) mmap(&(0x7f00006fc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) lseek(r0, 0x0, 0x0) 01:28:33 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x1300, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:28:33 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x80, 0x400000) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x77, 0x0, [0x5], [0xc0010058, 0x2]}) 01:28:33 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2, 0x0, 0x11}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:33 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:28:33 executing program 5: socketpair$unix(0x1, 0x20000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x77, 0x0, [0x176], [0xc0010058, 0x2]}) mq_unlink(&(0x7f0000000040)="bd6c6f00") 01:28:33 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101402, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x2, @mcast1, 0x5}, r1}}, 0x30) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') sendfile(r3, r4, 0x0, 0x10000000000443) read(r3, &(0x7f00000003c0)=""/72, 0x100000104) 01:28:33 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2, 0x0, 0x8}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) [ 2185.518742] FAT-fs (loop4): bogus number of reserved sectors [ 2185.560319] FAT-fs (loop4): Can't find a valid FAT filesystem 01:28:33 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2, 0x0, 0x34000}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) [ 2185.680149] FAT-fs (loop4): bogus number of reserved sectors [ 2185.739344] FAT-fs (loop4): Can't find a valid FAT filesystem 01:28:34 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x74, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:28:34 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:28:34 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$TIOCCBRK(r0, 0x5428) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) creat(&(0x7f0000000040)='.\x00', 0x1) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000001c0)={0x9, 0x56, 0x0, 0x7fffffff, 0x2, [{0x1, 0x9, 0x8001, 0x0, 0x0, 0xb80}, {0xff, 0x4d1, 0x0, 0x0, 0x0, 0x800}]}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x77, 0x0, [0x176], [0xc0010058, 0x2]}) 01:28:34 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2, 0x0, 0x3f00000000000000}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:34 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffd) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet(0x2, 0x0, 0x0, 0x0) exit(0x0) lseek(r0, 0x0, 0x0) 01:28:34 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x402000, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f00000001c0)={0x4, 0xa5, &(0x7f0000000100)="4f8012bb938d8260b3191de56b726b75b79d4a06d7ad297eb27819caa4ddd662efb49648d52b33f341eda1353fc283d33e6f6ebdb06efee43c9ab50bc89dc775ce3375feb05e2976051e91f26af299451ff8c43f3cc448d000c08c223812fd18d580660495e4f45db85feb74a70ea9cb7ec28c5def1db90eb990abf5f5b5e54ed5a770deec2a604cf0bd9858beeb22c80427f555c994b13039ef010a808d18c843d0576451"}) r2 = accept4(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') sendfile(r2, r3, 0x0, 0x10000000000443) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000200)={0x652a, 0x3, 0x4, 0x40001000, {0x0, 0x2710}, {0x7, 0xd, 0x5, 0x20, 0x3e0, 0x9, "b1a2fedd"}, 0x0, 0x4, @fd=r1, 0x4}) timer_create(0x3, &(0x7f0000000280)={0x0, 0x15, 0x1, @tid=0xffffffffffffffff}, &(0x7f00000002c0)=0x0) timer_getoverrun(r4) 01:28:34 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2, 0x0, 0x4000}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) [ 2186.557470] FAT-fs (loop4): bogus number of reserved sectors [ 2186.575226] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2186.649795] FAT-fs (loop4): bogus number of reserved sectors [ 2186.662437] FAT-fs (loop4): Can't find a valid FAT filesystem 01:28:34 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:28:34 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x1, 0x0) write$UHID_DESTROY(r2, &(0x7f0000000080), 0x8f2b94d85e76fda1) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0xc008ae88, &(0x7f0000000140)={0x7b, 0x0, [0x176, 0x1, 0x0, 0xffffffffffffffff], [0xc0010058, 0x2]}) 01:28:34 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2, 0x0, 0x9300}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) [ 2186.825328] FAT-fs (loop4): bogus number of reserved sectors [ 2186.831319] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2186.901354] FAT-fs (loop4): bogus number of reserved sectors [ 2186.966280] FAT-fs (loop4): Can't find a valid FAT filesystem 01:28:35 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:28:35 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2, 0x0, 0x1100}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:35 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x7, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:28:35 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={0x4, {0x2, 0x4e21, @loopback}, {0x2, 0x4e21}, {0x2, 0x4e23, @local}, 0x8, 0xfd22, 0x8a25, 0x4203, 0x2, &(0x7f0000000080)='bridge_slave_0\x00', 0xffffffff, 0xc37c, 0x101}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0xc008ae88, &(0x7f0000000140)={0x77, 0x0, [0x176], [0xc0010058, 0x2]}) 01:28:35 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2, 0x0, 0x200000000000000}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) [ 2187.244678] FAT-fs (loop4): bogus number of reserved sectors [ 2187.271927] FAT-fs (loop4): Can't find a valid FAT filesystem 01:28:35 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffd) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet(0x2, 0x0, 0x0, 0x0) mmap(&(0x7f00006fc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) lseek(r0, 0x0, 0x0) [ 2187.363243] FAT-fs (loop4): bogus number of reserved sectors [ 2187.369114] FAT-fs (loop4): Can't find a valid FAT filesystem 01:28:35 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:28:35 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x54) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x10000000000443) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000000)=""/10) 01:28:35 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2, 0x0, 0x70500000000000}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:35 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f0000000040)={0x1ba0, 0x7, 0x5, 0xfffffffffffff2e1, 0x101, 0xfffffffffffffffc, 0xffffffff, 0x9000000000000}, &(0x7f0000000080)={0x10000, 0x2, 0x60d9, 0x1, 0xd4f, 0x2, 0xff, 0xfff}, &(0x7f00000000c0)={0x3, 0x7, 0x7, 0x1e, 0x200, 0x7fff, 0x10001, 0x7}, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000240)={&(0x7f0000000200)={0x4}, 0x8}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0xc008ae88, &(0x7f0000000140)={0x77, 0x0, [0x176], [0xc0010058, 0x2]}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000000440)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'gre0\x00', r5}) 01:28:35 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffd) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00006fc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) lseek(r0, 0x0, 0x0) [ 2187.655649] FAT-fs (loop4): bogus number of reserved sectors [ 2187.690467] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2187.763513] FAT-fs (loop4): bogus number of reserved sectors [ 2187.769716] FAT-fs (loop4): Can't find a valid FAT filesystem 01:28:35 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffd) mmap(&(0x7f00006fc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) lseek(r0, 0x0, 0x0) 01:28:35 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2, 0x0, 0xffefffffff7f0000}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:35 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)="6d73646f7306", &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:28:36 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0xffffffffffff0700, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:28:36 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x77, 0x0, [0x176], [0xc0010058, 0x2]}) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x100, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, &(0x7f0000000080)=0x80, 0x4) 01:28:36 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) timerfd_gettime(r0, &(0x7f0000000080)) ioctl$RTC_EPOCH_SET(r3, 0x4008700e, 0x1ff) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x2a8, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)="00000000000100"}) 01:28:36 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) mmap(&(0x7f00006fc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) lseek(r0, 0x0, 0x0) 01:28:36 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2, 0x0, 0x40030000000000}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:36 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\t', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:28:36 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x20000150, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:36 executing program 0: ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffd) mmap(&(0x7f00006fc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) 01:28:36 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x40000020]}) 01:28:36 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x7ffffffff000, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:36 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos2', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:28:37 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, &(0x7f00000001c0)={0x0, @bt={0x9, 0x8, 0x1, 0x1, 0x0, 0xda, 0x101, 0xd95, 0x1, 0xea, 0x6, 0xfff, 0x80000000, 0x10000, 0x12, 0x8}}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0xc008ae88, &(0x7f0000000140)={0x77, 0x0, [0x176], [0xc0010058, 0x2]}) 01:28:37 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x20000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:28:37 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x77, 0x0, [0x176], [0xc0010058, 0x2]}) r4 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000080)={0x40002011}) 01:28:37 executing program 1: r0 = socket$inet6_sctp(0xa, 0x100000000000001, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0xd, &(0x7f0000000040)={0x4}, 0x8) 01:28:37 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffd) mmap(&(0x7f00006fc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) lseek(r0, 0x0, 0x0) 01:28:37 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x7ffff000, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:37 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:28:37 executing program 1: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) [ 2189.875184] FAT-fs (loop4): bogus number of reserved sectors 01:28:37 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffd) mmap(&(0x7f00006fc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) lseek(r0, 0x0, 0x0) [ 2189.917926] FAT-fs (loop4): Can't find a valid FAT filesystem 01:28:38 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0xf, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:38 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) mmap(&(0x7f00006fc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) lseek(r0, 0x0, 0x0) 01:28:38 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x40000000]}) 01:28:38 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 2190.297243] FAT-fs (loop4): bogus number of reserved sectors [ 2190.322062] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2190.381210] FAT-fs (loop4): bogus number of reserved sectors [ 2190.402160] FAT-fs (loop4): Can't find a valid FAT filesystem 01:28:39 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x2600, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:28:39 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x20000050, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:39 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffd) mmap(&(0x7f00006fc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) lseek(r0, 0x0, 0x0) 01:28:39 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x40000000]}) 01:28:39 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:28:39 executing program 1: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:28:39 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x40000000]}) 01:28:39 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:39 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffd) mmap(&(0x7f00006fc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) [ 2191.171003] FAT-fs (loop4): bogus number of reserved sectors [ 2191.187085] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2191.306316] FAT-fs (loop4): bogus number of reserved sectors [ 2191.322192] FAT-fs (loop4): Can't find a valid FAT filesystem 01:28:39 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffd) mmap(&(0x7f00006fc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) 01:28:39 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x40000000]}) 01:28:39 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:40 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x1f000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:28:40 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)="6d73646f7304", &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:28:40 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x40000000]}) 01:28:40 executing program 0: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:28:40 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:40 executing program 1: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:28:40 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:40 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x40000000]}) 01:28:40 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos`', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:28:40 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x40000000]}) 01:28:40 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:40 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:41 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:41 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x40000000]}) 01:28:41 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)="6d73646f73fb", &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:28:41 executing program 0: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:28:41 executing program 1: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:28:41 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x1e000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:28:41 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:41 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x40000000]}) 01:28:41 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x40000000]}) 01:28:41 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:42 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:28:42 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x40000000]}) 01:28:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x40000000]}) 01:28:42 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) [ 2194.155770] FAT-fs (loop4): bogus number of reserved sectors [ 2194.202734] FAT-fs (loop4): Can't find a valid FAT filesystem 01:28:42 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) [ 2194.266677] FAT-fs (loop4): bogus number of reserved sectors [ 2194.311888] FAT-fs (loop4): Can't find a valid FAT filesystem 01:28:42 executing program 0: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:28:42 executing program 1: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) 01:28:43 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x40000000]}) 01:28:43 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:28:43 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x6b6b6b00, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:28:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x40000000]}) 01:28:43 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) [ 2195.183532] FAT-fs (loop4): bogus number of reserved sectors [ 2195.211805] FAT-fs (loop4): Can't find a valid FAT filesystem 01:28:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x40000000]}) [ 2195.273905] FAT-fs (loop4): bogus number of reserved sectors [ 2195.279743] FAT-fs (loop4): Can't find a valid FAT filesystem 01:28:43 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:43 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x40000000]}) 01:28:43 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:28:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000180)={0x7b, 0x0, [0x40000106]}) 01:28:43 executing program 1: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:28:43 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:43 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x40000000]}) [ 2195.592380] FAT-fs (loop4): bogus number of reserved sectors [ 2195.615250] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2195.712248] FAT-fs (loop4): bogus number of reserved sectors [ 2195.764847] FAT-fs (loop4): Can't find a valid FAT filesystem 01:28:43 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:44 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x18, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:28:44 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:28:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000180)={0x7b, 0x0, [0x40000106]}) 01:28:44 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x40000000]}) 01:28:44 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x40000000]}) 01:28:44 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) [ 2196.438968] FAT-fs (loop4): bogus number of reserved sectors 01:28:44 executing program 1: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) getdents64(0xffffffffffffffff, &(0x7f0000000440)=""/186, 0x760) getdents(0xffffffffffffffff, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:28:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000180)={0x7b, 0x0, [0x40000106]}) [ 2196.484448] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2196.578489] FAT-fs (loop4): bogus number of reserved sectors [ 2196.621113] FAT-fs (loop4): Can't find a valid FAT filesystem 01:28:44 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:44 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)="6d73646f73ff", &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:28:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x40000000]}) 01:28:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x40000000]}) 01:28:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000180)={0x7b, 0x0, [0x40000106]}) 01:28:45 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:45 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)="6d73646f7304", &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:28:45 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x60000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:28:45 executing program 1: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:28:45 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000180)={0x7b, 0x0, [0x40000106]}) 01:28:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x40000000]}) 01:28:45 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:45 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:28:46 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, 0x0) 01:28:46 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0xc008ae88, &(0x7f0000000180)={0x7b, 0x0, [0x40000106]}) [ 2198.129606] FAT-fs (loop4): bogus number of reserved sectors [ 2198.172203] FAT-fs (loop4): Can't find a valid FAT filesystem 01:28:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, 0x0) 01:28:46 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0xc008ae88, &(0x7f0000000180)={0x7b, 0x0, [0x40000106]}) [ 2198.249537] FAT-fs (loop4): bogus number of reserved sectors [ 2198.255620] FAT-fs (loop4): Can't find a valid FAT filesystem 01:28:46 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x40000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:28:46 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:46 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\n', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:28:46 executing program 1: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:28:46 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0xc008ae88, &(0x7f0000000180)={0x7b, 0x0, [0x40000106]}) 01:28:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x0, 0x0, [0x40000000]}) 01:28:46 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000180)={0x7b, 0x0, [0x40000106]}) 01:28:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x0, 0x0, [0x40000000]}) 01:28:46 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:47 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000180)={0x7b, 0x0, [0x40000106]}) 01:28:47 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:28:47 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) [ 2199.201876] FAT-fs (loop4): bogus number of reserved sectors [ 2199.239311] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2199.357141] FAT-fs (loop4): bogus number of reserved sectors [ 2199.408892] FAT-fs (loop4): Can't find a valid FAT filesystem 01:28:48 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x8, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:28:48 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000180)={0x7b, 0x0, [0x40000106]}) 01:28:48 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b}) 01:28:48 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:28:48 executing program 1: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r0 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x760) getdents(r0, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:28:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000180)={0x7b, 0x0, [0x40000106]}) [ 2200.115206] FAT-fs (loop4): bogus number of reserved sectors [ 2200.150651] FAT-fs (loop4): Can't find a valid FAT filesystem 01:28:48 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b}) [ 2200.237383] FAT-fs (loop4): bogus number of reserved sectors 01:28:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000180)={0x7b, 0x0, [0x40000106]}) [ 2200.336036] FAT-fs (loop4): Can't find a valid FAT filesystem 01:28:48 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000180)={0x7b, 0x0, [0x40000106]}) 01:28:49 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:28:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b}) 01:28:49 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000180)={0x7b, 0x0, [0x40000106]}) 01:28:49 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:49 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x4c00000000000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:28:49 executing program 1: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r0 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x760) getdents(r0, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:28:49 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:49 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)="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") ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x801c581f, 0x20080004) 01:28:49 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000180)={0x7b, 0x0, [0x40000106]}) [ 2201.147381] FAT-fs (loop4): bogus number of reserved sectors [ 2201.156629] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2201.277352] FAT-fs (loop4): bogus number of reserved sectors [ 2201.315834] FAT-fs (loop4): Can't find a valid FAT filesystem 01:28:49 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)="2f65786500000000002001004bddd9de91be10ee9ed554fa07424adee9cbc699ec2ca576e50000bcd7a071fb35331ce39c5ad0cf73770bd4246847a1914e4fb0aa9b15eaa94bcd0e700ed63b44338e84ad4ec2f11f6f2adb8dc2fdb18231446f43142ebe700b2231e8fceed6b22a373c9409675ac8d0b53033123fb3037d66241aafe0f880e7a51d1b036ade31d24369df8c2fce21dcb1cb965669f9a75345ac3479cd688f7de364c9c203c83ed9e666ca25aad2e7a26e3d6c62d0f8b9065efca311c06d0744db265aa0e486707c51fd108c0c6ccae6ff42274af94d30fce8836ff9d00bddd7fe22f0939ff3b802ea1696a5a63ffb397ca0419e5f00000000000000000000a38f2b4830321e497bb8080403d398db47ddf85d75492903da6c1c7eee85b1c57c21762042e616ef7c672edbe3fe88112d37ce4a7ed42d5def50cffc8d866bd7a4e88a1b796b886597652326a6b2e1d4700ea2a16061037f49898f9a72bc39740729896dbb6136a4867e546e371bbb3a26d995c3a3e20dfdf4f12ade3f471ade256bf2ab075570fa6d6debe020c3c9e7ceffb14a40d3d4606fd7cb63e4d021bfb38776b733b8d9fd0db33a2f2f9e5f0468ef0f0763865143f6a5b46440a5c8ef40a68f8fe9a1a4c9d87a") ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x801c581f, 0x20080004) 01:28:49 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:49 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000180)={0x7b, 0x0, [0x40000106]}) 01:28:49 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)="6d73646f7304", &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:28:49 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)="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") ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x801c581f, 0x20080004) 01:28:49 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000180)={0x7b, 0x0, [0x40000106]}) 01:28:50 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x2700000000000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:28:50 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)="2f65786500000000002001004bddd9de91be10ee9ed554fa07424adee9cbc699ec2ca576e50000bcd7a071fb35331ce39c5ad0cf73770bd4246847a1914e4fb0aa9b15eaa94bcd0e700ed63b44338e84ad4ec2f11f6f2adb8dc2fdb18231446f43142ebe700b2231e8fceed6b22a373c9409675ac8d0b53033123fb3037d66241aafe0f880e7a51d1b036ade31d24369df8c2fce21dcb1cb965669f9a75345ac3479cd688f7de364c9c203c83ed9e666ca25aad2e7a26e3d6c62d0f8b9065efca311c06d0744db265aa0e486707c51fd108c0c6ccae6ff42274af94d30fce8836ff9d00bddd7fe22f0939ff3b802ea1696a5a63ffb397ca0419e5f00000000000000000000a38f2b4830321e497bb8080403d398db47ddf85d75492903da6c1c7eee85b1c57c21762042e616ef7c672edbe3fe88112d37ce4a7ed42d5def50cffc8d866bd7a4e88a1b796b886597652326a6b2e1d4700ea2a16061037f49898f9a72bc39740729896dbb6136a4867e546e371bbb3a26d995c3a3e20dfdf4f12ade3f471ade256bf2ab075570fa6d6debe020c3c9e7ceffb14a40d3d4606fd7cb63e4d021bfb38776b733b8d9fd0db33a2f2f9e5f0468ef0f0763865143f6a5b46440a5c8ef40a68f8fe9a1a4c9d87a") ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x801c581f, 0x20080004) 01:28:50 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)="6d73646f73f6", &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:28:50 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:50 executing program 1: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:28:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000180)={0x7b, 0x0, [0x40000106]}) 01:28:50 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x801c581f, 0x20080004) 01:28:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000180)={0x7b, 0x0, [0x40000106]}) 01:28:50 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:50 executing program 5: r0 = syz_open_procfs(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x801c581f, 0x20080004) 01:28:50 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:50 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 2203.000475] FAT-fs (loop4): bogus number of reserved sectors [ 2203.011839] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2203.081334] FAT-fs (loop4): bogus number of reserved sectors [ 2203.111587] FAT-fs (loop4): Can't find a valid FAT filesystem 01:28:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000180)={0x7b, 0x0, [0x40000106]}) 01:28:51 executing program 5: syz_open_procfs(0x0, &(0x7f00000003c0)="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") ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x801c581f, 0x20080004) 01:28:51 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:51 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:28:51 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x2400000000000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:28:51 executing program 1: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:28:51 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)="2f65786500000000002001004bddd9de91be10ee9ed554fa07424adee9cbc699ec2ca576e50000bcd7a071fb35331ce39c5ad0cf73770bd4246847a1914e4fb0aa9b15eaa94bcd0e700ed63b44338e84ad4ec2f11f6f2adb8dc2fdb18231446f43142ebe700b2231e8fceed6b22a373c9409675ac8d0b53033123fb3037d66241aafe0f880e7a51d1b036ade31d24369df8c2fce21dcb1cb965669f9a75345ac3479cd688f7de364c9c203c83ed9e666ca25aad2e7a26e3d6c62d0f8b9065efca311c06d0744db265aa0e486707c51fd108c0c6ccae6ff42274af94d30fce8836ff9d00bddd7fe22f0939ff3b802ea1696a5a63ffb397ca0419e5f00000000000000000000a38f2b4830321e497bb8080403d398db47ddf85d75492903da6c1c7eee85b1c57c21762042e616ef7c672edbe3fe88112d37ce4a7ed42d5def50cffc8d866bd7a4e88a1b796b886597652326a6b2e1d4700ea2a16061037f49898f9a72bc39740729896dbb6136a4867e546e371bbb3a26d995c3a3e20dfdf4f12ade3f471ade256bf2ab075570fa6d6debe020c3c9e7ceffb14a40d3d4606fd7cb63e4d021bfb38776b733b8d9fd0db33a2f2f9e5f0468ef0f0763865143f6a5b46440a5c8ef40a68f8fe9a1a4c9d87a") ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x801c581f, 0x0) 01:28:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, 0x0) [ 2203.854287] FAT-fs (loop4): bogus number of reserved sectors [ 2203.872115] FAT-fs (loop4): Can't find a valid FAT filesystem 01:28:51 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) [ 2203.940485] FAT-fs (loop4): bogus number of reserved sectors [ 2204.000405] FAT-fs (loop4): Can't find a valid FAT filesystem 01:28:52 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x8) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000, 0x9effffff00000000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@nested={0x8, 0x0, [@generic="01"]}]}, 0x1c}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000300)={0x4, 0x1, 0x1f, 0x1}, 0x10) 01:28:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000180)={0x0, 0x0, [0x40000106]}) 01:28:52 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:28:52 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:52 executing program 5: [ 2204.364910] FAT-fs (loop4): bogus number of reserved sectors [ 2204.403827] FAT-fs (loop4): Can't find a valid FAT filesystem 01:28:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000180)={0x0, 0x0, [0x40000106]}) 01:28:52 executing program 5: [ 2204.500974] FAT-fs (loop4): bogus number of reserved sectors [ 2204.513003] FAT-fs (loop4): Can't find a valid FAT filesystem 01:28:53 executing program 5: 01:28:53 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:53 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)="6d73646f73b0", &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:28:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000180)={0x0, 0x0, [0x40000106]}) 01:28:53 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x27000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:28:53 executing program 1: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:28:53 executing program 5: 01:28:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000180)={0x7b}) 01:28:53 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:53 executing program 5: 01:28:53 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdosz', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:28:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000180)={0x7b}) 01:28:53 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:53 executing program 5: 01:28:53 executing program 5: 01:28:53 executing program 5: 01:28:54 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0xff0f0000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:28:54 executing program 0: 01:28:54 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 01:28:54 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:28:54 executing program 5: 01:28:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:28:54 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x20000150}}, 0x0) 01:28:54 executing program 5: 01:28:54 executing program 0: [ 2206.590944] FAT-fs (loop4): bogus number of reserved sectors [ 2206.620266] FAT-fs (loop4): Can't find a valid FAT filesystem 01:28:54 executing program 0: 01:28:54 executing program 5: [ 2206.725384] FAT-fs (loop4): bogus number of reserved sectors 01:28:54 executing program 1: futex(0x0, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) [ 2206.786749] FAT-fs (loop4): Can't find a valid FAT filesystem 01:28:55 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x24000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:28:55 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x7ffffffff000}}, 0x0) 01:28:55 executing program 5: 01:28:55 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos&', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:28:55 executing program 0: 01:28:55 executing program 1: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:28:55 executing program 0: 01:28:55 executing program 5: 01:28:55 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x7ffff000}}, 0x0) 01:28:55 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000000001, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x10, &(0x7f0000000040)={0x4}, 0x8) 01:28:55 executing program 1: futex(&(0x7f000000cffc), 0x0, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:28:55 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000001f00), 0x4) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7d6, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000000)) [ 2207.867946] sctp: [Deprecated]: syz-executor0 (pid 26311) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2207.867946] Use struct sctp_sack_info instead [ 2208.024771] sctp: [Deprecated]: syz-executor0 (pid 26311) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2208.024771] Use struct sctp_sack_info instead 01:28:56 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0xc0000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:28:56 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0xf}}, 0x0) 01:28:56 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:28:56 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) readv(r0, &(0x7f0000001580)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) ioctl$int_in(r0, 0x80000000005001, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 01:28:56 executing program 0: rt_sigqueueinfo(0x0, 0x0, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000017c0)='/selinux/enforce\x00', 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x8000) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"76617400000000000000a80300", 0x43732e5398416f1a}) r3 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x2010, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000380)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000000680), 0x0, &(0x7f0000001580)}, 0x0) pread64(r2, &(0x7f0000000340)=""/39, 0x27, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r1, r2) write$binfmt_elf64(r0, 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400000, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1b, 0x0, 0x1, 0x100, 0x6, @random="c3b749384495"}, 0x14) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000140)) write$selinux_user(r4, &(0x7f00000001c0)={'system_u:object_r:udev_tbl_t:s0', 0x20, 'root\x00'}, 0x25) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000180)=0x80, 0x4) 01:28:56 executing program 1: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:28:56 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x20000050}}, 0x0) [ 2208.558070] FAT-fs (loop4): bogus number of reserved sectors [ 2208.568143] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2208.587142] FAT-fs (loop4): Can't find a valid FAT filesystem 01:28:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x0, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000c80), &(0x7f0000000cc0)=0x4) r2 = socket(0xa, 0x3, 0x200000000008) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00'], 0x1}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000140)) ioctl$DRM_IOCTL_CONTROL(0xffffffffffffffff, 0x40086414, &(0x7f00000003c0)={0x1, 0x3ff}) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000280)=0x1, 0x2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x6000, 0x0) write$FUSE_POLL(r3, &(0x7f00000002c0)={0x18, 0x0, 0x4, {0x7fff}}, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) pipe2(&(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000bc0)) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) setsockopt$bt_BT_RCVMTU(r6, 0x112, 0xd, &(0x7f0000000180)=0x7, 0x2) accept$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000400)={0xffffffffffffffff}, 0x2, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r5, &(0x7f00000004c0)={0x9, 0x108, 0xfa00, {r7, 0xd1, ':o!', "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"}}, 0x110) read$eventfd(r4, &(0x7f0000000200), 0x8) openat$ashmem(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/ashmem\x00', 0x490000, 0x0) socketpair$inet_sctp(0x2, 0x0, 0x84, &(0x7f0000000240)) [ 2208.675552] FAT-fs (loop4): bogus number of reserved sectors [ 2208.693827] FAT-fs (loop4): Can't find a valid FAT filesystem 01:28:56 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x300}, 0x0) 01:28:56 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 2208.976005] FAT-fs (loop4): bogus number of reserved sectors [ 2209.007678] FAT-fs (loop4): Can't find a valid FAT filesystem 01:28:57 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x2000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 2209.156132] bridge0: port 2(bridge_slave_1) entered disabled state [ 2209.162811] bridge0: port 1(bridge_slave_0) entered disabled state 01:28:57 executing program 1: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:28:57 executing program 1: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:28:57 executing program 1: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) [ 2209.717359] FAT-fs (loop4): bogus number of reserved sectors [ 2209.730850] FAT-fs (loop4): Can't find a valid FAT filesystem 01:28:57 executing program 1: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) [ 2209.888559] bridge0: port 2(bridge_slave_1) entered blocking state [ 2209.895018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2209.904047] bridge0: port 1(bridge_slave_0) entered blocking state [ 2209.910639] bridge0: port 1(bridge_slave_0) entered forwarding state 01:28:58 executing program 1: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) [ 2210.020092] device bridge0 entered promiscuous mode [ 2210.105140] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 01:28:58 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:28:58 executing program 1: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:28:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x0, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000c80), &(0x7f0000000cc0)=0x4) r2 = socket(0xa, 0x3, 0x200000000008) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00'], 0x1}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000140)) ioctl$DRM_IOCTL_CONTROL(0xffffffffffffffff, 0x40086414, &(0x7f00000003c0)={0x1, 0x3ff}) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000280)=0x1, 0x2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x6000, 0x0) write$FUSE_POLL(r3, &(0x7f00000002c0)={0x18, 0x0, 0x4, {0x7fff}}, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) pipe2(&(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000bc0)) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) setsockopt$bt_BT_RCVMTU(r6, 0x112, 0xd, &(0x7f0000000180)=0x7, 0x2) accept$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000400)={0xffffffffffffffff}, 0x2, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r5, &(0x7f00000004c0)={0x9, 0x108, 0xfa00, {r7, 0xd1, ':o!', "cf2b85072747e4057a77db661f55cd1a4dc5ba57ec6dbe63feadfb532988d40d71994dd75d20b3d59fa308c5507ae503d1c3139cfcdb39f6704ada1c4b374a3c219da83d52ce37a1fb63e9b21d8b41d60927c15a5ba5e77a984f50f74f9b1f5a1056ee5d60c4daaad1da67795c3c1c76a7df50cfd186b99aaaec663317c1e359e0122f8a3d59b5792d3b9fc1e65b5e2d6715f554075490d7e2a3d0ec087a49828b26fb31df84430c4b5a5d7e4b3445237115133d7129522f5f753c1cfe31bc3a6c8d4fdfff653eea2ed770bf171f4fe9a1b42e2a4d3a598f0eb92a287fc5590b5251c37e63231a95c163873177e123ae4369e31ac4081f31567445f3c7d5a61c"}}, 0x110) read$eventfd(r4, &(0x7f0000000200), 0x8) openat$ashmem(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/ashmem\x00', 0x490000, 0x0) socketpair$inet_sctp(0x2, 0x0, 0x84, &(0x7f0000000240)) 01:28:58 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)="6d73646f73ff", &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:28:58 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x4}, 0x0) 01:28:58 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x8}, 0x0) [ 2210.760423] bridge0: port 2(bridge_slave_1) entered disabled state [ 2210.767127] bridge0: port 1(bridge_slave_0) entered disabled state [ 2210.831367] device bridge0 left promiscuous mode 01:28:58 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x10, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:28:58 executing program 1: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:28:58 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)="6d73646f730e", &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:28:58 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:28:59 executing program 1: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:28:59 executing program 1: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:28:59 executing program 1: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:28:59 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) [ 2211.664908] bridge0: port 2(bridge_slave_1) entered blocking state [ 2211.671418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2211.678203] bridge0: port 1(bridge_slave_0) entered blocking state [ 2211.684632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2211.717132] device bridge0 entered promiscuous mode 01:28:59 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:28:59 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:28:59 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x2}, 0x0) 01:28:59 executing program 1: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:00 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x301}, 0x0) 01:29:00 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos3', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:00 executing program 1: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:00 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x200000000000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:29:00 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:00 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:00 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0xffffff1f}, 0x0) 01:29:00 executing program 1: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:00 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:00 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x11000000}, 0x0) 01:29:00 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:00 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:00 executing program 1: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:00 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x34000}, 0x0) [ 2212.908433] FAT-fs (loop4): bogus number of reserved sectors [ 2212.942494] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:01 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) 01:29:01 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x23000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:29:01 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)="6d73646f73ff", &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:01 executing program 1: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:02 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x930000}, 0x0) 01:29:02 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:02 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:02 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:02 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x200000000000000}, 0x0) 01:29:02 executing program 1: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:02 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:02 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:02 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x70500000000000}, 0x0) [ 2214.451777] FAT-fs (loop4): bogus number of reserved sectors [ 2214.498465] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2214.593084] FAT-fs (loop4): bogus number of reserved sectors [ 2214.624988] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:03 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x40000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:29:03 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:03 executing program 1: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:03 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:03 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x70700000000000}, 0x0) 01:29:03 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:03 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x3f00000000000000}, 0x0) 01:29:03 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:03 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) getdents64(0xffffffffffffffff, &(0x7f0000000440)=""/186, 0x760) getdents(0xffffffffffffffff, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) [ 2215.511105] FAT-fs (loop4): bogus number of reserved sectors [ 2215.545891] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:03 executing program 1: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:03 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x8000000}, 0x0) [ 2215.658501] FAT-fs (loop4): bogus number of reserved sectors [ 2215.694728] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:03 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 2215.968868] FAT-fs (loop4): bogus number of reserved sectors [ 2216.003094] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2216.066840] FAT-fs (loop4): bogus number of reserved sectors [ 2216.075672] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:04 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x2200000000000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:29:04 executing program 0: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r0 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x760) getdents(r0, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:04 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x3f00}, 0x0) 01:29:04 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:04 executing program 1: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x10040, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r0 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x760) getdents(r0, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:04 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 2216.255301] FAT-fs (loop4): bogus number of reserved sectors [ 2216.291797] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:04 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:04 executing program 1: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x10040, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r0 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x760) getdents(r0, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:04 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0xffffffffff600000}, 0x0) [ 2216.410397] FAT-fs (loop4): bogus number of reserved sectors [ 2216.426248] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:04 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:04 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x7100}, 0x0) 01:29:04 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) [ 2216.682652] FAT-fs (loop4): bogus number of reserved sectors [ 2216.713342] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2216.808098] FAT-fs (loop4): bogus number of reserved sectors [ 2216.814250] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:05 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x2000000000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:29:05 executing program 1: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x10040, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) mkdir(0x0, 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r0 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x760) getdents(r0, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:05 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r0 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x760) getdents(r0, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:05 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:05 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x800000000000000}, 0x0) 01:29:05 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x10040, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r0 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x760) getdents(r0, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) [ 2217.562534] FAT-fs (loop4): bogus number of reserved sectors [ 2217.580552] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:05 executing program 1: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x10040, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r0 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x760) getdents(r0, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:05 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x10040, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r0 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x760) getdents(r0, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:05 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r0 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x760) getdents(r0, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:05 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0xff600000}, 0x0) 01:29:05 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:05 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x2000000}, 0x0) [ 2217.993640] FAT-fs (loop4): bogus number of reserved sectors [ 2218.048285] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2218.131554] FAT-fs (loop4): bogus number of reserved sectors [ 2218.146454] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:06 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x1c00, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:29:06 executing program 1: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x10040, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], 0x0, &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r0 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x760) getdents(r0, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:06 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:06 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x10040, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r0 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x760) getdents(r0, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:06 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x400000000000}, 0x0) 01:29:06 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)="6d73646f73c0", &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:06 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:06 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x9300}, 0x0) 01:29:06 executing program 1: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x10040, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000180)) r0 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x760) getdents(r0, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:06 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)="6d73646f7304", &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:06 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:06 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x10040, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r0 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x760) getdents(r0, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:07 