0000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 628.083488][T10848] FAT-fs (loop3): Directory bread(block 7) failed 18:30:09 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x0, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 628.157609][T10848] FAT-fs (loop3): Directory bread(block 8) failed [ 628.241449][T10848] FAT-fs (loop3): Directory bread(block 9) failed 18:30:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x0, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:09 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 628.295663][T10848] FAT-fs (loop3): Directory bread(block 10) failed 18:30:10 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x10, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 628.340171][T10848] FAT-fs (loop3): Directory bread(block 11) failed [ 628.396466][T10848] FAT-fs (loop3): Directory bread(block 12) failed [ 628.409605][T10848] FAT-fs (loop3): Directory bread(block 13) failed [ 628.449593][T10848] FAT-fs (loop3): Directory bread(block 14) failed [ 628.509793][T10848] FAT-fs (loop3): Directory bread(block 15) failed 18:30:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x0, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:10 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(0xffffffffffffffff, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:30:10 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x10, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000280010002400b0004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 629.199478][T10879] FAT-fs (loop3): Directory bread(block 6) failed [ 629.218142][T10879] FAT-fs (loop3): Directory bread(block 7) failed [ 629.237985][ T34] audit: type=1804 audit(1604601010.840:781): pid=10881 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1510/file1/file0" dev="loop5" ino=275 res=1 errno=0 [ 629.248804][T10879] FAT-fs (loop3): Directory bread(block 8) failed [ 629.287130][T10879] FAT-fs (loop3): Directory bread(block 9) failed [ 629.293945][T10879] FAT-fs (loop3): Directory bread(block 10) failed [ 629.300638][T10879] FAT-fs (loop3): Directory bread(block 11) failed [ 629.307311][T10879] FAT-fs (loop3): Directory bread(block 12) failed [ 629.314016][T10879] FAT-fs (loop3): Directory bread(block 13) failed [ 629.320778][T10879] FAT-fs (loop3): Directory bread(block 14) failed [ 629.328338][T10879] FAT-fs (loop3): Directory bread(block 15) failed 18:30:10 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x10, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000280010002400c0004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 629.604203][T10899] FAT-fs (loop3): Directory bread(block 6) failed 18:30:11 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 629.676093][T10899] FAT-fs (loop3): Directory bread(block 7) failed [ 629.682607][T10899] FAT-fs (loop3): Directory bread(block 8) failed 18:30:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 629.768838][T10899] FAT-fs (loop3): Directory bread(block 9) failed 18:30:11 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(0xffffffffffffffff, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) [ 629.835304][T10899] FAT-fs (loop3): Directory bread(block 10) failed [ 629.841904][T10899] FAT-fs (loop3): Directory bread(block 11) failed 18:30:11 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 629.877161][T10899] FAT-fs (loop3): Directory bread(block 12) failed [ 629.883919][T10899] FAT-fs (loop3): Directory bread(block 13) failed [ 629.919892][T10899] FAT-fs (loop3): Directory bread(block 14) failed [ 629.957758][T10899] FAT-fs (loop3): Directory bread(block 15) failed 18:30:11 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 630.030571][ T34] audit: type=1804 audit(1604601011.630:782): pid=10913 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1511/file1/file0" dev="loop5" ino=277 res=1 errno=0 18:30:11 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000280010002400d0004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0x0, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:11 executing program 4: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(0xffffffffffffffff, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:30:11 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 630.292464][T10927] FAT-fs (loop3): Directory bread(block 6) failed [ 630.308238][ T34] audit: type=1804 audit(1604601011.910:783): pid=10928 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="file0" dev="sda1" ino=16366 res=1 errno=0 [ 630.365437][T10927] FAT-fs (loop3): Directory bread(block 7) failed [ 630.396321][T10927] FAT-fs (loop3): Directory bread(block 8) failed 18:30:12 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 630.421326][T10927] FAT-fs (loop3): Directory bread(block 9) failed [ 630.453890][T10927] FAT-fs (loop3): Directory bread(block 10) failed [ 630.499302][T10927] FAT-fs (loop3): Directory bread(block 11) failed 18:30:12 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0x0, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:12 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r1, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1c500) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r3}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) [ 630.542724][T10927] FAT-fs (loop3): Directory bread(block 12) failed [ 630.587744][T10927] FAT-fs (loop3): Directory bread(block 13) failed 18:30:12 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 630.641778][T10927] FAT-fs (loop3): Directory bread(block 14) failed [ 630.689152][T10927] FAT-fs (loop3): Directory bread(block 15) failed 18:30:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000280010002400e0004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 630.761913][ T34] audit: type=1804 audit(1604601012.360:784): pid=10944 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1512/file1/file0" dev="loop5" ino=279 res=1 errno=0 18:30:12 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 630.913021][T10952] FAT-fs (loop3): Directory bread(block 6) failed [ 630.924871][T10952] FAT-fs (loop3): Directory bread(block 7) failed [ 630.932744][T10952] FAT-fs (loop3): Directory bread(block 8) failed [ 630.939361][T10952] FAT-fs (loop3): Directory bread(block 9) failed [ 630.946111][T10952] FAT-fs (loop3): Directory bread(block 10) failed [ 630.952862][T10952] FAT-fs (loop3): Directory bread(block 11) failed [ 630.959547][T10952] FAT-fs (loop3): Directory bread(block 12) failed [ 630.966254][T10952] FAT-fs (loop3): Directory bread(block 13) failed [ 630.973001][T10952] FAT-fs (loop3): Directory bread(block 14) failed [ 630.979726][T10952] FAT-fs (loop3): Directory bread(block 15) failed 18:30:12 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0x0, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000280010002400f0004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:12 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r1, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1c500) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r3}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:30:12 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 631.309866][T10963] FAT-fs (loop3): Directory bread(block 6) failed [ 631.330758][ T34] audit: type=1804 audit(1604601012.930:785): pid=10965 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1513/file1/file0" dev="loop5" ino=281 res=1 errno=0 [ 631.350086][T10963] FAT-fs (loop3): Directory bread(block 7) failed [ 631.429146][T10963] FAT-fs (loop3): Directory bread(block 8) failed [ 631.475225][T10963] FAT-fs (loop3): Directory bread(block 9) failed [ 631.506335][T10963] FAT-fs (loop3): Directory bread(block 10) failed [ 631.512947][T10963] FAT-fs (loop3): Directory bread(block 11) failed [ 631.521489][T10963] FAT-fs (loop3): Directory bread(block 12) failed [ 631.529633][T10963] FAT-fs (loop3): Directory bread(block 13) failed [ 631.538523][T10963] FAT-fs (loop3): Directory bread(block 14) failed [ 631.546260][T10963] FAT-fs (loop3): Directory bread(block 15) failed 18:30:13 executing program 4: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(0xffffffffffffffff, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:30:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:13 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:13 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240100004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:13 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r1, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1c500) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r3}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) [ 631.829928][ T34] audit: type=1804 audit(1604601013.430:786): pid=10979 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="file0" dev="sda1" ino=16379 res=1 errno=0 18:30:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:13 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 631.924390][T10981] FAT-fs (loop3): Directory bread(block 6) failed [ 631.952481][T10981] FAT-fs (loop3): Directory bread(block 7) failed [ 631.995198][T10981] FAT-fs (loop3): Directory bread(block 8) failed [ 632.001702][T10981] FAT-fs (loop3): Directory bread(block 9) failed [ 632.008213][T10981] FAT-fs (loop3): Directory bread(block 10) failed [ 632.014823][T10981] FAT-fs (loop3): Directory bread(block 11) failed [ 632.021534][T10981] FAT-fs (loop3): Directory bread(block 12) failed [ 632.030374][T10981] FAT-fs (loop3): Directory bread(block 13) failed [ 632.036918][T10981] FAT-fs (loop3): Directory bread(block 14) failed [ 632.043564][T10981] FAT-fs (loop3): Directory bread(block 15) failed 18:30:13 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240110004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 632.181811][ T34] audit: type=1804 audit(1604601013.780:787): pid=10993 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1514/file1/file0" dev="loop5" ino=283 res=1 errno=0 [ 632.298045][T10998] FAT-fs (loop3): Directory bread(block 6) failed [ 632.355295][T10998] FAT-fs (loop3): Directory bread(block 7) failed [ 632.362204][T10998] FAT-fs (loop3): Directory bread(block 8) failed [ 632.368739][T10998] FAT-fs (loop3): Directory bread(block 9) failed [ 632.375999][T10998] FAT-fs (loop3): Directory bread(block 10) failed [ 632.382587][T10998] FAT-fs (loop3): Directory bread(block 11) failed [ 632.389928][T10998] FAT-fs (loop3): Directory bread(block 12) failed [ 632.396641][T10998] FAT-fs (loop3): Directory bread(block 13) failed 18:30:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 632.403912][T10998] FAT-fs (loop3): Directory bread(block 14) failed [ 632.410531][T10998] FAT-fs (loop3): Directory bread(block 15) failed 18:30:14 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:14 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240120004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:14 executing program 4: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(0xffffffffffffffff, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:30:14 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 632.686362][T11012] FAT-fs (loop3): Directory bread(block 6) failed [ 632.692887][T11012] FAT-fs (loop3): Directory bread(block 7) failed 18:30:14 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 632.787140][T11012] FAT-fs (loop3): Directory bread(block 8) failed [ 632.796128][T11012] FAT-fs (loop3): Directory bread(block 9) failed [ 632.815321][T11012] FAT-fs (loop3): Directory bread(block 10) failed 18:30:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 632.872727][T11012] FAT-fs (loop3): Directory bread(block 11) failed [ 632.931074][T11012] FAT-fs (loop3): Directory bread(block 12) failed 18:30:14 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:30:14 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 633.021382][T11012] FAT-fs (loop3): Directory bread(block 13) failed [ 633.066037][T11012] FAT-fs (loop3): Directory bread(block 14) failed [ 633.095211][ T34] audit: type=1804 audit(1604601014.691:788): pid=11026 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="file0" dev="sda1" ino=16379 res=1 errno=0 [ 633.106824][T11012] FAT-fs (loop3): Directory bread(block 15) failed [ 633.198989][ T34] audit: type=1804 audit(1604601014.801:789): pid=11027 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1515/file1/file0" dev="loop5" ino=285 res=1 errno=0 18:30:14 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240250004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:14 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 633.438727][T11036] FAT-fs (loop3): Directory bread(block 6) failed [ 633.449446][T11036] FAT-fs (loop3): Directory bread(block 7) failed [ 633.503281][T11036] FAT-fs (loop3): Directory bread(block 8) failed [ 633.571742][T11036] FAT-fs (loop3): Directory bread(block 9) failed 18:30:15 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:15 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) [ 633.619800][T11036] FAT-fs (loop3): Directory bread(block 10) failed [ 633.654949][T11036] FAT-fs (loop3): Directory bread(block 11) failed [ 633.693553][T11036] FAT-fs (loop3): Directory bread(block 12) failed [ 633.725981][T11036] FAT-fs (loop3): Directory bread(block 13) failed [ 633.758560][T11036] FAT-fs (loop3): Directory bread(block 14) failed [ 633.783039][ T34] audit: type=1804 audit(1604601015.381:790): pid=11048 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1516/file1/file0" dev="loop5" ino=287 res=1 errno=0 [ 633.803493][T11036] FAT-fs (loop3): Directory bread(block 15) failed 18:30:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:15 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240480004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 634.126030][T11058] FAT-fs (loop3): Directory bread(block 6) failed [ 634.168580][T11058] FAT-fs (loop3): Directory bread(block 7) failed [ 634.230553][T11058] FAT-fs (loop3): Directory bread(block 8) failed [ 634.237205][T11058] FAT-fs (loop3): Directory bread(block 9) failed [ 634.244280][T11058] FAT-fs (loop3): Directory bread(block 10) failed [ 634.251118][T11058] FAT-fs (loop3): Directory bread(block 11) failed [ 634.257911][T11058] FAT-fs (loop3): Directory bread(block 12) failed [ 634.271877][T11058] FAT-fs (loop3): Directory bread(block 13) failed 18:30:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 634.279469][T11058] FAT-fs (loop3): Directory bread(block 14) failed [ 634.293782][T11058] FAT-fs (loop3): Directory bread(block 15) failed 18:30:15 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:30:16 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 634.458785][ T34] audit: type=1804 audit(1604601016.061:791): pid=11069 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1517/file1/file0" dev="loop5" ino=289 res=1 errno=0 