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x300, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:29:07 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:07 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x100000000000000}, 0x0) 01:29:07 executing program 1: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x10040, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x760) getdents(r0, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:07 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:07 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x10040, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r0 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x760) getdents(r0, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) [ 2219.576221] FAT-fs (loop4): bogus number of reserved sectors 01:29:07 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x2}, 0x0) [ 2219.659391] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:07 executing program 1: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x10040, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r0 = open$dir(0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x760) getdents(r0, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:07 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x10040, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r0 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x760) getdents(r0, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:07 executing program 5: futex(0x0, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) [ 2219.756958] FAT-fs (loop4): bogus number of reserved sectors [ 2219.771885] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:07 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x8}, 0x0) 01:29:07 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 2220.174386] FAT-fs (loop4): bogus number of reserved sectors [ 2220.228675] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2220.310077] FAT-fs (loop4): bogus number of reserved sectors [ 2220.362827] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:09 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x12, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:29:09 executing program 5: futex(&(0x7f000000cffc), 0x0, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:09 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x7fffffffefff}, 0x0) 01:29:09 executing program 1: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x10040, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r0 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000440)=""/186, 0x760) getdents(r0, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:09 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x10040, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r0 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x760) getdents(r0, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:09 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdosk', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:09 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x400000}, 0x0) 01:29:09 executing program 1: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x10040, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r0 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) getdents(r0, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:09 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:09 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)="6d73646f73fc", &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:09 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x10040, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r0 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x760) getdents(r0, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:09 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x40030000000000}, 0x0) 01:29:10 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0xfffffff6, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:29:10 executing program 1: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x10040, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r0 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x760) getdents(0xffffffffffffffff, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) [ 2222.663747] print_req_error: I/O error, dev loop3, sector 0 [ 2222.669598] FAT-fs (loop3): unable to read boot sector 01:29:10 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:10 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x930000000000}, 0x0) 01:29:10 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:10 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) [ 2222.826981] FAT-fs (loop4): bogus number of reserved sectors 01:29:10 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) [ 2222.880480] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:10 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x1100000000000000}, 0x0) 01:29:11 executing program 1: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x10040, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r0 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x760) getdents(r0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) [ 2222.982055] FAT-fs (loop4): bogus number of reserved sectors [ 2223.021958] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:11 executing program 0: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x12, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:29:11 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x4000}, 0x0) 01:29:11 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 2223.409150] FAT-fs (loop4): bogus number of reserved sectors [ 2223.432839] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2223.523343] FAT-fs (loop4): bogus number of reserved sectors [ 2223.577746] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:12 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0xc000000000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:29:12 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:12 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x400300}, 0x0) 01:29:12 executing program 1: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x10040, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r0 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x760) getdents(r0, &(0x7f0000000180)=""/108, 0x6c) futex(0x0, 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:12 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:12 executing program 0: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x7, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:29:12 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x60ff}, 0x0) [ 2224.510342] FAT-fs (loop4): bogus number of reserved sectors [ 2224.538087] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:12 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) [ 2224.616301] FAT-fs (loop4): bogus number of reserved sectors [ 2224.632077] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:12 executing program 1: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x10040, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r0 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x760) getdents(r0, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:12 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x3f000000}, 0x0) 01:29:12 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdosh', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:13 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:13 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0xe00, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:29:13 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:13 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x60ffffffffff}, 0x0) 01:29:13 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)="6d73646f7397", &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:13 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffd) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet(0x2, 0x0, 0x0, 0x0) exit(0x0) lseek(r0, 0x0, 0x0) 01:29:13 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x74, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:29:14 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0xffffff7f00000000}, 0x0) 01:29:14 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:14 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x1000000}, 0x0) 01:29:14 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:14 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:14 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x11}, 0x0) [ 2226.588674] FAT-fs (loop4): bogus number of reserved sectors [ 2226.643220] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2226.717973] FAT-fs (loop4): bogus number of reserved sectors [ 2226.782356] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:15 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffd) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet(0x2, 0x0, 0x0, 0x0) exit(0x0) lseek(r0, 0x0, 0x0) 01:29:15 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:15 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)="6d73646f7304", &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:15 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x507000}, 0x0) 01:29:15 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) sendfile(r1, r2, 0x0, 0x10000000000443) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x3) 01:29:15 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0xa000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:29:15 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x707000}, 0x0) 01:29:15 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:15 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:15 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x710000}, 0x0) 01:29:15 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x705000}, 0x0) [ 2227.921454] FAT-fs (loop4): bogus number of reserved sectors 01:29:16 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) [ 2228.011894] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2228.080225] FAT-fs (loop4): bogus number of reserved sectors [ 2228.106206] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:16 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffd) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet(0x2, 0x0, 0x0, 0x0) exit(0x0) lseek(r0, 0x0, 0x0) 01:29:16 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x1500, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:29:16 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0xffffff7f}, 0x0) 01:29:16 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:16 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:16 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) setsockopt$inet_dccp_buf(r0, 0x21, 0xd, &(0x7f0000000340)="ee6b1d9d7c73f74a46899eed6f11cecf7040ff79f4d025768a57d57839010d", 0x1f) r1 = accept4(r0, 0x0, 0x0, 0x0) socketpair$inet(0x2, 0x6, 0xc515, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r4, 0xc008551c, &(0x7f0000000180)={0x3eb, 0x4, [0x8001]}) sendfile(r1, r4, 0x0, 0x10000000000443) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e17ca2bb75e59e6fc1df10736f120464548fbbaa18bf524d91efb14cda02f718652c6be4a85e9e9047e755c156528b9507e6e773094a34cacf122bbe9e4fd041aa24ed1a652166284beb08d145b835d515a00bb66c4c1099b1d50106678fb72973b87305a76f7a"], 0x58) name_to_handle_at(r4, &(0x7f0000000200)='./file0\x00', &(0x7f0000000440)={0xe5, 0x3ff, "15d9c9a751722d4977311b8ef1a76fd10ca1c000d0d796150ab5393823e66e9e03e0efeb46913d1b91878363dab37e75f38e0edf295790fb94114787f8ab3c0c375424c2244416ea1d158bb82b5f3b68aa58a2a7a56e546f31be807076c040b9a9f0be56e8ea05797cf2e0d31caaeac6e4457fc508212d0183d052d87424effc8e93c93cc164c0e298572a6ebf6037ef828ac3fa88b0e7035b8330e339d7b8d7508bfbdd2511a363182685816b4d1c39bb96c98e09cc9873999f3bb8801efcb737cc9ffe1edfb3829148a6836f29661e024e7f00849bd59973b624c701"}, &(0x7f0000000300), 0x1400) 01:29:16 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x1100}, 0x0) [ 2228.953165] FAT-fs (loop4): bogus number of reserved sectors [ 2228.983429] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:17 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) [ 2229.089744] FAT-fs (loop4): bogus number of reserved sectors [ 2229.113698] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:17 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x730000}, 0x0) 01:29:17 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:17 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffd) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet(0x2, 0x0, 0x0, 0x0) lseek(r0, 0x0, 0x0) 01:29:17 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) [ 2229.462887] FAT-fs (loop4): bogus number of reserved sectors 01:29:17 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffd) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) [ 2229.509155] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2229.615071] FAT-fs (loop4): bogus number of reserved sectors [ 2229.674603] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:18 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x1b00000000000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:29:18 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x710000000000}, 0x0) 01:29:18 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:18 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffd) lseek(r0, 0x0, 0x0) 01:29:18 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:18 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="7a00000063ea88cc4e4776d6ed29f9a7bbf072e0fbea467a5e8d332a19f9e08583e9187c5f9c5aa0f3a6be415eea14e5f7f632146114abfba14f7b1a8e914eeb9e515b6fafd4d80f4b1163afac6d0e4381e0c2ff9a16921c383cf8350476945850b4a31a6c0c6a1f177d6498dd855d62f15c51e754118c5187dd9cb9514daf16ef59efa4aa99f6d2086573c6cbaad849576aa874d9f44a0c1792d205740ae76abebd1f8755d40b8c25927a21628f360c474d130cadc2822ed80520271bf702ae258b583d2e7f0f72f04ff67f663d6a10453c63765ba99ad698b84314e23fe7dcdb6db61102a003f4b9b25fdac94c5f4478a7c7dc7d451fe5cc"], &(0x7f0000000200)=0x82) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000240)={r3, 0xfffffffffffffffd}, &(0x7f0000000280)=0x8) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') sendfile(r1, r4, 0x0, 0x10000000000443) syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x5, 0xa0c00) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) 01:29:18 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) [ 2230.516081] FAT-fs (loop4): bogus number of reserved sectors 01:29:18 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0xffefffffff7f0000}, 0x0) [ 2230.563629] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2230.649771] FAT-fs (loop4): bogus number of reserved sectors [ 2230.689711] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:18 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:18 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 01:29:18 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x730000000000}, 0x0) 01:29:18 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 2231.060251] FAT-fs (loop4): bogus number of reserved sectors [ 2231.113504] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2231.203700] FAT-fs (loop4): bogus number of reserved sectors [ 2231.218671] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:19 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x8cffffff00000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:29:19 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 01:29:19 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:19 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos4', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:19 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x7300}, 0x0) 01:29:19 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="7a00000063ea88cc4e4776d6ed29f9a7bbf072e0fbea467a5e8d332a19f9e08583e9187c5f9c5aa0f3a6be415eea14e5f7f632146114abfba14f7b1a8e914eeb9e515b6fafd4d80f4b1163afac6d0e4381e0c2ff9a16921c383cf8350476945850b4a31a6c0c6a1f177d6498dd855d62f15c51e754118c5187dd9cb9514daf16ef59efa4aa99f6d2086573c6cbaad849576aa874d9f44a0c1792d205740ae76abebd1f8755d40b8c25927a21628f360c474d130cadc2822ed80520271bf702ae258b583d2e7f0f72f04ff67f663d6a10453c63765ba99ad698b84314e23fe7dcdb6db61102a003f4b9b25fdac94c5f4478a7c7dc7d451fe5cc"], &(0x7f0000000200)=0x82) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000240)={r3, 0xfffffffffffffffd}, &(0x7f0000000280)=0x8) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') sendfile(r1, r4, 0x0, 0x10000000000443) syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x5, 0xa0c00) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) 01:29:19 executing program 0: ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffd) lseek(0xffffffffffffffff, 0x0, 0x0) 01:29:19 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x3f00}, 0x0) 01:29:19 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r0 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x760) getdents(r0, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:19 executing program 0: ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffd) lseek(0xffffffffffffffff, 0x0, 0x0) 01:29:19 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:20 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x400000}, 0x0) [ 2232.046828] FAT-fs (loop4): bogus number of reserved sectors [ 2232.080591] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2232.184501] FAT-fs (loop4): bogus number of reserved sectors [ 2232.248512] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:20 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x1a000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:29:20 executing program 0: ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffd) lseek(0xffffffffffffffff, 0x0, 0x0) 01:29:20 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:20 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x3f00000000000000}, 0x0) 01:29:20 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)="6d73646f7304", &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:20 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="7a00000063ea88cc4e4776d6ed29f9a7bbf072e0fbea467a5e8d332a19f9e08583e9187c5f9c5aa0f3a6be415eea14e5f7f632146114abfba14f7b1a8e914eeb9e515b6fafd4d80f4b1163afac6d0e4381e0c2ff9a16921c383cf8350476945850b4a31a6c0c6a1f177d6498dd855d62f15c51e754118c5187dd9cb9514daf16ef59efa4aa99f6d2086573c6cbaad849576aa874d9f44a0c1792d205740ae76abebd1f8755d40b8c25927a21628f360c474d130cadc2822ed80520271bf702ae258b583d2e7f0f72f04ff67f663d6a10453c63765ba99ad698b84314e23fe7dcdb6db61102a003f4b9b25fdac94c5f4478a7c7dc7d451fe5cc"], &(0x7f0000000200)=0x82) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000240)={r3, 0xfffffffffffffffd}, &(0x7f0000000280)=0x8) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') sendfile(r1, r4, 0x0, 0x10000000000443) syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x5, 0xa0c00) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) 01:29:20 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffd) lseek(r0, 0x0, 0x0) 01:29:21 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x70500000000000}, 0x0) 01:29:21 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x0, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:21 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:21 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffd) lseek(r0, 0x0, 0x0) 01:29:21 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x0, 0x3, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) [ 2233.241836] FAT-fs (loop4): bogus number of reserved sectors [ 2233.297466] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2233.425082] FAT-fs (loop4): bogus number of reserved sectors [ 2233.486686] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:21 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0xb, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:29:21 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x70700000000000}, 0x0) 01:29:21 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffd) lseek(r0, 0x0, 0x0) 01:29:21 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x0, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:21 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)="6d73646f73ff", &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:21 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x400000}, 0x0) 01:29:22 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x710000000000}, 0x0) 01:29:22 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffd) lseek(r0, 0x0, 0x0) 01:29:22 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x0, 0x0, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:22 executing program 1: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x0, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:22 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x60ff}, 0x0) 01:29:22 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 2234.402677] FAT-fs (loop4): bogus number of reserved sectors [ 2234.445078] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2234.546137] FAT-fs (loop4): bogus number of reserved sectors [ 2234.575982] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:23 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x24, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:29:23 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffd) lseek(r0, 0x0, 0x0) 01:29:23 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x0, 0x2, 0x0, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:23 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r3, &(0x7f0000000040), 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) write$cgroup_pid(r5, &(0x7f0000000100), 0x12) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') sendfile(r1, r6, 0x0, 0x10000000000443) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], 0x6, 0x3, 0x5, 0x2}) 01:29:23 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x34000}, 0x0) 01:29:23 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:23 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffd) lseek(r0, 0x0, 0x0) [ 2235.232542] FAT-fs (loop4): bogus number of reserved sectors 01:29:23 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0xffffffffff600000}, 0x0) 01:29:23 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x0, 0x2, 0x8, 0x0, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) [ 2235.305936] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:23 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) lseek(r0, 0x0, 0x0) [ 2235.402365] FAT-fs (loop4): bogus number of reserved sectors [ 2235.434165] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:23 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x100000000000000}, 0x0) 01:29:23 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 2235.748216] FAT-fs (loop4): bogus number of reserved sectors [ 2235.770909] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2235.849779] FAT-fs (loop4): bogus number of reserved sectors [ 2235.902944] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:24 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x4020000000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:29:24 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x0, 0x2, 0x8, 0x0, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:24 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) lseek(r0, 0x0, 0x0) 01:29:24 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:24 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x400300}, 0x0) 01:29:24 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r3, &(0x7f0000000040), 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) write$cgroup_pid(r5, &(0x7f0000000100), 0x12) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') sendfile(r1, r6, 0x0, 0x10000000000443) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], 0x6, 0x3, 0x5, 0x2}) [ 2236.374495] FAT-fs (loop4): bogus number of reserved sectors 01:29:24 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) lseek(r0, 0x0, 0x0) 01:29:24 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x11000000}, 0x0) [ 2236.424055] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2236.528902] FAT-fs (loop4): bogus number of reserved sectors [ 2236.601177] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:24 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffd) lseek(0xffffffffffffffff, 0x0, 0x0) 01:29:24 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x0, 0x2, 0x8, 0x8001, 0x0, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:24 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:24 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffd) lseek(0xffffffffffffffff, 0x0, 0x0) [ 2236.950773] FAT-fs (loop4): bogus number of reserved sectors [ 2236.985862] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2237.085031] FAT-fs (loop4): bogus number of reserved sectors [ 2237.090887] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:25 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0xf6ffffff00000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:29:25 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0xff600000}, 0x0) 01:29:25 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x0, 0x2, 0x8, 0x8001, 0x0, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:25 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffd) lseek(0xffffffffffffffff, 0x0, 0x0) 01:29:25 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos"', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:25 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r3, &(0x7f0000000040), 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) write$cgroup_pid(r5, &(0x7f0000000100), 0x12) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') sendfile(r1, r6, 0x0, 0x10000000000443) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], 0x6, 0x3, 0x5, 0x2}) 01:29:26 executing program 0: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x4020000000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:29:26 