18:30:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000280010002404c0004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:16 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:16 executing program 4: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240480004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 634.745329][T11081] FAT-fs (loop3): Directory bread(block 6) failed [ 634.754433][T11081] FAT-fs (loop3): Directory bread(block 7) failed [ 634.774878][T11081] FAT-fs (loop3): Directory bread(block 8) failed [ 634.820376][T11081] FAT-fs (loop3): Directory bread(block 9) failed 18:30:16 executing program 4: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240480004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 634.877712][T11081] FAT-fs (loop3): Directory bread(block 10) failed [ 634.965003][T11081] FAT-fs (loop3): Directory bread(block 11) failed [ 634.971550][T11081] FAT-fs (loop3): Directory bread(block 12) failed 18:30:16 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:16 executing program 4: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240480004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:16 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r3}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:30:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 635.095577][T11081] FAT-fs (loop3): Directory bread(block 13) failed [ 635.102147][T11081] FAT-fs (loop3): Directory bread(block 14) failed [ 635.132335][T11081] FAT-fs (loop3): Directory bread(block 15) failed 18:30:16 executing program 4: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:30:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000280010002405c0004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 635.279129][ T34] audit: type=1804 audit(1604601016.881:792): pid=11104 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="file0" dev="sda1" ino=16382 res=1 errno=0 18:30:16 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 635.329125][ T34] audit: type=1804 audit(1604601016.921:793): pid=11105 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1518/file1/file0" dev="loop5" ino=291 res=1 errno=0 18:30:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:17 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 635.482659][T11119] FAT-fs (loop3): Directory bread(block 6) failed [ 635.494891][T11119] FAT-fs (loop3): Directory bread(block 7) failed [ 635.509020][T11119] FAT-fs (loop3): Directory bread(block 8) failed [ 635.516167][T11119] FAT-fs (loop3): Directory bread(block 9) failed [ 635.522882][T11119] FAT-fs (loop3): Directory bread(block 10) failed [ 635.529965][T11119] FAT-fs (loop3): Directory bread(block 11) failed [ 635.537978][T11119] FAT-fs (loop3): Directory bread(block 12) failed [ 635.602963][T11119] FAT-fs (loop3): Directory bread(block 13) failed [ 635.678157][T11119] FAT-fs (loop3): Directory bread(block 14) failed [ 635.732762][T11119] FAT-fs (loop3): Directory bread(block 15) failed 18:30:17 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:17 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240600004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x0, 0x0, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 636.053704][T11133] FAT-fs (loop3): Directory bread(block 6) failed 18:30:17 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:17 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r3}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) [ 636.141122][T11133] FAT-fs (loop3): Directory bread(block 7) failed 18:30:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x0, 0x0, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:17 executing program 4: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r3}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) [ 636.183692][T11133] FAT-fs (loop3): Directory bread(block 8) failed [ 636.214509][T11133] FAT-fs (loop3): Directory bread(block 9) failed [ 636.259962][T11133] FAT-fs (loop3): Directory bread(block 10) failed [ 636.299220][T11133] FAT-fs (loop3): Directory bread(block 11) failed [ 636.327262][T11133] FAT-fs (loop3): Directory bread(block 12) failed [ 636.346546][T11133] FAT-fs (loop3): Directory bread(block 13) failed [ 636.364080][T11133] FAT-fs (loop3): Directory bread(block 14) failed [ 636.377212][T11133] FAT-fs (loop3): Directory bread(block 15) failed 18:30:18 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x0, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 636.407818][ T34] audit: type=1804 audit(1604601018.011:794): pid=11142 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1519/file1/file0" dev="loop5" ino=293 res=1 errno=0 18:30:18 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x0, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x0, 0x0, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 636.604453][ T34] audit: type=1804 audit(1604601018.091:795): pid=11146 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="file0" dev="sda1" ino=16364 res=1 errno=0 18:30:18 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240680004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:18 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x0, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 636.856526][T11161] FAT-fs (loop3): Directory bread(block 6) failed [ 636.894006][T11161] FAT-fs (loop3): Directory bread(block 7) failed 18:30:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0x0, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 636.970855][T11161] FAT-fs (loop3): Directory bread(block 8) failed [ 637.027939][T11161] FAT-fs (loop3): Directory bread(block 9) failed [ 637.064788][T11161] FAT-fs (loop3): Directory bread(block 10) failed [ 637.071628][T11161] FAT-fs (loop3): Directory bread(block 11) failed 18:30:18 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r3}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) [ 637.083287][T11161] FAT-fs (loop3): Directory bread(block 12) failed [ 637.093281][T11161] FAT-fs (loop3): Directory bread(block 13) failed [ 637.103306][T11161] FAT-fs (loop3): Directory bread(block 14) failed [ 637.110416][T11161] FAT-fs (loop3): Directory bread(block 15) failed 18:30:18 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:18 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000280010002406c0004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 637.328559][ T34] audit: type=1804 audit(1604601018.931:796): pid=11174 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1520/file1/file0" dev="loop5" ino=295 res=1 errno=0 18:30:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0x0, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 637.469446][T11182] FAT-fs (loop3): Directory bread(block 6) failed [ 637.477904][T11182] FAT-fs (loop3): Directory bread(block 7) failed [ 637.491055][T11182] FAT-fs (loop3): Directory bread(block 8) failed [ 637.499539][T11182] FAT-fs (loop3): Directory bread(block 9) failed [ 637.506305][T11182] FAT-fs (loop3): Directory bread(block 10) failed [ 637.513035][T11182] FAT-fs (loop3): Directory bread(block 11) failed [ 637.519880][T11182] FAT-fs (loop3): Directory bread(block 12) failed [ 637.527255][T11182] FAT-fs (loop3): Directory bread(block 13) failed [ 637.541804][T11182] FAT-fs (loop3): Directory bread(block 14) failed [ 637.600598][T11182] FAT-fs (loop3): Directory bread(block 15) failed 18:30:19 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:19 executing program 4: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0x0, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240740004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 638.085543][T11196] FAT-fs (loop3): Directory bread(block 6) failed [ 638.092360][T11196] FAT-fs (loop3): Directory bread(block 7) failed [ 638.100695][T11196] FAT-fs (loop3): Directory bread(block 8) failed [ 638.108902][T11196] FAT-fs (loop3): Directory bread(block 9) failed [ 638.116219][T11196] FAT-fs (loop3): Directory bread(block 10) failed [ 638.123350][T11196] FAT-fs (loop3): Directory bread(block 11) failed [ 638.130089][T11196] FAT-fs (loop3): Directory bread(block 12) failed [ 638.137002][T11196] FAT-fs (loop3): Directory bread(block 13) failed [ 638.143753][T11196] FAT-fs (loop3): Directory bread(block 14) failed [ 638.152188][T11196] FAT-fs (loop3): Directory bread(block 15) failed 18:30:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240780004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:19 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:19 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, 0x0) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:30:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 638.363215][T11209] FAT-fs (loop3): Directory bread(block 6) failed [ 638.374303][ T34] audit: type=1804 audit(1604601019.971:797): pid=11212 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1521/file1/file0" dev="loop5" ino=297 res=1 errno=0 [ 638.423597][T11209] FAT-fs (loop3): Directory bread(block 7) failed [ 638.510168][T11209] FAT-fs (loop3): Directory bread(block 8) failed 18:30:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 638.585044][T11209] FAT-fs (loop3): Directory bread(block 9) failed 18:30:20 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0x0, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 638.657448][T11209] FAT-fs (loop3): Directory bread(block 10) failed [ 638.728966][T11209] FAT-fs (loop3): Directory bread(block 11) failed [ 638.785872][T11209] FAT-fs (loop3): Directory bread(block 12) failed [ 638.850895][T11209] FAT-fs (loop3): Directory bread(block 13) failed [ 638.899681][T11209] FAT-fs (loop3): Directory bread(block 14) failed [ 638.922054][T11209] FAT-fs (loop3): Directory bread(block 15) failed 18:30:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000280010002407a0004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:20 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, 0x0) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:30:20 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0x0, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:20 executing program 4: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, 0x0) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) [ 639.320464][T11242] FAT-fs (loop3): Directory bread(block 6) failed 18:30:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0x0, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 639.381372][T11242] FAT-fs (loop3): Directory bread(block 7) failed [ 639.441311][ T34] audit: type=1804 audit(1604601021.041:798): pid=11249 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="file0" dev="sda1" ino=16033 res=1 errno=0 [ 639.474619][T11242] FAT-fs (loop3): Directory bread(block 8) failed [ 639.481206][T11242] FAT-fs (loop3): Directory bread(block 9) failed [ 639.487775][T11242] FAT-fs (loop3): Directory bread(block 10) failed [ 639.494414][T11242] FAT-fs (loop3): Directory bread(block 11) failed [ 639.501285][T11242] FAT-fs (loop3): Directory bread(block 12) failed [ 639.507863][T11242] FAT-fs (loop3): Directory bread(block 13) failed [ 639.511358][ T34] audit: type=1804 audit(1604601021.081:799): pid=11246 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1522/file1/file0" dev="loop5" ino=299 res=1 errno=0 [ 639.514513][T11242] FAT-fs (loop3): Directory bread(block 14) failed [ 639.546462][T11242] FAT-fs (loop3): Directory bread(block 15) failed 18:30:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0x0, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:21 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240ca0004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:21 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0x0, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:21 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 640.005143][T11266] FAT-fs (loop3): Directory bread(block 6) failed 18:30:21 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 640.094072][T11266] FAT-fs (loop3): Directory bread(block 7) failed 18:30:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0x0, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 640.156296][T11266] FAT-fs (loop3): Directory bread(block 8) failed [ 640.223509][T11266] FAT-fs (loop3): Directory bread(block 9) failed 18:30:21 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, 0x0) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) [ 640.283455][T11266] FAT-fs (loop3): Directory bread(block 10) failed [ 640.325860][T11266] FAT-fs (loop3): Directory bread(block 11) failed 18:30:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 640.379267][T11266] FAT-fs (loop3): Directory bread(block 12) failed [ 640.418670][T11266] FAT-fs (loop3): Directory bread(block 13) failed 18:30:22 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 640.465472][T11266] FAT-fs (loop3): Directory bread(block 14) failed [ 640.513870][ T34] audit: type=1804 audit(1604601022.111:800): pid=11280 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1523/file1/file0" dev="loop5" ino=301 res=1 errno=0 [ 640.553030][T11266] FAT-fs (loop3): Directory bread(block 15) failed 18:30:22 executing program 4: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240cc0004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:22 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:22 executing program 4: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0x0, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 641.004375][T11299] FAT-fs (loop3): Directory bread(block 6) failed [ 641.032905][T11299] FAT-fs (loop3): Directory bread(block 7) failed [ 641.092587][T11299] FAT-fs (loop3): Directory bread(block 8) failed 18:30:22 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 641.150258][T11299] FAT-fs (loop3): Directory bread(block 9) failed [ 641.204637][T11299] FAT-fs (loop3): Directory bread(block 10) failed 18:30:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 641.258855][T11299] FAT-fs (loop3): Directory bread(block 11) failed 18:30:22 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x0, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:30:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 641.314526][T11299] FAT-fs (loop3): Directory bread(block 12) failed [ 641.321167][T11299] FAT-fs (loop3): Directory bread(block 13) failed [ 641.362845][T11299] FAT-fs (loop3): Directory bread(block 14) failed [ 641.424908][T11299] FAT-fs (loop3): Directory bread(block 15) failed 18:30:23 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 641.541036][ T34] audit: type=1804 audit(1604601023.141:801): pid=11317 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1524/file1/file0" dev="loop5" ino=303 res=1 errno=0 18:30:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240ce0004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 641.819870][T11331] FAT-fs (loop3): Directory bread(block 6) failed [ 641.830720][T11331] FAT-fs (loop3): Directory bread(block 7) failed [ 641.843158][T11331] FAT-fs (loop3): Directory bread(block 8) failed [ 641.852446][T11331] FAT-fs (loop3): Directory bread(block 9) failed [ 641.861345][T11331] FAT-fs (loop3): Directory bread(block 10) failed 18:30:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 641.868552][T11331] FAT-fs (loop3): Directory bread(block 11) failed [ 641.877324][T11331] FAT-fs (loop3): Directory bread(block 12) failed [ 641.889267][T11331] FAT-fs (loop3): Directory bread(block 13) failed [ 641.897991][T11331] FAT-fs (loop3): Directory bread(block 14) failed [ 641.905513][T11331] FAT-fs (loop3): Directory bread(block 15) failed 18:30:23 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:23 executing program 4: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, 0x0) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:30:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240ef0004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:23 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 642.270539][T11344] FAT-fs (loop3): Directory bread(block 6) failed [ 642.322067][ T34] audit: type=1804 audit(1604601023.921:802): pid=11346 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="file0" dev="sda1" ino=16036 res=1 errno=0 18:30:24 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x0, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) [ 642.386752][T11344] FAT-fs (loop3): Directory bread(block 7) failed [ 642.438717][T11344] FAT-fs (loop3): Directory bread(block 8) failed [ 642.484678][T11344] FAT-fs (loop3): Directory bread(block 9) failed 18:30:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 642.534092][T11344] FAT-fs (loop3): Directory bread(block 10) failed [ 642.553573][ T34] audit: type=1804 audit(1604601024.151:803): pid=11355 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1525/file1/file0" dev="loop5" ino=305 res=1 errno=0 [ 642.614771][T11344] FAT-fs (loop3): Directory bread(block 11) failed [ 642.621514][T11344] FAT-fs (loop3): Directory bread(block 12) failed [ 642.657808][T11344] FAT-fs (loop3): Directory bread(block 13) failed [ 642.668599][T11344] FAT-fs (loop3): Directory bread(block 14) failed [ 642.684916][T11344] FAT-fs (loop3): Directory bread(block 15) failed 18:30:24 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000280010002400e0104f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:24 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 643.300295][T11370] FAT-fs (loop3): Directory bread(block 6) failed [ 643.345656][T11370] FAT-fs (loop3): Directory bread(block 7) failed [ 643.352573][T11370] FAT-fs (loop3): Directory bread(block 8) failed [ 643.360841][T11370] FAT-fs (loop3): Directory bread(block 9) failed [ 643.369391][T11370] FAT-fs (loop3): Directory bread(block 10) failed [ 643.376161][T11370] FAT-fs (loop3): Directory bread(block 11) failed [ 643.383067][T11370] FAT-fs (loop3): Directory bread(block 12) failed 18:30:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000280010002409e0104f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 643.390178][T11370] FAT-fs (loop3): Directory bread(block 13) failed [ 643.396940][T11370] FAT-fs (loop3): Directory bread(block 14) failed [ 643.405105][T11370] FAT-fs (loop3): Directory bread(block 15) failed 18:30:25 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x0, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:30:25 executing program 4: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, 0x0) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:30:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:25 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 643.581606][T11380] FAT-fs (loop3): Directory bread(block 6) failed [ 643.598200][T11380] FAT-fs (loop3): Directory bread(block 7) failed [ 643.643795][T11380] FAT-fs (loop3): Directory bread(block 8) failed [ 643.660440][ T34] audit: type=1804 audit(1604601025.261:804): pid=11387 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1526/file1/file0" dev="loop5" ino=307 res=1 errno=0 [ 643.715687][T11380] FAT-fs (loop3): Directory bread(block 9) failed [ 643.778822][T11380] FAT-fs (loop3): Directory bread(block 10) failed [ 643.839035][T11380] FAT-fs (loop3): Directory bread(block 11) failed [ 643.845851][ T34] audit: type=1804 audit(1604601025.271:805): pid=11391 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="file0" dev="sda1" ino=16379 res=1 errno=0 [ 643.884607][T11380] FAT-fs (loop3): Directory bread(block 12) failed [ 643.891367][T11380] FAT-fs (loop3): Directory bread(block 13) failed [ 643.898266][T11380] FAT-fs (loop3): Directory bread(block 14) failed [ 643.905569][T11380] FAT-fs (loop3): Directory bread(block 15) failed 18:30:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:25 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x0, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240040204f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:26 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x0, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:26 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0x0, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) [ 644.444573][T11410] FAT-fs (loop3): Directory bread(block 6) failed [ 644.477623][T11410] FAT-fs (loop3): Directory bread(block 7) failed [ 644.533355][T11410] FAT-fs (loop3): Directory bread(block 8) failed 18:30:26 executing program 4: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x0, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) [ 644.585917][T11410] FAT-fs (loop3): Directory bread(block 9) failed 18:30:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 644.641394][T11410] FAT-fs (loop3): Directory bread(block 10) failed [ 644.666701][ T34] audit: type=1804 audit(1604601026.271:806): pid=11418 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1527/file1/file0" dev="loop5" ino=309 res=1 errno=0 [ 644.690305][T11410] FAT-fs (loop3): Directory bread(block 11) failed [ 644.767200][T11410] FAT-fs (loop3): Directory bread(block 12) failed [ 644.833982][T11410] FAT-fs (loop3): Directory bread(block 13) failed 18:30:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 644.903403][T11410] FAT-fs (loop3): Directory bread(block 14) failed 18:30:26 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x0, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 644.967396][T11410] FAT-fs (loop3): Directory bread(block 15) failed [ 645.013366][ T34] audit: type=1804 audit(1604601026.611:807): pid=11429 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="file0" dev="sda1" ino=16379 res=1 errno=0 18:30:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240600204f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 645.310688][T11438] FAT-fs (loop3): Directory bread(block 6) failed [ 645.322903][T11438] FAT-fs (loop3): Directory bread(block 7) failed 18:30:27 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0x0, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 645.366369][T11438] FAT-fs (loop3): Directory bread(block 8) failed 18:30:27 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0x0, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) [ 645.441765][T11438] FAT-fs (loop3): Directory bread(block 9) failed [ 645.500287][T11438] FAT-fs (loop3): Directory bread(block 10) failed [ 645.520844][T11438] FAT-fs (loop3): Directory bread(block 11) failed [ 645.538136][T11438] FAT-fs (loop3): Directory