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0xffffff7f}, 0x0) 01:29:26 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:26 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x0, 0x2, 0x8, 0x8001, 0x9, 0x0, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:26 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x11}, 0x0) [ 2238.320773] FAT-fs (loop4): bogus number of reserved sectors [ 2238.342309] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:26 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x2}, 0x0) [ 2238.419037] FAT-fs (loop4): bogus number of reserved sectors [ 2238.508832] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:27 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x1700000000000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:29:27 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x0, 0x2, 0x8, 0x0, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:27 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x0, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x0, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:27 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)="6d73646f73ff", &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:27 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x60ffffffffff}, 0x0) 01:29:27 executing program 1: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x0, 0x2, 0x8, 0x8001, 0x0, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:27 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 01:29:27 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x0, 0x2, 0x8, 0x0, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:27 executing program 1: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x0, 0x2, 0x8, 0x8001, 0x0, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:27 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0xffefffffff7f0000}, 0x0) 01:29:27 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x0, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:27 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 2240.099945] FAT-fs (loop4): bogus number of reserved sectors [ 2240.115859] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2240.208838] FAT-fs (loop4): bogus number of reserved sectors [ 2240.218367] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:28 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x1d00000000000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:29:28 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x730000000000}, 0x0) 01:29:28 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x0, 0x2, 0x8, 0x0, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:28 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x0, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:28 executing program 1: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x0, 0x2, 0x8, 0x8001, 0x0, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:28 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 2240.812133] FAT-fs (loop4): bogus number of reserved sectors 01:29:28 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x7100}, 0x0) 01:29:28 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x0, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(0x0, 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) [ 2240.906262] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2241.030406] FAT-fs (loop4): bogus number of reserved sectors [ 2241.050322] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:29 executing program 1: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x0, 0x2, 0x8, 0x0, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:29 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x0, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:29 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x730000}, 0x0) 01:29:29 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x0, 0x2, 0x8, 0x0, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:29 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x2300, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:29:29 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:29 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x930000}, 0x0) 01:29:29 executing program 0: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x2600000000000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:29:29 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x0, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], 0x0, &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:29 executing program 1: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x0, 0x2, 0x8, 0x0, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) [ 2241.863072] FAT-fs (loop4): bogus number of reserved sectors [ 2241.901063] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2241.974507] FAT-fs (loop4): bogus number of reserved sectors 01:29:30 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x800000000000000}, 0x0) [ 2242.070548] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:30 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x0, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:30 executing program 1: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x0, 0x2, 0x8, 0x0, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:30 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:30 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x40030000000000}, 0x0) 01:29:30 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x0, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) [ 2242.523862] FAT-fs (loop4): bogus number of reserved sectors [ 2242.605255] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2242.753191] FAT-fs (loop4): bogus number of reserved sectors [ 2242.854537] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:31 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x1100, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:29:31 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x400000000000}, 0x0) 01:29:31 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) r1 = gettid() write$cgroup_pid(r0, &(0x7f0000000140), 0x12) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) close(r0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000780)="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") perf_event_open(&(0x7f0000000400)={0x5, 0x70, 0x8, 0xffffffff99950272, 0x5, 0x30000000000000, 0x0, 0x5a8, 0x0, 0x8, 0x0, 0x10000, 0x6, 0x1ff, 0x81, 0x8, 0x5, 0x7fffffff, 0x7f, 0x5, 0x1ff, 0x3, 0x4, 0x445, 0x5, 0xffffffff00000000, 0x9, 0x5, 0x7f, 0x1c00000000, 0x9c, 0x46, 0x1000, 0xb92, 0xfffffffeffffffff, 0x7ff, 0x64e, 0x200, 0x0, 0xf83, 0x0, @perf_bp={0x0, 0x8}, 0x10810, 0x1, 0x100, 0x7, 0x9c3, 0x2, 0x2}, r1, 0x2, r2, 0x9) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x28, &(0x7f0000000240)}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) openat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000300)={"6e72300100", 0x1132}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r5 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r5, 0x10d, 0xf, 0xffffffffffffffff, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000003c40)=ANY=[@ANYBLOB="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"], 0x0, 0x18b}, 0x20) socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r3, &(0x7f0000003c00)={&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @multicast1}}}, 0x80, &(0x7f0000003a80)=[{&(0x7f0000003a40)}], 0x1, 0x0, 0x0, 0x20000000}, 0x80) write$cgroup_int(r4, &(0x7f0000000000)=0x8, 0x335) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x919) close(r4) 01:29:31 executing program 0: 01:29:31 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:31 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x0, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(0x0, 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:31 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x8}, 0x0) [ 2243.467984] FAT-fs (loop4): bogus number of reserved sectors 01:29:31 executing program 0: [ 2243.521807] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2243.607519] FAT-fs (loop4): bogus number of reserved sectors [ 2243.659157] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:31 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x0, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:31 executing program 0: 01:29:31 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x507000}, 0x0) 01:29:31 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)="6d73646f73ff", &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:32 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x4, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:29:32 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) r1 = gettid() write$cgroup_pid(r0, &(0x7f0000000140), 0x12) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) close(r0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000780)="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") perf_event_open(&(0x7f0000000400)={0x5, 0x70, 0x8, 0xffffffff99950272, 0x5, 0x30000000000000, 0x0, 0x5a8, 0x0, 0x8, 0x0, 0x10000, 0x6, 0x1ff, 0x81, 0x8, 0x5, 0x7fffffff, 0x7f, 0x5, 0x1ff, 0x3, 0x4, 0x445, 0x5, 0xffffffff00000000, 0x9, 0x5, 0x7f, 0x1c00000000, 0x9c, 0x46, 0x1000, 0xb92, 0xfffffffeffffffff, 0x7ff, 0x64e, 0x200, 0x0, 0xf83, 0x0, @perf_bp={0x0, 0x8}, 0x10810, 0x1, 0x100, 0x7, 0x9c3, 0x2, 0x2}, r1, 0x2, r2, 0x9) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x28, &(0x7f0000000240)}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) openat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000300)={"6e72300100", 0x1132}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r5 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r5, 0x10d, 0xf, 0xffffffffffffffff, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000003c40)=ANY=[@ANYBLOB="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"], 0x0, 0x18b}, 0x20) socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r3, &(0x7f0000003c00)={&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @multicast1}}}, 0x80, &(0x7f0000003a80)=[{&(0x7f0000003a40)}], 0x1, 0x0, 0x0, 0x20000000}, 0x80) write$cgroup_int(r4, &(0x7f0000000000)=0x8, 0x335) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x919) close(r4) 01:29:32 executing program 0: 01:29:32 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x710000}, 0x0) 01:29:32 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x0, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:32 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)="6d73646f73fd", &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:32 executing program 0: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/11, 0x10158) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = creat(&(0x7f0000000080)="e91f7189591e9233614b00", 0x10a) dup2(r0, r1) execve(&(0x7f00000000c0)="e91f7189591e9233614b00", 0x0, 0x0) ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, 0x0) r2 = open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000004c0)='./file0/../file0\x00', 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 01:29:32 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x200000000000000}, 0x0) 01:29:32 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)="6d73646f7310", &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:32 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x0, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(0xffffffffffffffff, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) [ 2244.992850] device nr0 entered promiscuous mode 01:29:33 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x0, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, 0x0, 0x0) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:33 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)="6d73646f7304", &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:34 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x705000}, 0x0) 01:29:34 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x0, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(0x0, 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:34 executing program 1: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = creat(&(0x7f00000003c0)='./file1\x00', 0x0) dup2(r0, r1) execve(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) flock(r1, 0x1) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) 01:29:34 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)="6d73646f738c", &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:34 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x28, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:29:34 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) write$binfmt_elf64(r0, &(0x7f0000001640)=ANY=[@ANYBLOB="7f454c4600706a5ce1a2ee467d3bca22f507643a066104010000000000000200000000000040000000000000000c02000000000000a6d10000030038000200ffffffff468051e57464030000000300000000000000bc08000000000000f9ffffffffffffffff7f0000000000000600000000000000000800000000000005000000020000006f000000000000000000000000000000ea2b000000000000080000000000000003000000000000000800000000000000f8d1cf6bb60a3cc8252c025b5f92a84bb4d5efd7201c0b3858f135eeae2dc7f0e87b4cb7c2ebe8e1bf26d90204e8796ae2234ab4507f89e0a927c56e06ac8486242f23306477b3ced713f3ccd7a0f1572c2cfeceaf21b6b33f3293bfb67974157e7a4e10510b1d74ca0f796a92f62c8102c33ef139e0cf2ccd4388e8404194afc7dcb3c0580904a76736e493f5c3e2c8d91d510485793916f26e041f6b30857e8c9b55fe64259328116a71513c065b05319d42f98f00000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000002000000008f00000000000000000000000000f9ffffff000000000000000000000000000000000000000000001e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000040000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff00000000000000000000000000000000000000000000000000db0000000000000000000000000000000000000000bb4243dbcbc2188b0017487b2e533a58643fe24b175f8e919e52849e39389043525d3ddd494ae985e53468473c711971a0f1c6201ef789867a6a6a43da1331e65f4e1a7cff734508108e299bb2ba8fae27b9f3b46f1329d14223f181cfcf9590b42ecbeeee9de504ee9fda58c875dd97bd55aaa58b2174"], 0x426) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xbda) 01:29:34 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x930000000000}, 0x0) 01:29:34 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10040, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1f, 0x3, 0x0, 0x2, 0x8, 0x8001, 0x9, 0x401, 0x8, 0x2}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents(r1, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:34 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) pipe(&(0x7f00000003c0)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) epoll_create(0x80) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) unshare(0x2000400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 01:29:34 executing program 1: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = creat(&(0x7f00000003c0)='./file1\x00', 0x0) dup2(r0, r1) execve(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) flock(r1, 0x1) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) 01:29:34 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)="6d73646f7303", &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:34 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x7300}, 0x0) 01:29:34 executing program 0: clone(0x13102001fef, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x70}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:29:34 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x9300}, 0x0) 01:29:34 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)="6d73646f7304", &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:34 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="7f"], 0x1) 01:29:35 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x48, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:29:35 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x1100000000000000}, 0x0) 01:29:35 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)="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", 0x0, 0x0) getdents(r0, &(0x7f0000000400)=""/135, 0xb7) 01:29:35 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xbdaf}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/udp\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc98c, 0x0, 0x0, 0x0, 0x0, 0x328, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$packet(0x11, 0x0, 0x300, 0x0) pipe(&(0x7f0000000040)) 01:29:35 executing program 5: clone(0x9000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 01:29:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x8, 0x2, [@tunl6_policy=[@tunl_policy=[@IFLA_IPTUN_COLLECT_METADATA={0x4}]]]}}}]}, 0x38}}, 0x0) 01:29:35 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x1000000}, 0x0) 01:29:35 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newsa={0x13c, 0x10, 0x721, 0x0, 0x0, {{@in=@rand_addr, @in6=@dev}, {@in=@broadcast, 0x0, 0x833}, @in6, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x13c}}, 0x0) [ 2247.855523] FAT-fs (loop4): bogus number of reserved sectors [ 2247.883002] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2247.966414] FAT-fs (loop4): bogus number of reserved sectors [ 2247.972580] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:36 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos(', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x80000000006, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=ANY=[@ANYBLOB="02130000020000000000eb04000000be26804243fd1a5f08aed4f3a12fffdb6ed9"], 0x21}}, 0x0) 01:29:36 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="021600000a00000000000004000000000800120000004c542800100000000000000000008000871414ec744ff92201dccc28b39075e3363a9100000000000000000000000000"], 0x46}}, 0x0) 01:29:37 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x3, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:29:37 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x3f000000}, 0x0) 01:29:37 executing program 1: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x20005f) write$binfmt_elf32(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c4600800000000000000000000002000600ca3f8bca0000000038000000000000f7ffffffffffff1f0002000000000000000000000001000000000000000000f87b66ff200005000000000000010000000000000000310ff3eec1b0000c085355be8847c22e30f56282c62c95723f068fe42d2796cc"], 0x78) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) uselib(&(0x7f0000000000)='./file0\x00') 01:29:37 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$EVIOCGREP(r1, 0x4004743b, &(0x7f0000d1df52)=""/174) 01:29:37 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)="6d73646f73ff", &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:37 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x760) getdents(r0, &(0x7f0000000180)=""/108, 0x6c) 01:29:37 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x2000000}, 0x0) 01:29:37 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000f3ffffff0000000000000000950005fe00000000"], 0x0, 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000540)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000080)={r0, r1}) writev(r2, &(0x7f0000000140)=[{&(0x7f00000005c0)='~', 0x1}], 0x1) writev(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)="ce612abd66fdfc858a39ec72a7fa5f9423a11496481410a13d807e299a", 0x1d}], 0x1) 01:29:37 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x0, 0x800000000000004) ioctl(r1, 0x8912, &(0x7f00000000c0)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000004c0)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r3, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x398, 0x0) 01:29:37 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000f3ffffff0000000000000000950005fe00000000"], 0x0, 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000540)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000080)={r0, r1}) writev(r2, &(0x7f0000000140)=[{&(0x7f00000005c0)='~', 0x1}], 0x1) 01:29:37 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x8000000}, 0x0) [ 2249.413433] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 01:29:37 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) [ 2249.455980] audit: type=1400 audit(1542850177.458:312): avc: denied { ioctl } for pid=28403 comm="syz-executor5" path="socket:[489735]" dev="sockfs" ino=489735 ioctlcmd=0x89e0 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=sock_file permissive=1 01:29:38 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x1100}, 0x0) 01:29:38 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:38 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000380)="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", 0x0) fsetxattr$security_smack_entry(r2, &(0x7f0000000140)='security.SMACK64MMAP\x00', &(0x7f0000000280)='IPVS\x00', 0x5, 0xffffffffffffffff) sendfile(r1, r2, &(0x7f0000000240), 0x20000102000007) add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) sendfile(r2, r0, 0x0, 0x0) r3 = creat(&(0x7f0000000a00)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x8000000000044000) io_setup(0xb, &(0x7f0000000240)=0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000100)) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x119) io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000, 0x407000}]) lseek(r3, 0x0, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000640), 0x4) lsetxattr$trusted_overlay_origin(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r1, 0x4c01) r5 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x140) close(r3) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000940)={'team0\x00'}) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000002080)={{{@in6=@mcast1, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000002180)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002500)={{{@in=@multicast2, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@ipv4}}, &(0x7f0000002600)=0xe8) accept4$packet(r5, &(0x7f0000003e00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000003e40)=0x14, 0x800) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003f40)={0x0, @multicast1}, &(0x7f0000003f80)=0xc) accept4$packet(r3, &(0x7f0000003fc0), &(0x7f0000004000)=0x14, 0x800) open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) 01:29:38 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x398, 0x0) 01:29:38 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x1800, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:29:38 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) 01:29:38 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x3, 0x182) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x5, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000200)) r4 = memfd_create(&(0x7f0000000280)='vmnet0selinux/user]]#.