bread(block 12) failed 18:30:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 645.558857][T11438] FAT-fs (loop3): Directory bread(block 13) failed [ 645.581029][T11438] FAT-fs (loop3): Directory bread(block 14) failed [ 645.629671][T11438] FAT-fs (loop3): Directory bread(block 15) failed [ 645.689483][ T34] audit: type=1804 audit(1604601027.292:808): pid=11451 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1528/file1/file0" dev="loop5" ino=311 res=1 errno=0 18:30:27 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0x0, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000304f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 646.088628][T11464] FAT-fs (loop3): Directory bread(block 6) failed 18:30:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240310304f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:27 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0x0, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xe, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 646.347271][T11476] FAT-fs (loop3): Directory bread(block 6) failed [ 646.372276][T11476] FAT-fs (loop3): Directory bread(block 7) failed [ 646.404151][T11476] FAT-fs (loop3): Directory bread(block 8) failed [ 646.410853][T11476] FAT-fs (loop3): Directory bread(block 9) failed [ 646.419530][T11476] FAT-fs (loop3): Directory bread(block 10) failed [ 646.426767][T11476] FAT-fs (loop3): Directory bread(block 11) failed [ 646.433912][T11476] FAT-fs (loop3): Directory bread(block 12) failed [ 646.442529][T11476] FAT-fs (loop3): Directory bread(block 13) failed 18:30:28 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0x0, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:30:28 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 646.467680][T11476] FAT-fs (loop3): Directory bread(block 14) failed [ 646.474763][T11476] FAT-fs (loop3): Directory bread(block 15) failed 18:30:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240330304f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 646.640753][ T34] audit: type=1804 audit(1604601028.242:809): pid=11490 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1529/file1/file0" dev="loop5" ino=313 res=1 errno=0 18:30:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xe, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xe, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 646.737472][T11496] FAT-fs (loop3): Directory bread(block 6) failed [ 646.746876][T11496] FAT-fs (loop3): Directory bread(block 7) failed [ 646.762155][T11496] FAT-fs (loop3): Directory bread(block 8) failed [ 646.846812][T11496] FAT-fs (loop3): Directory bread(block 9) failed [ 646.900051][T11496] FAT-fs (loop3): Directory bread(block 10) failed 18:30:28 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 646.951379][T11496] FAT-fs (loop3): Directory bread(block 11) failed 18:30:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xe, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 647.031735][T11496] FAT-fs (loop3): Directory bread(block 12) failed [ 647.098002][T11496] FAT-fs (loop3): Directory bread(block 13) failed [ 647.160160][T11496] FAT-fs (loop3): Directory bread(block 14) failed 18:30:28 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 647.226341][T11496] FAT-fs (loop3): Directory bread(block 15) failed 18:30:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240310304f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240350304f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:29 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:30:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240310304f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:29 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0x0, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240310304f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 647.618204][T11526] FAT-fs (loop3): Directory bread(block 6) failed [ 647.659480][T11526] FAT-fs (loop3): Directory bread(block 7) failed 18:30:29 executing program 4: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0x0, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) [ 647.731880][T11526] FAT-fs (loop3): Directory bread(block 8) failed [ 647.745418][T11526] FAT-fs (loop3): Directory bread(block 9) failed [ 647.752164][T11526] FAT-fs (loop3): Directory bread(block 10) failed [ 647.769934][T11526] FAT-fs (loop3): Directory bread(block 11) failed [ 647.787845][T11526] FAT-fs (loop3): Directory bread(block 12) failed [ 647.799455][T11526] FAT-fs (loop3): Directory bread(block 13) failed [ 647.799748][ T34] audit: type=1804 audit(1604601029.402:810): pid=11532 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1530/file1/file0" dev="loop5" ino=315 res=1 errno=0 [ 647.806823][T11526] FAT-fs (loop3): Directory bread(block 14) failed [ 647.837486][T11526] FAT-fs (loop3): Directory bread(block 15) failed [ 647.899157][ T34] audit: type=1804 audit(1604601029.502:811): pid=11539 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="file0" dev="sda1" ino=16371 res=1 errno=0 18:30:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240ee0304f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:29 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0x0, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 648.167528][T11549] FAT-fs (loop3): Directory bread(block 6) failed [ 648.196338][T11549] FAT-fs (loop3): Directory bread(block 7) failed [ 648.202933][T11549] FAT-fs (loop3): Directory bread(block 8) failed [ 648.219255][T11549] FAT-fs (loop3): Directory bread(block 9) failed [ 648.233279][T11549] FAT-fs (loop3): Directory bread(block 10) failed [ 648.247802][T11549] FAT-fs (loop3): Directory bread(block 11) failed [ 648.260492][T11549] FAT-fs (loop3): Directory bread(block 12) failed [ 648.272803][T11549] FAT-fs (loop3): Directory bread(block 13) failed [ 648.380761][T11549] FAT-fs (loop3): Directory bread(block 14) failed [ 648.466853][T11549] FAT-fs (loop3): Directory bread(block 15) failed 18:30:30 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:30:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:30 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0x0, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 648.767855][ T34] audit: type=1804 audit(1604601030.372:812): pid=11562 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1531/file1/file0" dev="loop5" ino=317 res=1 errno=0 18:30:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240f60304f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:30 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 649.239018][T11578] FAT-fs (loop3): Directory bread(block 6) failed [ 649.256090][T11578] FAT-fs (loop3): Directory bread(block 7) failed [ 649.273593][T11578] FAT-fs (loop3): Directory bread(block 8) failed [ 649.344461][T11578] FAT-fs (loop3): Directory bread(block 9) failed [ 649.370836][T11578] FAT-fs (loop3): Directory bread(block 10) failed [ 649.393976][T11578] FAT-fs (loop3): Directory bread(block 11) failed [ 649.401064][T11578] FAT-fs (loop3): Directory bread(block 12) failed [ 649.409502][T11578] FAT-fs (loop3): Directory bread(block 13) failed [ 649.416421][T11578] FAT-fs (loop3): Directory bread(block 14) failed [ 649.423183][T11578] FAT-fs (loop3): Directory bread(block 15) failed 18:30:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:31 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:30:31 