(@\x00', 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000780)=[@text16={0x10, &(0x7f0000000740)="b8e3000f00d83ef30f11bb2ce80f01cf66b9bd0200000f320f320fc76b6d260f2391650f01b8ec0066b9800000c00f326635010000000f3036f20f01df", 0x3d}], 0x1, 0x0, &(0x7f00000007c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000800)=""/65, 0x41}], 0x1, &(0x7f0000000a00)=""/181, 0xb5}}], 0x1, 0x0, &(0x7f0000000040)) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000180), 0x4) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000ac0)={"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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f0000000280), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000400)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 01:29:38 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x707000}, 0x0) 01:29:38 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) listen(0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000002480)=[{&(0x7f0000002400)="b9", 0x1}], 0x1, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000000)={0x1, 0x1}, 0x2) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) close(r1) [ 2250.381504] FAT-fs (loop4): bogus number of reserved sectors [ 2250.398199] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2250.473312] FAT-fs (loop4): bogus number of reserved sectors [ 2250.479128] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2250.534169] audit: type=1804 audit(1542850178.538:313): pid=28461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir718207302/syzkaller.fdGkoc/602/bus" dev="sda1" ino=17681 res=1 01:29:38 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x7fffffffefff}, 0x0) 01:29:38 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 2250.595246] audit: type=1804 audit(1542850178.588:314): pid=28478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor0" name="/root/syzkaller-testdir718207302/syzkaller.fdGkoc/602/bus" dev="sda1" ino=17681 res=1 01:29:38 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000200)='\f', 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x1) [ 2250.727326] picdev_read: 364 callbacks suppressed [ 2250.727385] kvm: pic: non byte read [ 2250.731267] audit: type=1804 audit(1542850178.588:315): pid=28461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir718207302/syzkaller.fdGkoc/602/bus" dev="sda1" ino=17681 res=1 [ 2250.734523] kvm: pic: non byte read [ 2250.762746] audit: type=1804 audit(1542850178.598:316): pid=28478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir718207302/syzkaller.fdGkoc/602/bus" dev="sda1" ino=17681 res=1 [ 2250.772698] kvm: pic: non byte read [ 2250.805145] kvm: pic: non byte read [ 2250.811498] kvm: pic: non byte read [ 2250.818827] kvm: pic: non byte read [ 2250.824486] kvm: pic: non byte read 01:29:38 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x4000}, 0x0) [ 2250.830681] FAT-fs (loop4): bogus number of reserved sectors [ 2250.846205] kvm: pic: non byte read [ 2250.861145] kvm: pic: non byte read [ 2250.865612] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2250.872533] kvm: pic: non byte read [ 2250.924096] FAT-fs (loop4): bogus number of reserved sectors 01:29:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0xc08, 0x52, &(0x7f0000000480), 0x0) r3 = memfd_create(&(0x7f0000000440)='ppp0\x00', 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000500), 0x0) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000680)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000240)=0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2250.999947] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:39 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x800000000000000}, 0x0) 01:29:39 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 2251.419103] FAT-fs (loop4): bogus number of reserved sectors [ 2251.497862] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:39 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x22000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:29:39 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x7300}, 0x0) 01:29:40 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082) fsetxattr$security_smack_entry(0xffffffffffffffff, &(0x7f0000000140)='security.SMACK64MMAP\x00', &(0x7f0000000280)='IPVS\x00', 0x5, 0xffffffffffffffff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000540)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, &(0x7f00000005c0)) r1 = creat(&(0x7f0000000a00)='./bus\x00', 0x0) io_setup(0xb, &(0x7f0000000240)=0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000680)) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000a40)=ANY=[@ANYBLOB], 0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000, 0x407000}]) lseek(0xffffffffffffffff, 0x0, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000640), 0x4) lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000100)='trusted.overlay.origin\x00', 0x0, 0x0, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) r3 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x140) close(0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000003f40)={0x0, @multicast1}, &(0x7f0000003f80)=0xc) accept4$packet(r1, 0x0, &(0x7f0000004000), 0x800) 01:29:40 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\'', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:40 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0xb3, &(0x7f0000000040)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/84, 0x54}}], 0x1, 0x0, 0x0) 01:29:40 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x7fffffffefff}, 0x0) 01:29:40 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0x3) 01:29:40 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x8}, 0x0) 01:29:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0xc08, 0x52, &(0x7f0000000480), 0x0) r3 = memfd_create(&(0x7f0000000440)='ppp0\x00', 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000500), 0x0) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000680)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000240)=0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2252.343600] audit: type=1804 audit(1542850180.348:317): pid=28556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir187456500/syzkaller.OXsPvz/2697/bus" dev="sda1" ino=17761 res=1 01:29:40 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos/', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000000c0)={0x0, 0x3, 0x3, 0x2, 0x8, 0x8001, 0x9}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r0 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x760) getdents(r0, &(0x7f0000000180)=""/108, 0x6c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 01:29:40 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0x3) 01:29:41 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)}, 0x0) write(r1, &(0x7f0000000000)="2400000052001f0014f9f407002c04000a00071008000100ffffffff0800000000000000", 0x24) 01:29:41 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x930000}, 0x0) 01:29:41 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0x3) 01:29:41 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0xc08, 0x52, &(0x7f0000000480), 0x0) r3 = memfd_create(&(0x7f0000000440)='ppp0\x00', 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000500), 0x0) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000680)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000240)=0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:29:41 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x2000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:29:41 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x400000}, 0x0) 01:29:41 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c2d023c126285718070") r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0xfc0004) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="a7", 0x1}], 0x1, 0x0, 0x0, 0x1}, 0x4000040) [ 2253.742207] FAT-fs (loop4): bogus number of reserved sectors [ 2253.756265] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:41 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0x3) 01:29:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0xc08, 0x52, &(0x7f0000000480), 0x0) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000180), 0x2) r3 = memfd_create(&(0x7f0000000440)='ppp0\x00', 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, &(0x7f0000000500), 0x0) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000680)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x4}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000001c0)={r4, 0x7}, &(0x7f0000000240)=0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2253.871802] FAT-fs (loop4): bogus number of reserved sectors [ 2253.892702] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:42 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x3f00000000000000}, 0x0) 01:29:42 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:42 executing program 1: shmctl$SHM_LOCK(0x0, 0x3) [ 2254.192545] FAT-fs (loop4): bogus number of reserved sectors 01:29:42 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x730000000000}, 0x0) [ 2254.244645] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2254.351378] FAT-fs (loop4): bogus number of reserved sectors 01:29:42 executing program 1: shmctl$SHM_LOCK(0x0, 0x3) [ 2254.418824] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:43 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x1100000000000000}, 0x0) 01:29:43 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000001380)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000240)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="00c98d213b6d954e"]], 0x0, 0x0, 0x0}) 01:29:43 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:43 executing program 1: shmctl$SHM_LOCK(0x0, 0x3) 01:29:43 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x1f00, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:29:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0xc08, 0x52, &(0x7f0000000480), 0x0) r3 = memfd_create(&(0x7f0000000440)='ppp0\x00', 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000500), 0x0) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000680)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000240)=0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:29:43 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0x3) [ 2255.084067] binder: 28679:28682 unknown command 536871360 [ 2255.121609] binder: 28679:28682 ioctl c0306201 20000180 returned -22 01:29:43 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x710000000000}, 0x0) [ 2255.146087] FAT-fs (loop4): bogus number of reserved sectors [ 2255.187049] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:43 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256\x00'}, 0x58) 01:29:43 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0x3) 01:29:43 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0xff600000}, 0x0) [ 2255.308889] FAT-fs (loop4): bogus number of reserved sectors [ 2255.325865] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:43 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0x3) 01:29:43 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x2e, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 01:29:43 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x11000000}, 0x0) 01:29:43 executing program 1: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0x3) [ 2255.653258] FAT-fs (loop4): bogus number of reserved sectors [ 2255.697040] audit: type=1400 audit(1542850183.698:318): avc: denied { set_context_mgr } for pid=28728 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 2255.722175] binder: 28728:28732 got transaction with invalid offsets ptr [ 2255.730338] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2255.771567] binder: 28728:28732 transaction failed 29201/-14, size 0-12288 line 3001 [ 2255.796523] binder_alloc: binder_alloc_mmap_handler: 28728 20001000-20004000 already mapped failed -16 [ 2255.800685] audit: type=1400 audit(1542850183.718:319): avc: denied { call } for pid=28728 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 2255.832314] binder: BINDER_SET_CONTEXT_MGR already set [ 2255.855242] binder: 28728:28732 ioctl 40046207 0 returned -16 [ 2255.895559] FAT-fs (loop4): bogus number of reserved sectors [ 2255.911239] binder: undelivered TRANSACTION_ERROR: 29201 [ 2255.922555] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:44 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x1400, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:29:44 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x707000}, 0x0) 01:29:44 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:44 executing program 1: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0x3) 01:29:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x2e, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 01:29:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0xc08, 0x52, &(0x7f0000000480), 0x0) memfd_create(&(0x7f0000000440)='ppp0\x00', 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000500), 0x0) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000680)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:29:44 executing program 1: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0x3) [ 2256.553668] binder: 28759:28764 got transaction with invalid offsets ptr [ 2256.589109] binder: 28759:28764 transaction failed 29201/-14, size 0-12288 line 3001 [ 2256.638038] binder: undelivered TRANSACTION_ERROR: 29201 01:29:44 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x40030000000000}, 0x0) [ 2256.688895] FAT-fs (loop4): bogus number of reserved sectors [ 2256.719782] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x2e, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) [ 2256.878102] FAT-fs (loop4): bogus number of reserved sectors 01:29:44 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0x3) [ 2256.922363] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2256.956120] binder: 28785:28787 got transaction with invalid offsets ptr 01:29:45 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)="6d73646f737f", &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:45 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x705000}, 0x0) [ 2257.029415] binder: 28785:28787 transaction failed 29201/-14, size 0-12288 line 3001 [ 2257.070734] binder: undelivered TRANSACTION_ERROR: 29201 01:29:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x2e, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 01:29:45 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0x3) 01:29:45 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x730000}, 0x0) 01:29:45 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:45 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x6c, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:29:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0xc08, 0x52, &(0x7f0000000480), 0x0) memfd_create(&(0x7f0000000440)='ppp0\x00', 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000500), 0x0) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000680)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2257.964836] binder: 28822:28825 got transaction with invalid offsets ptr [ 2257.989203] FAT-fs (loop4): bogus number of reserved sectors [ 2257.996634] binder: 28822:28825 transaction failed 29201/-14, size 0-12288 line 3001 01:29:46 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0x3) 01:29:46 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0xffffff7f00000000}, 0x0) [ 2258.014573] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2258.040595] binder: undelivered TRANSACTION_ERROR: 29201 01:29:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x2e, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 01:29:46 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0xc08, 0x52, &(0x7f0000000480), 0x0) memfd_create(&(0x7f0000000440)='ppp0\x00', 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000500), 0x0) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000680)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:29:46 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) [ 2258.240610] binder: 28851:28853 transaction failed 29189/-22, size 0-12288 line 2834 [ 2258.280202] binder: undelivered TRANSACTION_ERROR: 29189 01:29:46 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0x3) 01:29:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x2e, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) [ 2258.322698] FAT-fs (loop4): bogus number of reserved sectors [ 2258.393209] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:46 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x3f000000}, 0x0) [ 2258.467792] binder: 28869:28871 transaction failed 29189/-22, size 0-12288 line 2834 [ 2258.493205] binder: undelivered TRANSACTION_ERROR: 29189 [ 2258.513938] FAT-fs (loop4): bogus number of reserved sectors 01:29:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x2e, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) [ 2258.574675] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2258.751933] binder: 28880:28883 transaction failed 29189/-22, size 0-12288 line 2834 [ 2258.785212] binder: undelivered TRANSACTION_ERROR: 29189 01:29:47 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:47 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0x3) 01:29:47 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0xffffffffff600000}, 0x0) 01:29:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x2e, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 01:29:47 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x600, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:29:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0xc08, 0x52, &(0x7f0000000480), 0x0) memfd_create(&(0x7f0000000440)='ppp0\x00', 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000500), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2259.376535] binder_alloc: 28901: binder_alloc_buf, no vma [ 2259.402153] FAT-fs (loop4): bogus number of reserved sectors [ 2259.408144] binder: 28901:28906 transaction failed 29189/-3, size 0-12288 line 2973 01:29:47 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0x3) 01:29:47 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x100000000000000}, 0x0) 01:29:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x2e, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) [ 2259.433303] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2259.457323] binder: undelivered TRANSACTION_ERROR: 29189 [ 2259.540016] FAT-fs (loop4): bogus number of reserved sectors [ 2259.585144] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2259.620983] binder_alloc: 28925: binder_alloc_buf, no vma 01:29:47 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0xffefffffff7f0000}, 0x0) 01:29:47 executing program 1: r0 = socket$inet6_sctp(0xa, 0x100000000000001, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6}, 0x0) [ 2259.633694] binder: 28925:28930 transaction failed 29189/-3, size 0-12288 line 2973 01:29:47 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)="6d73646f730f", &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 2259.689649] binder: undelivered TRANSACTION_ERROR: 29189 01:29:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x2e, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 01:29:47 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x400300}, 0x0) 01:29:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x2b000}], 0x1, 0x0) [ 2259.917502] binder_alloc: 28946: binder_alloc_buf, no vma [ 2259.957509] binder: 28946:28948 transaction failed 29189/-3, size 0-12288 line 2973 [ 2259.967014] audit: type=1400 audit(1542850187.958:320): avc: denied { map } for pid=28949 comm="syz-executor1" path="/dev/nullb0" dev="devtmpfs" ino=2516 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=blk_file permissive=1 01:29:48 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 2260.046445] binder: undelivered TRANSACTION_ERROR: 29189 [ 2260.251905] FAT-fs (loop4): bogus number of reserved sectors [ 2260.257932] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2260.289317] FAT-fs (loop4): bogus number of reserved sectors [ 2260.299097] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:48 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x21, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:29:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x2e, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 01:29:48 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x9300}, 0x0) 01:29:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0xc08, 0x52, &(0x7f0000000480), 0x0) memfd_create(&(0x7f0000000440)='ppp0\x00', 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:29:48 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:48 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) 01:29:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x2e, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) [ 2260.532554] FAT-fs (loop4): bogus number of reserved sectors 01:29:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x2b000}], 0x1, 0x0) 01:29:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0xc08, 0x52, &(0x7f0000000480), 0x0) memfd_create(&(0x7f0000000440)='ppp0\x00', 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2260.582848] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:48 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x710000}, 0x0) [ 2260.660124] FAT-fs (loop4): bogus number of reserved sectors 01:29:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x2e, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) [ 2260.772225] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2260.817789] binder_transaction: 2 callbacks suppressed [ 2260.817804] binder: 29013:29016 transaction failed 29189/-22, size 0-12288 line 2834 01:29:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x2b000}], 0x1, 0x0) 01:29:49 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x6b6b6b00000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:29:49 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x34000}, 0x0) 01:29:49 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)="6d73646f73ff", &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0xc08, 0x52, &(0x7f0000000480), 0x0) memfd_create(&(0x7f0000000440)='ppp0\x00', 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:29:49 executing program 5: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x2e, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 01:29:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, &(0x7f0000000100)) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 01:29:49 executing program 5: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x2e, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 01:29:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, &(0x7f0000000100)) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 01:29:49 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x400000000000}, 0x0) 01:29:49 executing program 5: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x2e, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 01:29:49 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)="6d73646f7304", &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0xc08, 0x52, &(0x7f0000000480), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000500), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:29:50 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x14000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:29:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, &(0x7f0000000100)) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 01:29:50 executing program 5: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x2e, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 01:29:50 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x70500000000000}, 0x0) 01:29:50 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000500), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:29:50 executing program 5: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x2e, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) [ 2262.133531] FAT-fs (loop4): bogus number of reserved sectors [ 2262.162233] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:50 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x70700000000000}, 0x0) 01:29:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, &(0x7f0000000100)) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) [ 2262.263135] FAT-fs (loop4): bogus number of reserved sectors [ 2262.271869] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 01:29:50 executing program 5: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x2e, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 01:29:50 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x3f00}, 0x0) 01:29:51 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x1e00, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:29:51 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)="6d73646f730e", &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000500), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:29:51 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x930000000000}, 0x0) 01:29:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x2e, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 01:29:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 01:29:51 executing program 1: accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffb7, &(0x7f0000000080)) 01:29:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x2e, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) [ 2263.191055] binder_alloc: 29155: binder_alloc_buf, no vma [ 2263.203159] binder: 29155:29159 transaction failed 29189/-3, size 0-12288 line 2973 [ 2263.229031] binder_release_work: 3 callbacks suppressed [ 2263.229037] binder: undelivered TRANSACTION_ERROR: 29189 01:29:51 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x7100}, 0x0) 01:29:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000500), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:29:51 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos,', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:51 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) [ 2263.433115] binder_alloc: 29179: binder_alloc_buf, no vma [ 2263.438719] binder: 29179:29182 transaction failed 29189/-3, size 0-12288 line 2973 [ 2263.514951] binder: undelivered TRANSACTION_ERROR: 29189 01:29:51 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x3ffff, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:29:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x2e, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 01:29:51 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 01:29:51 executing program 1: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 01:29:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0xc08, 0x52, &(0x7f0000000480), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000500), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:29:51 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos0', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) [ 2264.029118] binder_alloc: 29218: binder_alloc_buf, no vma [ 2264.068744] binder: 29218:29224 transaction failed 29189/-3, size 0-12288 line 2973 01:29:52 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x1100}, 0x0) [ 2264.134722] binder: undelivered TRANSACTION_ERROR: 29189 01:29:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x2e, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 01:29:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000080), 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 01:29:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0xc08, 0x52, &(0x7f0000000480), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000500), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:29:52 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 2264.349911] binder_alloc: 29251: binder_alloc_buf, no vma [ 2264.367052] binder: 29251:29255 transaction failed 29189/-3, size 0-12288 line 2973 [ 2264.381410] binder: undelivered TRANSACTION_ERROR: 29189 [ 2264.498816] FAT-fs (loop4): bogus number of reserved sectors [ 2264.512444] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2264.603323] FAT-fs (loop4): bogus number of reserved sectors [ 2264.609196] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:52 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x8000000000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:29:52 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 01:29:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x2e, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 01:29:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x0, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 01:29:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0xc08, 0x52, &(0x7f0000000480), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000500), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:29:52 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)="6d73646f737f", &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:53 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffb7, &(0x7f0000000080)) 01:29:53 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x60ff}, 0x0) [ 2264.986556] binder_alloc: 29283: binder_alloc_buf, no vma [ 2265.017495] binder: 29283:29294 transaction failed 29189/-3, size 0-12288 line 2973 [ 