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240f70304f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 649.790499][ T34] audit: type=1804 audit(1604601031.392:813): pid=11594 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1532/file1/file0" dev="loop5" ino=319 res=1 errno=0 18:30:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 649.878583][T11603] FAT-fs (loop3): Directory bread(block 6) failed [ 649.945193][T11603] FAT-fs (loop3): Directory bread(block 7) failed [ 650.027067][T11603] FAT-fs (loop3): Directory bread(block 8) failed [ 650.046703][T11603] FAT-fs (loop3): Directory bread(block 9) failed [ 650.062214][T11603] FAT-fs (loop3): Directory bread(block 10) failed [ 650.077683][T11603] FAT-fs (loop3): Directory bread(block 11) failed [ 650.084389][T11603] FAT-fs (loop3): Directory bread(block 12) failed [ 650.091160][T11603] FAT-fs (loop3): Directory bread(block 13) failed [ 650.097968][T11603] FAT-fs (loop3): Directory bread(block 14) failed [ 650.104734][T11603] FAT-fs (loop3): Directory bread(block 15) failed 18:30:31 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:31 executing program 4: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0x0, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:30:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240020404f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 650.377477][ T34] audit: type=1804 audit(1604601031.982:814): pid=11615 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="file0" dev="sda1" ino=15873 res=1 errno=0 18:30:32 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 650.531647][T11622] FAT-fs (loop3): Directory bread(block 6) failed [ 650.563855][T11622] FAT-fs (loop3): Directory bread(block 7) failed [ 650.570541][T11622] FAT-fs (loop3): Directory bread(block 8) failed [ 650.577092][T11622] FAT-fs (loop3): Directory bread(block 9) failed [ 650.583779][T11622] FAT-fs (loop3): Directory bread(block 10) failed [ 650.591196][T11622] FAT-fs (loop3): Directory bread(block 11) failed [ 650.597910][T11622] FAT-fs (loop3): Directory bread(block 12) failed [ 650.604567][T11622] FAT-fs (loop3): Directory bread(block 13) failed [ 650.611206][T11622] FAT-fs (loop3): Directory bread(block 14) failed [ 650.617886][T11622] FAT-fs (loop3): Directory bread(block 15) failed 18:30:32 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240060404f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:32 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) [ 650.765870][T11630] FAT-fs (loop3): Directory bread(block 6) failed [ 650.821401][T11630] FAT-fs (loop3): Directory bread(block 7) failed 18:30:32 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 650.907697][T11630] FAT-fs (loop3): Directory bread(block 8) failed [ 650.920088][T11630] FAT-fs (loop3): Directory bread(block 9) failed [ 650.923871][ T34] audit: type=1804 audit(1604601032.522:815): pid=11634 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1533/file1/file0" dev="loop5" ino=321 res=1 errno=0 [ 650.927673][T11630] FAT-fs (loop3): Directory bread(block 10) failed [ 650.958635][T11630] FAT-fs (loop3): Directory bread(block 11) failed [ 650.965226][T11630] FAT-fs (loop3): Directory bread(block 12) failed [ 650.971810][T11630] FAT-fs (loop3): Directory bread(block 13) failed [ 650.986417][T11630] FAT-fs (loop3): Directory bread(block 14) failed 18:30:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x0, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 651.010713][T11630] FAT-fs (loop3): Directory bread(block 15) failed 18:30:32 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240170404f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:32 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 651.311920][T11644] FAT-fs (loop3): Directory bread(block 6) failed [ 651.352464][T11644] FAT-fs (loop3): Directory bread(block 7) failed 18:30:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x0, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 651.414821][T11644] FAT-fs (loop3): Directory bread(block 8) failed 18:30:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x0, 0x0, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 651.462300][T11644] FAT-fs (loop3): Directory bread(block 9) failed [ 651.536325][T11644] FAT-fs (loop3): Directory bread(block 10) failed [ 651.547514][T11644] FAT-fs (loop3): Directory bread(block 11) failed [ 651.554744][T11644] FAT-fs (loop3): Directory bread(block 12) failed [ 651.611508][T11644] FAT-fs (loop3): Directory bread(block 13) failed [ 651.669931][T11644] FAT-fs (loop3): Directory bread(block 14) failed [ 651.700954][T11644] FAT-fs (loop3): Directory bread(block 15) failed 18:30:33 executing program 4: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:33 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:33 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:30:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x0, 0x0, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:33 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240180404f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 651.887213][ T34] audit: type=1804 audit(1604601033.492:816): pid=11663 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1534/file1/file0" dev="loop5" ino=323 res=1 errno=0 18:30:33 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 651.957769][T11669] FAT-fs (loop3): Directory bread(block 6) failed [ 651.984337][T11669] FAT-fs (loop3): Directory bread(block 7) failed [ 651.990860][T11669] FAT-fs (loop3): Directory bread(block 8) failed [ 651.999163][T11669] FAT-fs (loop3): Directory bread(block 9) failed 18:30:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x0, 0x0, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 652.007393][T11669] FAT-fs (loop3): Directory bread(block 10) failed [ 652.014075][T11669] FAT-fs (loop3): Directory bread(block 11) failed [ 652.020966][T11669] FAT-fs (loop3): Directory bread(block 12) failed [ 652.027730][T11669] FAT-fs (loop3): Directory bread(block 13) failed [ 652.034462][T11669] FAT-fs (loop3): Directory bread(block 14) failed [ 652.041091][T11669] FAT-fs (loop3): Directory bread(block 15) failed 18:30:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x0, 0x2, 0x0, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:33 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240190404f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 652.300654][T11684] FAT-fs (loop3): Directory bread(block 6) failed [ 652.307311][T11684] FAT-fs (loop3): Directory bread(block 7) failed [ 652.316048][T11684] FAT-fs (loop3): Directory bread(block 8) failed [ 652.324718][T11684] FAT-fs (loop3): Directory bread(block 9) failed [ 652.331635][T11684] FAT-fs (loop3): Directory bread(block 10) failed [ 652.343200][T11684] FAT-fs (loop3): Directory bread(block 11) failed 18:30:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000280010002401a0404f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 652.350925][T11684] FAT-fs (loop3): Directory bread(block 12) failed [ 652.361391][T11684] FAT-fs (loop3): Directory bread(block 13) failed [ 652.368148][T11684] FAT-fs (loop3): Directory bread(block 14) failed [ 652.376475][T11684] FAT-fs (loop3): Directory bread(block 15) failed 18:30:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240180404f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:34 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240180404f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 