2265.060007] binder: undelivered TRANSACTION_ERROR: 29189 01:29:53 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x507000}, 0x0) 01:29:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x2e, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 01:29:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0xc08, 0x52, &(0x7f0000000480), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000500), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:29:53 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 2265.302312] binder_alloc: 29314: binder_alloc_buf, no vma [ 2265.322770] binder: 29314:29317 transaction failed 29189/-3, size 0-12288 line 2973 [ 2265.386061] binder: undelivered TRANSACTION_ERROR: 29189 [ 2265.417736] FAT-fs (loop4): bogus number of reserved sectors [ 2265.476204] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2265.541586] FAT-fs (loop4): bogus number of reserved sectors [ 2265.564385] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:54 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x900000000000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:29:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0x0, &(0x7f0000000080)) 01:29:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x2e, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 01:29:54 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x2}, 0x0) 01:29:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0xc08, 0x52, &(0x7f0000000480), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000500), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:29:54 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0x0, &(0x7f0000000080)) [ 2266.163494] binder: 29349:29350 transaction failed 29189/-22, size 0-12288 line 2834 [ 2266.183787] FAT-fs (loop4): bogus number of reserved sectors [ 2266.194564] binder: undelivered TRANSACTION_ERROR: 29189 [ 2266.207505] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:54 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x11}, 0x0) 01:29:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x2e, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 01:29:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0xc08, 0x52, &(0x7f0000000480), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000500), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 2266.311238] FAT-fs (loop4): bogus number of reserved sectors 01:29:54 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x60ffffffffff}, 0x0) [ 2266.408278] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0x0, &(0x7f0000000080)) [ 2266.449527] binder: 29374:29377 transaction failed 29189/-22, size 0-12288 line 2834 [ 2266.475691] binder: undelivered TRANSACTION_ERROR: 29189 01:29:55 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0xedc0, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:29:55 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)="6d73646f7382", &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:55 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0xc08, 0x52, &(0x7f0000000480), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000500), 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 01:29:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x2e, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) 01:29:55 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x200000000000000}, 0x0) 01:29:55 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, 0x0) 01:29:55 executing program 5: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x2e, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000'], 0x0, 0x0, 0x0}) [ 2267.260775] binder: 29403:29407 transaction failed 29189/-22, size 0-12288 line 2834 [ 2267.290106] binder: undelivered TRANSACTION_ERROR: 29189 01:29:55 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0xc08, 0x52, &(0x7f0000000480), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000500), 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 01:29:55 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x0}, 0x0) 01:29:55 executing program 1: fstat(0xffffffffffffffff, &(0x7f00000005c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x1220a0) 01:29:55 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\b', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:55 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0xc08, 0x52, &(0x7f0000000480), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000500), 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 01:29:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 01:29:56 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0xc08, 0x52, &(0x7f0000000480), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000500), 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 01:29:56 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x0}, 0x0) 01:29:56 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x1d000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:29:56 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:56 executing program 1: r0 = memfd_create(0x0, 0x4) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000140)) r1 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r1, 0x10001) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, &(0x7f0000000480)) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r2, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{&(0x7f0000002900)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x80, &(0x7f0000002b80)=[{&(0x7f0000002b40)}], 0x1, 0x0, 0x0, 0x48004}}], 0x1, 0x80) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x3}, 0x10) readlinkat(r0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0xcc0f000000000000, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @multicast1}, 0xc) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000100)='F', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0x0, 0x300000000000000]}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000440), &(0x7f0000000480)=0x4) [ 2268.295256] binder: 29463:29473 ioctl c0306201 0 returned -14 [ 2268.320476] FAT-fs (loop4): bogus number of reserved sectors [ 2268.339208] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:56 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0xc08, 0x52, &(0x7f0000000480), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000500), 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 01:29:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:29:56 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 2268.448147] FAT-fs (loop4): bogus number of reserved sectors [ 2268.550215] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:56 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0xc08, 0x52, &(0x7f0000000480), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000500), 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 01:29:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:29:56 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 2268.872039] FAT-fs (loop4): bogus number of reserved sectors [ 2268.881077] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2268.945442] FAT-fs (loop4): bogus number of reserved sectors [ 2268.951270] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:57 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x0}, 0x0) 01:29:57 executing program 1: ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, 0x0) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000440), &(0x7f0000000480)=0x4) 01:29:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:29:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0xc08, 0x52, &(0x7f0000000480), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000500), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:29:57 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x7a000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:29:57 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:57 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x0}, 0x0) 01:29:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0xc08, 0x52, &(0x7f0000000480), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000500), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:29:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0}) [ 2269.306743] sctp: [Deprecated]: syz-executor1 (pid 29527) Use of int in maxseg socket option. [ 2269.306743] Use struct sctp_assoc_value instead 01:29:57 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x3, 0x0, @ipv4}, 0x1c) listen(r0, 0x42) r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) [ 2269.401939] FAT-fs (loop4): bogus number of reserved sectors [ 2269.447520] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:57 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x0}, 0x0) 01:29:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0xc08, 0x52, &(0x7f0000000480), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000500), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:29:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0}) [ 2269.551557] FAT-fs (loop4): bogus number of reserved sectors [ 2269.571946] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:57 executing program 1: 01:29:57 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:57 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0xc08, 0x52, &(0x7f0000000480), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000500), 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 2269.931981] FAT-fs (loop4): bogus number of reserved sectors [ 2269.938690] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2270.005983] FAT-fs (loop4): bogus number of reserved sectors [ 2270.029134] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:58 executing program 1: 01:29:58 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x0}, 0x0) 01:29:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0}) 01:29:58 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0xc08, 0x52, &(0x7f0000000480), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000500), 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 01:29:58 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:58 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0xfffffffb, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:29:58 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x0}, 0x0) 01:29:58 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0xc08, 0x52, &(0x7f0000000480), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000500), 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 01:29:58 executing program 1: 01:29:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) [ 2270.450623] FAT-fs (loop4): bogus number of reserved sectors [ 2270.457176] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:58 executing program 1: [ 2270.557085] FAT-fs (loop4): bogus number of reserved sectors 01:29:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0xc08, 0x52, &(0x7f0000000480), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000500), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:29:58 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 2270.623573] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:58 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) 01:29:58 executing program 1: 01:29:58 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 2270.939234] FAT-fs (loop4): bogus number of reserved sectors [ 2270.969322] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2271.123414] FAT-fs (loop4): bogus number of reserved sectors [ 2271.129260] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:59 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0xc00, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:29:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0xc08, 0x52, &(0x7f0000000480), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000500), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:29:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) 01:29:59 executing program 1: 01:29:59 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x0}, 0x0) 01:29:59 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:29:59 executing program 1: [ 2271.624985] FAT-fs (loop4): bogus number of reserved sectors [ 2271.659328] FAT-fs (loop4): Can't find a valid FAT filesystem 01:29:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x17, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 01:29:59 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x0}, 0x0) 01:29:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0xc08, 0x52, &(0x7f0000000480), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000500), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2271.746329] FAT-fs (loop4): bogus number of reserved sectors 01:29:59 executing program 1: [ 2271.816201] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2271.822794] binder: release 29688:29691 transaction 85 out, still active [ 2271.846363] binder: undelivered TRANSACTION_COMPLETE 01:29:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x17, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) [ 2271.932416] binder: send failed reply for transaction 85, target dead [ 2272.060571] binder: release 29700:29702 transaction 87 out, still active [ 2272.092940] binder: undelivered TRANSACTION_COMPLETE [ 2272.157782] binder: send failed reply for transaction 87, target dead 01:30:00 executing program 1: 01:30:00 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x0}, 0x0) 01:30:00 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:30:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x17, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 01:30:00 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x5000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:30:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0xc08, 0x52, &(0x7f0000000480), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000500), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:30:00 executing program 1: 01:30:00 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x0}, 0x0) 01:30:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x23, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) [ 2272.745428] binder: release 29719:29720 transaction 89 out, still active [ 2272.754794] binder: undelivered TRANSACTION_COMPLETE [ 2272.780477] binder: send failed reply for transaction 89, target dead [ 2272.825441] FAT-fs (loop4): bogus number of reserved sectors [ 2272.854941] FAT-fs (loop4): Can't find a valid FAT filesystem 01:30:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0xc08, 0x52, &(0x7f0000000480), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000500), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:30:00 executing program 1: [ 2272.940022] FAT-fs (loop4): bogus number of reserved sectors [ 2272.964696] binder: release 29731:29736 transaction 91 out, still active [ 2272.976871] binder: undelivered TRANSACTION_COMPLETE 01:30:01 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x0}, 0x0) 01:30:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x23, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) [ 2272.991832] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2273.022432] binder: send failed reply for transaction 91, target dead 01:30:01 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)="6d73646f73ff", &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 2273.206033] binder: release 29752:29754 transaction 93 out, still active [ 2273.230846] binder: undelivered TRANSACTION_COMPLETE [ 2273.310206] binder: send failed reply for transaction 93, target dead 01:30:01 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x17000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:30:01 executing program 1: 01:30:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x23, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 01:30:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0xc08, 0x52, &(0x7f0000000480), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000500), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:30:01 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x0}, 0x0) 01:30:01 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)="6d73646f73dc", &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 2273.648559] binder: release 29778:29779 transaction 95 out, still active [ 2273.662250] binder: undelivered TRANSACTION_COMPLETE 01:30:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x29, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 01:30:01 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x0}, 0x0) 01:30:01 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)="2f02726f75702e7374617000", 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086610, 0x20000001) [ 2273.700143] binder: send failed reply for transaction 95, target dead 01:30:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0xc08, 0x52, &(0x7f0000000480), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000500), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2273.869826] binder: release 29797:29798 transaction 97 out, still active [ 2273.882034] EXT4-fs warning (device sda1): ext4_resize_fs:1917: can't read last block, resize aborted [ 2273.890888] binder: undelivered TRANSACTION_COMPLETE 01:30:01 executing program 1: prctl$PR_SET_TIMERSLACK(0x1d, 0xfffffffffffff3f8) prctl$PR_GET_TIMERSLACK(0x1e) 01:30:01 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 2273.987448] binder: send failed reply for transaction 97, target dead 01:30:02 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x1000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:30:02 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:30:02 executing program 1: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x20000000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x3, &(0x7f0000346fc8), &(0x7f0000f6bffb)='GPL\x00', 0x100000001, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000740)='f', 0x1}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e1, &(0x7f0000000180)={r0}) 01:30:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x29, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 01:30:02 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x0}, 0x0) 01:30:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0xc08, 0x52, &(0x7f0000000480), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000500), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2275.022252] binder: release 29832:29839 transaction 99 out, still active [ 2275.034616] binder: undelivered TRANSACTION_COMPLETE 01:30:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x29, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) [ 2275.084623] FAT-fs (loop4): bogus number of reserved sectors [ 2275.084958] binder: send failed reply for transaction 99, target dead [ 2275.114945] FAT-fs (loop4): Can't find a valid FAT filesystem 01:30:03 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x0}, 0x0) 01:30:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0xc08, 0x52, &(0x7f0000000480), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000500), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2275.247063] FAT-fs (loop4): bogus number of reserved sectors [ 2275.253621] binder: release 29849:29851 transaction 101 out, still active [ 2275.292433] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2275.300933] binder: undelivered TRANSACTION_COMPLETE 01:30:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) [ 2275.349380] binder: send failed reply for transaction 101, target dead 01:30:03 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg(r1, &(0x7f0000000080)={&(0x7f0000000000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x20000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x3, &(0x7f0000346fc8), &(0x7f0000f6bffb)='GPL\x00', 0x100000001, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000740)="66e9", 0x2}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f00000000c0)={r1, r2}) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e1, &(0x7f0000000180)={r1}) 01:30:03 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 2275.541005] binder: release 29867:29869 transaction 103 out, still active [ 2275.558705] binder: undelivered TRANSACTION_COMPLETE [ 2275.616989] binder: send failed reply for transaction 103, target dead 01:30:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 01:30:03 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:30:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0xc08, 0x52, &(0x7f0000000480), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000500), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:30:03 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x0}, 0x0) 01:30:03 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x100000000000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:30:03 executing program 1: prctl$PR_SET_TIMERSLACK(0x1d, 0xfffffffffffffc36) prctl$PR_GET_TIMERSLACK(0x1e) 01:30:03 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x5000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:30:04 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 2275.949144] FAT-fs (loop4): bogus number of reserved sectors [ 2275.961817] FAT-fs (loop4): Can't find a valid FAT filesystem 01:30:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) [ 2276.055544] FAT-fs (loop4): bogus number of reserved sectors [ 2276.089738] FAT-fs (loop4): Can't find a valid FAT filesystem 01:30:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x52, &(0x7f0000000480), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000500), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:30:04 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:30:04 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x0}, 0x0) 01:30:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x2d, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) [ 2276.358007] FAT-fs (loop4): bogus number of reserved sectors 01:30:04 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 2276.425715] FAT-fs (loop4): Can't find a valid FAT filesystem 01:30:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x2d, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) [ 2276.551526] FAT-fs (loop4): bogus number of reserved sectors [ 2276.586453] FAT-fs (loop4): Can't find a valid FAT filesystem 01:30:04 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 2276.864260] binder_thread_release: 3 callbacks suppressed [ 2276.864273] binder: release 29952:29954 transaction 111 out, still active [ 2276.915127] binder_release_work: 3 callbacks suppressed [ 2276.915134] binder: undelivered TRANSACTION_COMPLETE [ 2276.961094] FAT-fs (loop4): bogus number of reserved sectors [ 2276.989175] binder_send_failed_reply: 3 callbacks suppressed [ 2276.989183] binder: send failed reply for transaction 111, target dead [ 2277.018131] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2277.122841] FAT-fs (loop4): bogus number of reserved sectors [ 2277.128723] FAT-fs (loop4): Can't find a valid FAT filesystem 01:30:05 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0xf00000000000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:30:05 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x0}, 0x0) 01:30:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x2d, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 01:30:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x52, &(0x7f0000000480), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000500), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:30:05 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x5000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:30:05 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdosl', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 2277.781932] binder: release 29975:29984 transaction 113 out, still active [ 2277.801970] binder: undelivered TRANSACTION_COMPLETE 01:30:05 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 2277.897434] binder: send failed reply for transaction 113, target dead 01:30:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 01:30:06 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos#', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:30:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x52, &(0x7f0000000480), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000500), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:30:06 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 2278.128532] binder: release 30003:30004 transaction 115 out, still active [ 2278.151736] binder: undelivered TRANSACTION_COMPLETE 01:30:06 executing program 5: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x3ffff, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 2278.344776] binder: send failed reply for transaction 115, target dead 01:30:07 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0xf4ffffff, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:30:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x52, &(0x7f0000000480), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000500), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:30:07 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:30:07 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x0}, 0x0) 01:30:07 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x1e00, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:30:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 01:30:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) [ 2279.385997] FAT-fs (loop4): bogus number of reserved sectors [ 2279.413114] FAT-fs (loop4): Can't find a valid FAT filesystem 01:30:07 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 2279.490497] FAT-fs (loop4): bogus number of reserved sectors [ 2279.516585] FAT-fs (loop4): Can't find a valid FAT filesystem 01:30:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x52, &(0x7f0000000480), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000500), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:30:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 01:30:07 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)="6d73646f73ff", &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:30:07 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x0}, 0x0) 01:30:08 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x80000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:30:08 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 01:30:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x52, &(0x7f0000000480), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000500), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:30:08 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x0}, 0x0) 01:30:08 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x1400, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:30:08 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)="6d73646f73ff", &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:30:08 executing program 5: accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffb7, &(0x7f0000000080)) 01:30:08 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x0}, 0x0) 01:30:08 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 01:30:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0xc08, 0x0, &(0x7f0000000480), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000500), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:30:08 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:30:09 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 2281.191248] FAT-fs (loop4): bogus number of reserved sectors [ 2281.225980] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2281.306584] FAT-fs (loop4): bogus number of reserved sectors [ 2281.326939] FAT-fs (loop4): Can't find a valid FAT filesystem 01:30:10 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x1e00000000000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:30:10 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 01:30:10 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x0}, 0x0) 01:30:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0xc08, 0x0, &(0x7f0000000480), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000500), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:30:10 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:30:10 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000000)) r1 = accept4(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0xf5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x10000000000443) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) 01:30:10 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x0}, 0x0) 01:30:10 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000080), 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) [ 2282.147881] FAT-fs (loop4): bogus number of reserved sectors [ 2282.253050] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2282.327051] FAT-fs (loop4): bogus number of reserved sectors [ 2282.342282] FAT-fs (loop4): Can't find a valid FAT filesystem 01:30:10 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x0, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 01:30:10 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x0}, 0x0) 01:30:10 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)="6d73646f7304", &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:30:10 executing program 5: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffb7, &(0x7f0000000080)) 01:30:11 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x2500000000000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:30:11 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:30:11 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x0}, 0x0) 01:30:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000500), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:30:11 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0x0, &(0x7f0000000080)) 01:30:11 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x0}, 0x0) 01:30:11 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0x0, &(0x7f0000000080)) 01:30:11 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x1e00000000000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:30:11 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 2283.414401] FAT-fs (loop4): bogus number of reserved sectors [ 2283.436251] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2283.506011] FAT-fs (loop4): bogus number of reserved sectors [ 2283.568737] FAT-fs (loop4): Can't find a valid FAT filesystem 01:30:11 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0x0, &(0x7f0000000080)) 01:30:11 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:30:11 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 2283.892576] FAT-fs (loop4): bogus number of reserved sectors [ 2283.928852] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2284.064529] FAT-fs (loop4): bogus number of reserved sectors [ 2284.080639] FAT-fs (loop4): Can't find a valid FAT filesystem 01:30:12 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x68000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:30:12 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, 0x0) 01:30:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000500), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:30:12 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x0}, 0x0) 01:30:12 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:30:12 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x7a, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:30:12 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x0}, 0x0) 01:30:12 executing program 5: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0xb000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 2284.756426] FAT-fs (loop4): bogus number of reserved sectors [ 2284.778384] FAT-fs (loop4): Can't find a valid FAT filesystem 01:30:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000500), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2284.911196] FAT-fs (loop4): bogus number of reserved sectors [ 2284.972708] FAT-fs (loop4): Can't find a valid FAT filesystem 01:30:13 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x0}, 0x0) 01:30:13 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)="6d73646f7304", &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:30:13 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x100000000000000) 01:30:14 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x4000000000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:30:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000500), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:30:14 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x710000000000) 01:30:14 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdost', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:30:14 executing program 5: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0xb000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:30:14 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0xff0f, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:30:14 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x800000000000000) 01:30:14 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:30:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000500), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:30:15 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x930000000000) [ 2287.255514] FAT-fs (loop4): bogus number of reserved sectors [ 2287.268523] FAT-fs (loop4): Can't find a valid FAT filesystem 01:30:15 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x730000000000) [ 2287.384578] FAT-fs (loop4): bogus number of reserved sectors [ 2287.454334] FAT-fs (loop4): Can't find a valid FAT filesystem 01:30:15 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x3f000000) 01:30:16 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x1100000000000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:30:16 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)="6d73646f7304", &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:30:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:30:16 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x710000) 01:30:16 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0xff0f, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:30:16 executing program 5: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0xb000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:30:16 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x930000) 01:30:16 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)="6d73646f7304", &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:30:16 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x40030000000000) 01:30:17 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x2000000) 01:30:17 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:30:17 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') sendfile(r1, r3, 0x0, 0x10000000000443) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) [ 2289.622042] FAT-fs (loop4): bogus number of reserved sectors [ 2289.637332] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2289.726739] FAT-fs (loop4): bogus number of reserved sectors [ 2289.736435] FAT-fs (loop4): Can't find a valid FAT filesystem 01:30:18 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x9000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:30:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:30:18 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0xffffff7f00000000) 01:30:18 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:30:18 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x2500, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:30:18 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) ioctl$VIDIOC_S_AUDIO(r2, 0x40345622, &(0x7f0000000100)={0x7fffffff, "6af3c03104faf3b9199524aab381e8b261fa5a01f51e7c59fa4f7a4374e3ca47", 0x1, 0x1}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') sendfile(r1, r3, 0x0, 0x10000000000443) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) 01:30:18 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0xff600000) [ 2290.604307] FAT-fs (loop4): bogus number of reserved sectors [ 2290.642154] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2290.788655] FAT-fs (loop4): bogus number of reserved sectors [ 2290.818823] FAT-fs (loop4): Can't find a valid FAT filesystem 01:30:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:30:19 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:30:19 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x60ff) 01:30:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 2291.215469] FAT-fs (loop4): bogus number of reserved sectors [ 2291.261096] FAT-fs (loop4): Can't find a valid FAT filesystem 01:30:19 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x11) [ 2291.375268] FAT-fs (loop4): bogus number of reserved sectors [ 2291.392612] FAT-fs (loop4): Can't find a valid FAT filesystem 01:30:20 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0xb00, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:30:20 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x10000000000443) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000100)={0x0, 0x5, 0x9, &(0x7f0000000000)=0x8}) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) 01:30:20 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:30:20 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0xa077) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) 01:30:20 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0xffffffffff600000) 01:30:20 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$P9_RREAD(r1, &(0x7f0000000100)={0x5f, 0x75, 0x2, {0x54, "826770156f4ff3a0ccbefbfacc914c6a2aad50f4f86b3403a42d9836b4db3fcc7ec6e1e0c207ef5d9f0a62bad1df74de0b4cc91c9276e7d1f33ae651371c07b8583a3aad54268acb8ad331979915e169fb05b4eb"}}, 0x5f) r2 = accept4(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') sendfile(r2, r3, 0x0, 0x10000000000443) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) 01:30:20 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x707000) 01:30:20 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0xa077) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) [ 2292.351797] FAT-fs (loop4): bogus number of reserved sectors [ 2292.385418] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2292.467170] FAT-fs (loop4): bogus number of reserved sectors [ 2292.473488] FAT-fs (loop4): Can't find a valid FAT filesystem 01:30:20 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:30:20 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0xa077) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) 01:30:20 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x730000) [ 2292.723200] FAT-fs (loop4): bogus number of reserved sectors [ 2292.782076] FAT-fs (loop4): Can't find a valid FAT filesystem 01:30:20 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') read(r1, &(0x7f00000003c0)=""/72, 0x100000104) [ 2292.864653] FAT-fs (loop4): bogus number of reserved sectors [ 2292.895561] FAT-fs (loop4): Can't find a valid FAT filesystem 01:30:21 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x2200, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:30:21 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x4000) 01:30:21 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xa077) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) 01:30:21 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:30:21 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='.\x00') fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:30:21 executing program 5 (fault-call:6 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:30:21 executing program 0 (fault-call:2 fault-nth:0): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 01:30:21 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0xa077) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) 01:30:21 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x1000000) [ 2293.340711] FAULT_INJECTION: forcing a failure. [ 2293.340711] name failslab, interval 1, probability 0, space 0, times 0 [ 2293.352273] CPU: 1 PID: 30682 Comm: syz-executor5 Not tainted 4.20.0-rc3+ #124 [ 2293.359643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2293.359654] Call Trace: [ 2293.371600] dump_stack+0x244/0x39d [ 2293.375271] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2293.380478] should_fail.cold.4+0xa/0x17 [ 2293.380499] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2293.380527] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2293.395216] ? zap_class+0x640/0x640 [ 2293.399007] ? find_held_lock+0x36/0x1c0 [ 2293.403084] ? __lock_is_held+0xb5/0x140 [ 2293.403120] ? perf_trace_sched_process_exec+0x860/0x860 [ 2293.403150] __should_failslab+0x124/0x180 [ 2293.403170] should_failslab+0x9/0x14 [ 2293.403185] kmem_cache_alloc+0x2be/0x730 [ 2293.403203] ? mark_held_locks+0xc7/0x130 [ 2293.403227] mmu_topup_memory_caches+0xfb/0x470 [ 2293.412721] ? kvm_inject_realmode_interrupt+0x260/0x260 [ 2293.412740] ? trace_hardirqs_on+0xbd/0x310 [ 2293.412761] kvm_mmu_load+0x21/0x1290 [ 2293.412779] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2293.412798] ? check_preemption_disabled+0x48/0x280 [ 2293.412820] kvm_arch_vcpu_ioctl_run+0x287f/0x72a0 [ 2293.462832] ? kvm_arch_vcpu_runnable+0x710/0x710 [ 2293.467694] ? zap_class+0x640/0x640 [ 2293.471416] ? __lock_acquire+0x62f/0x4c20 [ 2293.475664] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2293.481223] ? find_held_lock+0x36/0x1c0 [ 2293.485326] ? get_task_pid+0x1ea/0x3b0 [ 2293.489305] ? lock_downgrade+0x900/0x900 [ 2293.493497] ? check_preemption_disabled+0x48/0x280 [ 2293.498540] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 2293.503509] ? kasan_check_read+0x11/0x20 [ 2293.507695] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2293.512995] ? rcu_softirq_qs+0x20/0x20 [ 2293.517003] ? get_task_pid+0x211/0x3b0 [ 2293.520994] ? find_get_pid+0x270/0x270 [ 2293.524984] ? zap_class+0x640/0x640 [ 2293.528716] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2293.534295] kvm_vcpu_ioctl+0x5c8/0x1150 [ 2293.538369] ? kvm_vcpu_ioctl+0x5c8/0x1150 [ 2293.542626] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 2293.548375] ? find_held_lock+0x36/0x1c0 [ 2293.552464] ? __fget+0x4aa/0x740 [ 2293.555949] ? check_preemption_disabled+0x48/0x280 [ 2293.560988] ? kasan_check_read+0x11/0x20 [ 2293.565148] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2293.570441] ? rcu_softirq_qs+0x20/0x20 [ 2293.574444] ? __fget+0x4d1/0x740 [ 2293.577944] ? ksys_dup3+0x680/0x680 [ 2293.581693] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 2293.586689] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 2293.592429] do_vfs_ioctl+0x1de/0x1790 [ 2293.596335] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2293.601542] ? ioctl_preallocate+0x300/0x300 [ 2293.606534] ? selinux_file_mprotect+0x620/0x620 [ 2293.611313] ? __sb_end_write+0xd9/0x110 [ 2293.615398] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2293.620969] ? fput+0x130/0x1a0 [ 2293.624264] ? do_syscall_64+0x9a/0x820 [ 2293.628263] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2293.633824] ? security_file_ioctl+0x94/0xc0 [ 2293.638258] ksys_ioctl+0xa9/0xd0 [ 2293.641728] __x64_sys_ioctl+0x73/0xb0 [ 2293.645637] do_syscall_64+0x1b9/0x820 [ 2293.649545] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2293.654940] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2293.659882] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2293.664750] ? trace_hardirqs_on_caller+0x310/0x310 [ 2293.669787] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2293.674856] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2293.679744] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2293.684980] RIP: 0033:0x457569 [ 2293.688186] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2293.707097] RSP: 002b:00007f11bc091c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2293.714813] RAX: ffffffffffffffda RBX: 00007f11bc091c90 RCX: 0000000000457569 [ 2293.722114] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 2293.729435] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2293.736727] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f11bc0926d4 [ 2293.744041] R13: 00000000004c034e R14: 00000000004d0d60 R15: 0000000000000006 [ 2293.851732] FAT-fs (loop4): bogus number of reserved sectors [ 2293.878438] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2293.894478] FAULT_INJECTION: forcing a failure. [ 2293.894478] name failslab, interval 1, probability 0, space 0, times 0 01:30:21 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x1100) [ 2293.954556] FAT-fs (loop4): bogus number of reserved sectors [ 2293.968554] CPU: 0 PID: 30697 Comm: syz-executor0 Not tainted 4.20.0-rc3+ #124 [ 2293.975958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2293.985316] Call Trace: [ 2293.987974] dump_stack+0x244/0x39d [ 2293.991637] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2293.996889] should_fail.cold.4+0xa/0x17 [ 2294.000993] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2294.006125] ? debug_smp_processor_id+0x1c/0x20 [ 2294.009940] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2294.010814] ? perf_trace_lock_acquire+0x15b/0x800 [ 2294.021661] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2294.027246] ? perf_trace_lock+0x7a0/0x7a0 [ 2294.031489] ? find_held_lock+0x36/0x1c0 [ 2294.035576] ? find_held_lock+0x36/0x1c0 [ 2294.039665] ? perf_trace_random__mix_pool_bytes+0x638/0x690 [ 2294.045488] ? perf_trace_sched_process_exec+0x860/0x860 [ 2294.050972] ? drm_unbind_agp+0x20/0x20 01:30:22 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x70700000000000) [ 2294.054960] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2294.060516] __should_failslab+0x124/0x180 [ 2294.064766] should_failslab+0x9/0x14 [ 2294.068584] __kmalloc+0x2e0/0x760 [ 2294.072138] ? avc_ss_reset+0x190/0x190 [ 2294.076127] ? drm_ioctl+0x48d/0xb00 [ 2294.079890] drm_ioctl+0x48d/0xb00 [ 2294.083455] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 2294.088319] ? drm_ioctl_kernel+0x330/0x330 [ 2294.092721] ? perf_trace_sched_process_exec+0x860/0x860 [ 2294.098197] ? __mutex_unlock_slowpath+0x197/0x8c0 01:30:22 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0xffefffffff7f0000) [ 2294.103152] ? drm_ioctl_kernel+0x330/0x330 [ 2294.107491] do_vfs_ioctl+0x1de/0x1790 [ 2294.111401] ? ioctl_preallocate+0x300/0x300 [ 2294.115830] ? selinux_file_mprotect+0x620/0x620 [ 2294.120621] ? __sb_end_write+0xd9/0x110 [ 2294.124725] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2294.124741] ? fput+0x130/0x1a0 [ 2294.124759] ? do_syscall_64+0x9a/0x820 [ 2294.124780] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2294.143109] ? security_file_ioctl+0x94/0xc0 [ 2294.147540] ksys_ioctl+0xa9/0xd0 [ 2294.151018] __x64_sys_ioctl+0x73/0xb0 [ 2294.154939] do_syscall_64+0x1b9/0x820 [ 2294.158842] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2294.164226] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2294.169172] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2294.174060] ? trace_hardirqs_on_caller+0x310/0x310 [ 2294.179091] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2294.184121] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2294.189156] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2294.194043] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2294.199258] RIP: 0033:0x457569 [ 2294.202455] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2294.202466] RSP: 002b:00007f31302c1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2294.202482] RAX: ffffffffffffffda RBX: 00007f31302c1c90 RCX: 0000000000457569 [ 2294.202492] RDX: 0000000020000080 RSI: ffffffffffffffb7 RDI: 0000000000000003 [ 2294.202501] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2294.202516] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f31302c26d4 [ 2294.258234] R13: 00000000004be7f7 R14: 00000000004ced80 R15: 0000000000000004 01:30:22 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x1d, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:30:22 executing program 5 (fault-call:6 fault-nth:1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:30:22 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0xa077) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) 01:30:22 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x60ffffffffff) 01:30:22 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:30:22 executing program 0 (fault-call:2 fault-nth:1): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) [ 2294.864857] FAULT_INJECTION: forcing a failure. [ 2294.864857] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2294.876728] CPU: 1 PID: 30739 Comm: syz-executor0 Not tainted 4.20.0-rc3+ #124 [ 2294.884120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2294.893469] Call Trace: [ 2294.896063] dump_stack+0x244/0x39d [ 2294.899700] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2294.904928] should_fail.cold.4+0xa/0x17 [ 2294.909055] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2294.914197] ? mark_held_locks+0x130/0x130 [ 2294.918444] ? mark_held_locks+0x130/0x130 [ 2294.922699] ? debug_smp_processor_id+0x1c/0x20 [ 2294.927385] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2294.932930] ? check_preemption_disabled+0x48/0x280 [ 2294.937972] ? debug_smp_processor_id+0x1c/0x20 [ 2294.942659] ? perf_trace_lock_acquire+0x15b/0x800 [ 2294.947603] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2294.953610] ? should_fail+0x22d/0xd01 [ 2294.957503] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2294.962627] ? debug_smp_processor_id+0x1c/0x20 [ 2294.967299] ? perf_trace_lock_acquire+0x15b/0x800 [ 2294.972500] __alloc_pages_nodemask+0x366/0xea0 [ 2294.977180] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 2294.982219] ? find_held_lock+0x36/0x1c0 [ 2294.986308] ? trace_hardirqs_off+0xb8/0x310 [ 2294.990724] cache_grow_begin+0xa5/0x8c0 [ 2294.994806] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2295.000351] ? check_preemption_disabled+0x48/0x280 [ 2295.005379] __kmalloc+0x69e/0x760 [ 2295.009275] ? avc_ss_reset+0x190/0x190 [ 2295.013266] ? drm_ioctl+0x48d/0xb00 [ 2295.016990] drm_ioctl+0x48d/0xb00 [ 2295.020534] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 2295.025501] ? drm_ioctl_kernel+0x330/0x330 [ 2295.029858] ? perf_trace_sched_process_exec+0x860/0x860 [ 2295.035323] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 2295.040261] ? drm_ioctl_kernel+0x330/0x330 [ 2295.044590] do_vfs_ioctl+0x1de/0x1790 [ 2295.048487] ? ioctl_preallocate+0x300/0x300 [ 2295.052908] ? selinux_file_mprotect+0x620/0x620 [ 2295.058271] ? __sb_end_write+0xd9/0x110 [ 2295.062352] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2295.067892] ? fput+0x130/0x1a0 [ 2295.071203] ? do_syscall_64+0x9a/0x820 [ 2295.075220] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2295.080768] ? security_file_ioctl+0x94/0xc0 [ 2295.085183] ksys_ioctl+0xa9/0xd0 [ 2295.088644] __x64_sys_ioctl+0x73/0xb0 [ 2295.092563] do_syscall_64+0x1b9/0x820 [ 2295.096459] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2295.101829] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2295.106763] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2295.111627] ? trace_hardirqs_on_caller+0x310/0x310 [ 2295.116665] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2295.121706] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2295.126736] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2295.131601] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2295.136821] RIP: 0033:0x457569 [ 2295.140024] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2295.158935] RSP: 002b:00007f31302c1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2295.166662] RAX: ffffffffffffffda RBX: 00007f31302c1c90 RCX: 0000000000457569 [ 2295.173947] RDX: 0000000020000080 RSI: ffffffffffffffb7 RDI: 0000000000000003 [ 2295.181216] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2295.188494] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f31302c26d4 [ 2295.195795] R13: 00000000004be7f7 R14: 00000000004ced80 R15: 0000000000000004 01:30:23 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0xa077) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) 01:30:23 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x8000000) [ 2295.228577] FAT-fs (loop4): bogus number of reserved sectors 01:30:23 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0xa077) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) [ 2295.311763] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2295.425094] FAT-fs (loop4): bogus number of reserved sectors 01:30:23 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x7fffffffefff) [ 2295.465735] FAT-fs (loop4): Can't find a valid FAT filesystem 01:30:23 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0xa077) read(0xffffffffffffffff, &(0x7f00000003c0)=""/72, 0x100000104) 01:30:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:30:24 executing program 0 (fault-call:2 fault-nth:2): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 01:30:24 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)="6d73646f7302", &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:30:24 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x3f00000000000000) 01:30:24 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0xa077) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) 01:30:24 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x4c000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:30:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x180, 0x0) epoll_pwait(r3, &(0x7f0000000080)=[{}], 0x1, 0x9, &(0x7f00000000c0)={0x2}, 0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_TSC_KHZ(r3, 0xaea2, 0x20) [ 2296.280528] FAULT_INJECTION: forcing a failure. [ 2296.280528] name failslab, interval 1, probability 0, space 0, times 0 [ 2296.301100] CPU: 1 PID: 30793 Comm: syz-executor0 Not tainted 4.20.0-rc3+ #124 [ 2296.308500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2296.317859] Call Trace: [ 2296.320519] dump_stack+0x244/0x39d [ 2296.324178] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2296.329445] should_fail.cold.4+0xa/0x17 [ 2296.333633] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2296.338763] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2296.344322] ? check_preemption_disabled+0x48/0x280 [ 2296.349360] ? debug_smp_processor_id+0x1c/0x20 [ 2296.354047] ? perf_trace_lock_acquire+0x15b/0x800 [ 2296.358992] ? zap_class+0x640/0x640 [ 2296.362723] ? zap_class+0x640/0x640 [ 2296.366465] ? find_held_lock+0x36/0x1c0 [ 2296.370549] ? __lock_is_held+0xb5/0x140 [ 2296.374642] ? perf_trace_sched_process_exec+0x860/0x860 [ 2296.380130] __should_failslab+0x124/0x180 [ 2296.384385] should_failslab+0x9/0x14 [ 2296.388206] kmem_cache_alloc_trace+0x2d7/0x750 [ 2296.392897] ? drm_modeset_lock+0x178/0x5c0 [ 2296.397249] drm_atomic_state_alloc+0xb8/0x110 [ 2296.401850] drm_atomic_helper_disable_plane+0x3a/0x200 [ 2296.407230] __setplane_atomic+0x2a3/0x330 [ 2296.411484] setplane_internal+0x127/0x370 [ 2296.415746] ? __setplane_internal+0x5e0/0x5e0 [ 2296.420375] ? mutex_unlock+0xd/0x10 [ 2296.424109] ? __drm_mode_object_find+0xb8/0x210 [ 2296.428889] drm_mode_setplane+0x567/0x830 [ 2296.433148] ? drm_is_current_master+0x51/0x140 [ 2296.433181] drm_ioctl_kernel+0x278/0x330 [ 2296.433198] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 2296.433215] ? drm_setversion+0x8b0/0x8b0 [ 2296.433237] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2296.433255] ? _copy_from_user+0xdf/0x150 [ 2296.442069] drm_ioctl+0x57e/0xb00 [ 2296.442086] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 2296.442109] ? drm_ioctl_kernel+0x330/0x330 [ 2296.442137] ? perf_trace_sched_process_exec+0x860/0x860 [ 2296.442157] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 2296.483883] ? drm_ioctl_kernel+0x330/0x330 [ 2296.488234] do_vfs_ioctl+0x1de/0x1790 [ 2296.492124] ? ioctl_preallocate+0x300/0x300 [ 2296.496540] ? selinux_file_mprotect+0x620/0x620 [ 2296.501320] ? __sb_end_write+0xd9/0x110 [ 2296.501345] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2296.510952] ? fput+0x130/0x1a0 [ 2296.514254] ? do_syscall_64+0x9a/0x820 [ 2296.518255] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2296.523809] ? security_file_ioctl+0x94/0xc0 [ 2296.528229] ksys_ioctl+0xa9/0xd0 [ 2296.531709] __x64_sys_ioctl+0x73/0xb0 [ 2296.535596] do_syscall_64+0x1b9/0x820 [ 2296.539473] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2296.544853] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2296.549780] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2296.554612] ? trace_hardirqs_on_caller+0x310/0x310 [ 2296.559631] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2296.564637] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2296.569655] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2296.574491] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2296.579688] RIP: 0033:0x457569 [ 2296.582870] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2296.601767] RSP: 002b:00007f31302c1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2296.609459] RAX: ffffffffffffffda RBX: 00007f31302c1c90 RCX: 0000000000457569 [ 2296.616726] RDX: 0000000020000080 RSI: ffffffffffffffb7 RDI: 0000000000000003 [ 2296.623991] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 01:30:24 executing program 1: bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') sendfile(r0, r1, 0x0, 0xa077) read(r0, &(0x7f00000003c0)=""/72, 0x100000104) 01:30:24 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x11000000) 01:30:24 executing program 0 (fault-call:2 fault-nth:3): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) [ 2296.631259] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f31302c26d4 [ 2296.638538] R13: 00000000004be7f7 R14: 00000000004ced80 R15: 0000000000000004 01:30:24 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 2296.791219] FAULT_INJECTION: forcing a failure. [ 2296.791219] name failslab, interval 1, probability 0, space 0, times 0 [ 2296.841798] CPU: 1 PID: 30815 Comm: syz-executor0 Not tainted 4.20.0-rc3+ #124 [ 2296.849193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2296.858549] Call Trace: [ 2296.861172] dump_stack+0x244/0x39d [ 2296.864834] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2296.870061] should_fail.cold.4+0xa/0x17 [ 2296.874143] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2296.879268] ? unwind_get_return_address+0x61/0xa0 [ 2296.884221] ? zap_class+0x640/0x640 [ 2296.884250] ? find_held_lock+0x36/0x1c0 [ 2296.892023] ? __lock_is_held+0xb5/0x140 [ 2296.896112] ? perf_trace_sched_process_exec+0x860/0x860 [ 2296.901698] ? zap_class+0x640/0x640 [ 2296.905481] __should_failslab+0x124/0x180 [ 2296.909826] should_failslab+0x9/0x14 [ 2296.913640] __kmalloc+0x2e0/0x760 [ 2296.917206] ? __lock_is_held+0xb5/0x140 [ 2296.921299] ? drm_atomic_state_init+0x171/0x3b0 [ 2296.926084] drm_atomic_state_init+0x171/0x3b0 [ 2296.930689] ? rcu_read_lock_sched_held+0x14f/0x180 [ 2296.935741] ? __drm_atomic_state_free+0xf0/0xf0 [ 2296.940526] drm_atomic_state_alloc+0xd0/0x110 [ 2296.945130] drm_atomic_helper_disable_plane+0x3a/0x200 [ 2296.950516] __setplane_atomic+0x2a3/0x330 [ 2296.954795] setplane_internal+0x127/0x370 [ 2296.954825] ? __setplane_internal+0x5e0/0x5e0 [ 2296.954858] ? mutex_unlock+0xd/0x10 [ 2296.954879] ? __drm_mode_object_find+0xb8/0x210 [ 2296.967442] drm_mode_setplane+0x567/0x830 [ 2296.967465] ? drm_is_current_master+0x51/0x140 [ 2296.967490] drm_ioctl_kernel+0x278/0x330 [ 2296.981127] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 2296.981147] ? drm_setversion+0x8b0/0x8b0 [ 2296.981171] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2296.981189] ? _copy_from_user+0xdf/0x150 [ 2296.981211] drm_ioctl+0x57e/0xb00 [ 2296.981227] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 2296.981256] ? drm_ioctl_kernel+0x330/0x330 [ 2296.990265] ? perf_trace_sched_process_exec+0x860/0x860 [ 2296.990291] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 2296.990315] ? drm_ioctl_kernel+0x330/0x330 [ 2297.031439] do_vfs_ioctl+0x1de/0x1790 [ 2297.035339] ? ioctl_preallocate+0x300/0x300 [ 2297.039761] ? selinux_file_mprotect+0x620/0x620 [ 2297.044531] ? __sb_end_write+0xd9/0x110 [ 2297.048603] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2297.054146] ? fput+0x130/0x1a0 [ 2297.057436] ? do_syscall_64+0x9a/0x820 [ 2297.061423] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2297.066980] ? security_file_ioctl+0x94/0xc0 [ 2297.071569] ksys_ioctl+0xa9/0xd0 [ 2297.075047] __x64_sys_ioctl+0x73/0xb0 [ 2297.078956] do_syscall_64+0x1b9/0x820 [ 2297.082895] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2297.088287] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2297.093221] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2297.098069] ? trace_hardirqs_on_caller+0x310/0x310 [ 2297.103089] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2297.108115] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2297.113139] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2297.117988] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2297.123176] RIP: 0033:0x457569 01:30:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = memfd_create(&(0x7f0000000000)='!(/vmnet0vmnet1\x00', 0x0) accept$inet6(r2, 0x0, &(0x7f0000000080)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:30:25 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0xa077) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) 01:30:25 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x7300) [ 2297.126389] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2297.145286] RSP: 002b:00007f31302c1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2297.152998] RAX: ffffffffffffffda RBX: 00007f31302c1c90 RCX: 0000000000457569 [ 2297.160262] RDX: 0000000020000080 RSI: ffffffffffffffb7 RDI: 0000000000000003 [ 2297.167545] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2297.174822] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f31302c26d4 [ 2297.182091] R13: 00000000004be7f7 R14: 00000000004ced80 R15: 0000000000000004 [ 2297.326692] FAT-fs (loop4): bogus number of reserved sectors [ 2297.334275] FAT-fs (loop4): Can't find a valid FAT filesystem 01:30:25 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0xa077) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) 01:30:25 executing program 0 (fault-call:2 fault-nth:4): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) [ 2297.410692] FAT-fs (loop4): bogus number of reserved sectors [ 2297.447206] FAT-fs (loop4): Can't find a valid FAT filesystem 01:30:25 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0xffffff7f) [ 2297.528313] FAULT_INJECTION: forcing a failure. [ 2297.528313] name failslab, interval 1, probability 0, space 0, times 0 [ 2297.595554] CPU: 1 PID: 30845 Comm: syz-executor0 Not tainted 4.20.0-rc3+ #124 [ 2297.602986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2297.612816] Call Trace: [ 2297.615461] dump_stack+0x244/0x39d [ 2297.619111] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2297.624336] should_fail.cold.4+0xa/0x17 [ 2297.624365] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2297.624397] ? save_stack+0x43/0xd0 [ 2297.637167] ? kasan_kmalloc+0xc7/0xe0 [ 2297.641069] ? __kmalloc+0x15b/0x760 [ 2297.644805] ? drm_atomic_state_init+0x171/0x3b0 [ 2297.649579] ? drm_atomic_state_alloc+0xd0/0x110 [ 2297.654358] ? zap_class+0x640/0x640 [ 2297.658089] ? drm_mode_setplane+0x567/0x830 [ 2297.662514] ? drm_ioctl_kernel+0x278/0x330 [ 2297.666850] ? drm_ioctl+0x57e/0xb00 [ 2297.670580] ? do_vfs_ioctl+0x1de/0x1790 [ 2297.674649] ? ksys_ioctl+0xa9/0xd0 [ 2297.678297] ? __x64_sys_ioctl+0x73/0xb0 [ 2297.682388] ? find_held_lock+0x36/0x1c0 [ 2297.686470] ? __lock_is_held+0xb5/0x140 [ 2297.690567] ? perf_trace_sched_process_exec+0x860/0x860 [ 2297.696044] __should_failslab+0x124/0x180 [ 2297.700299] should_failslab+0x9/0x14 [ 2297.704113] __kmalloc+0x2e0/0x760 [ 2297.707666] ? __lock_is_held+0xb5/0x140 [ 2297.711752] ? drm_atomic_state_init+0x20b/0x3b0 [ 2297.716528] drm_atomic_state_init+0x20b/0x3b0 [ 2297.721124] ? rcu_read_lock_sched_held+0x14f/0x180 [ 2297.726154] ? __drm_atomic_state_free+0xf0/0xf0 [ 2297.730952] drm_atomic_state_alloc+0xd0/0x110 [ 2297.735566] drm_atomic_helper_disable_plane+0x3a/0x200 [ 2297.740964] __setplane_atomic+0x2a3/0x330 [ 2297.745260] setplane_internal+0x127/0x370 [ 2297.749549] ? __setplane_internal+0x5e0/0x5e0 [ 2297.754163] ? mutex_unlock+0xd/0x10 [ 2297.757888] ? __drm_mode_object_find+0xb8/0x210 [ 2297.762682] drm_mode_setplane+0x567/0x830 [ 2297.766946] ? drm_is_current_master+0x51/0x140 [ 2297.771658] drm_ioctl_kernel+0x278/0x330 [ 2297.775824] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 2297.780692] ? drm_setversion+0x8b0/0x8b0 [ 2297.784861] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2297.790413] ? _copy_from_user+0xdf/0x150 [ 2297.794592] drm_ioctl+0x57e/0xb00 [ 2297.798145] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 2297.803023] ? drm_ioctl_kernel+0x330/0x330 [ 2297.807377] ? perf_trace_sched_process_exec+0x860/0x860 [ 2297.812843] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 2297.817795] ? drm_ioctl_kernel+0x330/0x330 [ 2297.822124] do_vfs_ioctl+0x1de/0x1790 [ 2297.826056] ? ioctl_preallocate+0x300/0x300 [ 2297.830544] ? selinux_file_mprotect+0x620/0x620 [ 2297.835316] ? __sb_end_write+0xd9/0x110 [ 2297.839408] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2297.844975] ? fput+0x130/0x1a0 [ 2297.848296] ? do_syscall_64+0x9a/0x820 [ 2297.852286] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2297.857836] ? security_file_ioctl+0x94/0xc0 [ 2297.862256] ksys_ioctl+0xa9/0xd0 [ 2297.865724] __x64_sys_ioctl+0x73/0xb0 [ 2297.869646] do_syscall_64+0x1b9/0x820 [ 2297.873555] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2297.878943] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2297.883884] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2297.888748] ? trace_hardirqs_on_caller+0x310/0x310 [ 2297.893813] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2297.898842] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2297.903875] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2297.908730] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2297.913961] RIP: 0033:0x457569 [ 2297.917203] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2297.936125] RSP: 002b:00007f31302c1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2297.943844] RAX: ffffffffffffffda RBX: 00007f31302c1c90 RCX: 0000000000457569 [ 2297.951121] RDX: 0000000020000080 RSI: ffffffffffffffb7 RDI: 0000000000000003 [ 2297.958396] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2297.965667] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f31302c26d4 [ 2297.972973] R13: 00000000004be7f7 R14: 00000000004ced80 R15: 0000000000000004 01:30:26 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:30:26 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0xa077) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) 01:30:26 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x3f00) 01:30:26 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)="6e65742f6465765f6c636173746c10fc8c3ff26ac300ef322fd08000cfa9986265d1eae83099b77930b3861a131e514514e04d0171371124c7ec54c7f5b48608f2ac91db125ac61a3121654fd5a5619dfb3d2c8b0f9746f71cbf1a7e13f41066e83b0ed950cb4e79817b22be78da720256830dfe30854d67e3cf3650536e7b2a36255a3a1fe59dcb1ab25c45ab848940284b8b2d70c051fcdb34fd44c41ab4c4490740401650f4fd75dac7e55524c300dac1bba8951f42aa150ca5aaca7cd68002b786d61c84a46ff121fd3254189f39e9d6d7d0b311234043e560adab051ac11ab40fdfe360f8b3c66b50bc432f0d") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x42000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x15000000, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000880)="9c73013bc821613992e5093d09bdeef8bf56d9ebffc7874ced9498a338e5d83de1bc31defdbe86276b97f0073d8bc1212949b6b34ff4867fb2d33595c14a88d6e9b217c4ff2e6cb0ce70caaf8fba8f367bf0d633ff8d8dab489525ea66732727f019eec09a898c032d5fe65c6e53c0ed03b0375f009b89eb902bc71b5182072cba4ab425bb946bfe774616475351ff49eb3aee0227bcf7bac741dfccd24cb6f789f9c3057796992b082babe9e7dff2b6d139aa56b7cf", 0xb6}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4040011) mmap$binder(&(0x7f00009ea000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="76626f786e657431b900", 0xfffffffffffffffc) keyctl$link(0x8, r3, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:30:26 executing program 0 (fault-call:2 fault-nth:5): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 01:30:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0x14e, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:30:26 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0xa077) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) 01:30:26 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x2) [ 2298.265058] FAT-fs (loop4): bogus number of reserved sectors [ 2298.291467] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2298.367711] FAT-fs (loop4): bogus number of reserved sectors [ 2298.403137] FAT-fs (loop4): Can't find a valid FAT filesystem 01:30:26 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x507000) [ 2298.484078] FAULT_INJECTION: forcing a failure. [ 2298.484078] name failslab, interval 1, probability 0, space 0, times 0 01:30:26 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:30:26 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0, 0x10}}, 0x400000) [ 2298.701589] FAT-fs (loop4): bogus number of reserved sectors [ 2298.745493] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2298.781853] CPU: 0 PID: 30883 Comm: syz-executor0 Not tainted 4.20.0-rc3+ #124 [ 2298.789275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2298.798628] Call Trace: [ 2298.798660] dump_stack+0x244/0x39d [ 2298.798690] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2298.798744] should_fail.cold.4+0xa/0x17 [ 2298.798773] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2298.798807] ? save_stack+0x43/0xd0 [ 2298.822964] ? kasan_kmalloc+0xc7/0xe0 [ 2298.826889] ? kmem_cache_alloc_trace+0x152/0x750 [ 2298.831787] ? vkms_plane_duplicate_state+0x49/0x120 [ 2298.836907] ? drm_atomic_get_plane_state+0x225/0x560 [ 2298.842142] ? zap_class+0x640/0x640 [ 2298.845875] ? drm_mode_setplane+0x567/0x830 [ 2298.850311] ? drm_ioctl_kernel+0x278/0x330 [ 2298.854652] ? drm_ioctl+0x57e/0xb00 [ 2298.858378] ? do_vfs_ioctl+0x1de/0x1790 [ 2298.862458] ? ksys_ioctl+0xa9/0xd0 [ 2298.862473] ? __x64_sys_ioctl+0x73/0xb0 [ 2298.862496] ? find_held_lock+0x36/0x1c0 [ 2298.862519] ? __lock_is_held+0xb5/0x140 [ 2298.862553] ? perf_trace_sched_process_exec+0x860/0x860 [ 2298.862583] __should_failslab+0x124/0x180 [ 2298.862610] should_failslab+0x9/0x14 [ 2298.862632] kmem_cache_alloc_trace+0x2d7/0x750 [ 2298.874360] ? drm_atomic_state_init+0x27a/0x3b0 [ 2298.874379] ? rcu_read_lock_sched_held+0x14f/0x180 [ 2298.874402] vkms_plane_duplicate_state+0x92/0x120 [ 2298.874421] drm_atomic_get_plane_state+0x225/0x560 [ 2298.874446] drm_atomic_helper_disable_plane+0x7b/0x200 [ 2298.874464] __setplane_atomic+0x2a3/0x330 [ 2298.874485] setplane_internal+0x127/0x370 [ 2298.874509] ? __setplane_internal+0x5e0/0x5e0 [ 2298.934799] ? mutex_unlock+0xd/0x10 [ 2298.938533] ? __drm_mode_object_find+0xb8/0x210 [ 2298.943302] drm_mode_setplane+0x567/0x830 [ 2298.947562] ? drm_is_current_master+0x51/0x140 [ 2298.952242] drm_ioctl_kernel+0x278/0x330 [ 2298.956387] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 2298.961259] ? drm_setversion+0x8b0/0x8b0 [ 2298.965438] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2298.970980] ? _copy_from_user+0xdf/0x150 [ 2298.975139] drm_ioctl+0x57e/0xb00 [ 2298.978683] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 2298.983556] ? drm_ioctl_kernel+0x330/0x330 [ 2298.987933] ? perf_trace_sched_process_exec+0x860/0x860 [ 2298.993390] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 2298.998324] ? drm_ioctl_kernel+0x330/0x330 [ 2299.002681] do_vfs_ioctl+0x1de/0x1790 [ 2299.006604] ? ioctl_preallocate+0x300/0x300 [ 2299.011019] ? selinux_file_mprotect+0x620/0x620 [ 2299.015781] ? __sb_end_write+0xd9/0x110 [ 2299.019850] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2299.025388] ? fput+0x130/0x1a0 [ 2299.028670] ? do_syscall_64+0x9a/0x820 [ 2299.032649] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2299.038188] ? security_file_ioctl+0x94/0xc0 [ 2299.042617] ksys_ioctl+0xa9/0xd0 [ 2299.046072] __x64_sys_ioctl+0x73/0xb0 [ 2299.049959] do_syscall_64+0x1b9/0x820 [ 2299.053853] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2299.059244] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2299.064179] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2299.069030] ? trace_hardirqs_on_caller+0x310/0x310 [ 2299.074052] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2299.079070] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2299.084105] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2299.088957] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2299.094160] RIP: 0033:0x457569 [ 2299.097365] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2299.116391] RSP: 002b:00007f31302c1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2299.124098] RAX: ffffffffffffffda RBX: 00007f31302c1c90 RCX: 0000000000457569 [ 2299.131368] RDX: 0000000020000080 RSI: ffffffffffffffb7 RDI: 0000000000000003 [ 2299.138652] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2299.145938] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f31302c26d4 [ 2299.153312] R13: 00000000004be7f7 R14: 00000000004ced80 R15: 0000000000000004 [ 2299.172505] WARNING: CPU: 1 PID: 30883 at drivers/gpu/drm/vkms/vkms_plane.c:26 vkms_plane_duplicate_state+0x9f/0x120 [ 2299.183181] Kernel panic - not syncing: panic_on_warn set ... [ 2299.189066] CPU: 1 PID: 30883 Comm: syz-executor0 Not tainted 4.20.0-rc3+ #124 [ 2299.196416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2299.205764] Call Trace: [ 2299.208367] dump_stack+0x244/0x39d [ 2299.212011] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2299.217206] panic+0x2ad/0x55c [ 2299.220396] ? add_taint.cold.5+0x16/0x16 [ 2299.224543] ? __warn.cold.8+0x5/0x45 [ 2299.228338] ? vkms_plane_duplicate_state+0x9f/0x120 [ 2299.233439] __warn.cold.8+0x20/0x45 [ 2299.237150] ? rcu_softirq_qs+0x20/0x20 [ 2299.241128] ? vkms_plane_duplicate_state+0x9f/0x120 [ 2299.246247] report_bug+0x254/0x2d0 [ 2299.251022] do_error_trap+0x11b/0x200 [ 2299.254936] do_invalid_op+0x36/0x40 [ 2299.258687] ? vkms_plane_duplicate_state+0x9f/0x120 [ 2299.263792] invalid_op+0x14/0x20 [ 2299.267380] RIP: 0010:vkms_plane_duplicate_state+0x9f/0x120 [ 2299.273103] Code: 00 0f 85 86 00 00 00 48 8b 3d fd aa db 04 ba f8 00 00 00 be c0 80 60 00 e8 de fc 76 fd 48 85 c0 49 89 c5 75 13 e8 11 fb 33 fd <0f> 0b 48 c7 c7 80 20 7b 88 e8 17 47 1a fd e8 fe fa 33 fd 48 8d bb [ 2299.292047] RSP: 0018:ffff888161c076f8 EFLAGS: 00010246 [ 2299.297407] RAX: 0000000000040000 RBX: ffff8881cd7b7200 RCX: ffffc90005a50000 [ 2299.304672] RDX: 0000000000040000 RSI: ffffffff844b8fdf RDI: 0000000000000286 [ 2299.311947] RBP: ffff888161c07710 R08: ffff8881d86f2400 R09: ffffed103b5e5b67 [ 2299.319217] R10: ffffed103b5e5b67 R11: ffff8881daf2db3b R12: ffff8881d188db00 [ 2299.326485] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888161c07860 [ 2299.333805] ? vkms_plane_duplicate_state+0x9f/0x120 [ 2299.338929] ? vkms_plane_duplicate_state+0x9f/0x120 [ 2299.344039] drm_atomic_get_plane_state+0x225/0x560 [ 2299.349075] drm_atomic_helper_disable_plane+0x7b/0x200 [ 2299.354443] __setplane_atomic+0x2a3/0x330 [ 2299.358685] setplane_internal+0x127/0x370 [ 2299.362947] ? __setplane_internal+0x5e0/0x5e0 [ 2299.367539] ? mutex_unlock+0xd/0x10 [ 2299.371249] ? __drm_mode_object_find+0xb8/0x210 [ 2299.376025] drm_mode_setplane+0x567/0x830 [ 2299.380266] ? drm_is_current_master+0x51/0x140 [ 2299.384948] drm_ioctl_kernel+0x278/0x330 [ 2299.389095] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 2299.393946] ? drm_setversion+0x8b0/0x8b0 [ 2299.398130] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2299.403682] ? _copy_from_user+0xdf/0x150 [ 2299.407847] drm_ioctl+0x57e/0xb00 [ 2299.411426] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 2299.416305] ? drm_ioctl_kernel+0x330/0x330 [ 2299.420639] ? perf_trace_sched_process_exec+0x860/0x860 [ 2299.426120] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 2299.431051] ? drm_ioctl_kernel+0x330/0x330 [ 2299.435406] do_vfs_ioctl+0x1de/0x1790 [ 2299.439301] ? ioctl_preallocate+0x300/0x300 [ 2299.443716] ? selinux_file_mprotect+0x620/0x620 [ 2299.448472] ? __sb_end_write+0xd9/0x110 [ 2299.452539] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2299.458072] ? fput+0x130/0x1a0 [ 2299.461348] ? do_syscall_64+0x9a/0x820 [ 2299.465327] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2299.470861] ? security_file_ioctl+0x94/0xc0 [ 2299.475266] ksys_ioctl+0xa9/0xd0 [ 2299.478730] __x64_sys_ioctl+0x73/0xb0 [ 2299.482614] do_syscall_64+0x1b9/0x820 [ 2299.486492] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2299.491866] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2299.496788] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2299.501662] ? trace_hardirqs_on_caller+0x310/0x310 [ 2299.506700] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2299.511714] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2299.516730] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2299.521574] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2299.526774] RIP: 0033:0x457569 [ 2299.529974] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2299.548892] RSP: 002b:00007f31302c1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2299.556617] RAX: ffffffffffffffda RBX: 00007f31302c1c90 RCX: 0000000000457569 [ 2299.563921] RDX: 0000000020000080 RSI: ffffffffffffffb7 RDI: 0000000000000003 [ 2299.571197] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2299.578469] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f31302c26d4 [ 2299.585736] R13: 00000000004be7f7 R14: 00000000004ced80 R15: 0000000000000004 [ 2299.594457] Kernel Offset: disabled [ 2299.598224] Rebooting in 86400 seconds..