652.522817][T11690] FAT-fs (loop3): Directory bread(block 6) failed [ 652.573319][T11690] FAT-fs (loop3): Directory bread(block 7) failed 18:30:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffff4, 0xfffffffffffffff0}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 652.621864][T11690] FAT-fs (loop3): Directory bread(block 8) failed 18:30:34 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:30:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240180404f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 652.677968][T11690] FAT-fs (loop3): Directory bread(block 9) failed 18:30:34 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 652.723227][T11690] FAT-fs (loop3): Directory bread(block 10) failed [ 652.754661][T11690] FAT-fs (loop3): Directory bread(block 11) failed [ 652.761573][T11690] FAT-fs (loop3): Directory bread(block 12) failed 18:30:34 executing program 4: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 652.802087][T11690] FAT-fs (loop3): Directory bread(block 13) failed [ 652.835299][T11690] FAT-fs (loop3): Directory bread(block 14) failed [ 652.855609][ T34] audit: type=1804 audit(1604601034.462:817): pid=11707 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1535/file1/file0" dev="loop5" ino=325 res=1 errno=0 [ 652.921213][T11690] FAT-fs (loop3): Directory bread(block 15) failed 18:30:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000280010002401b0404f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:34 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffff4, 0xfffffffffffffff0}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 653.148992][T11719] FAT-fs (loop3): Directory bread(block 6) failed [ 653.163008][T11719] FAT-fs (loop3): Directory bread(block 7) failed [ 653.231980][T11719] FAT-fs (loop3): Directory bread(block 8) failed [ 653.298344][T11719] FAT-fs (loop3): Directory bread(block 9) failed [ 653.357681][T11719] FAT-fs (loop3): Directory bread(block 10) failed [ 653.372885][T11719] FAT-fs (loop3): Directory bread(block 11) failed [ 653.387073][T11719] FAT-fs (loop3): Directory bread(block 12) failed 18:30:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff0}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 653.404559][T11719] FAT-fs (loop3): Directory bread(block 13) failed 18:30:35 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000280010002401c0404f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 653.440852][T11719] FAT-fs (loop3): Directory bread(block 14) failed [ 653.451627][T11719] FAT-fs (loop3): Directory bread(block 15) failed 18:30:35 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', 0x0) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>'}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:30:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff0}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 653.642651][T11736] FAT-fs (loop3): Directory bread(block 6) failed [ 653.657042][T11736] FAT-fs (loop3): Directory bread(block 7) failed 18:30:35 executing program 4: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) [ 653.695652][T11736] FAT-fs (loop3): Directory bread(block 8) failed [ 653.702305][T11736] FAT-fs (loop3): Directory bread(block 9) failed 18:30:35 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 653.788653][ T34] audit: type=1804 audit(1604601035.392:818): pid=11743 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="file0" dev="sda1" ino=15781 res=1 errno=0 [ 653.828345][T11736] FAT-fs (loop3): Directory bread(block 10) failed [ 653.873454][T11736] FAT-fs (loop3): Directory bread(block 11) failed [ 653.913147][ T34] audit: type=1804 audit(1604601035.512:819): pid=11750 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1536/file1/file0" dev="loop5" ino=327 res=1 errno=0 [ 653.929400][T11736] FAT-fs (loop3): Directory bread(block 12) failed 18:30:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff0}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 654.115437][T11736] FAT-fs (loop3): Directory bread(block 13) failed [ 654.153831][T11736] FAT-fs (loop3): Directory bread(block 14) failed [ 654.181661][T11736] FAT-fs (loop3): Directory bread(block 15) failed 18:30:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000280010002401d0404f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:35 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:36 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 654.384587][T11764] FAT-fs (loop3): Directory bread(block 6) failed [ 654.433789][T11764] FAT-fs (loop3): Directory bread(block 7) failed [ 654.441176][T11764] FAT-fs (loop3): Directory bread(block 8) failed [ 654.451126][T11764] FAT-fs (loop3): Directory bread(block 9) failed [ 654.458332][T11764] FAT-fs (loop3): Directory bread(block 10) failed [ 654.464971][T11764] FAT-fs (loop3): Directory bread(block 11) failed [ 654.471691][T11764] FAT-fs (loop3): Directory bread(block 12) failed [ 654.479142][T11764] FAT-fs (loop3): Directory bread(block 13) failed [ 654.485984][T11764] FAT-fs (loop3): Directory bread(block 14) failed [ 654.492610][T11764] FAT-fs (loop3): Directory bread(block 15) failed 18:30:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffff4, 0xfffffffffffffff0}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000280010002401e0404f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:36 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', 0x0) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>'}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:30:36 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 654.797069][T11781] FAT-fs (loop3): Directory bread(block 6) failed [ 654.804319][T11781] FAT-fs (loop3): Directory bread(block 7) failed [ 654.810879][T11781] FAT-fs (loop3): Directory bread(block 8) failed [ 654.869527][ T34] audit: type=1804 audit(1604601036.472:820): pid=11785 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1537/file1/file0" dev="loop5" ino=329 res=1 errno=0 [ 654.907716][T11781] FAT-fs (loop3): Directory bread(block 9) failed 18:30:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @alu={0x4, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffff4, 0xfffffffffffffff0}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:36 executing program 4: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', 0x0) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>'}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) [ 654.916450][T11781] FAT-fs (loop3): Directory bread(block 10) failed [ 654.933571][T11781] FAT-fs (loop3): Directory bread(block 11) failed [ 654.940291][T11781] FAT-fs (loop3): Directory bread(block 12) failed [ 654.946897][T11781] FAT-fs (loop3): Directory bread(block 13) failed [ 654.955070][T11781] FAT-fs (loop3): Directory bread(block 14) failed [ 654.961653][T11781] FAT-fs (loop3): Directory bread(block 15) failed 18:30:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000280010002401f0404f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:36 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 655.073416][ T34] audit: type=1804 audit(1604601036.672:821): pid=11794 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="file0" dev="sda1" ino=15877 res=1 errno=0 18:30:36 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @alu={0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffff4, 0xfffffffffffffff0}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 655.251834][T11802] FAT-fs (loop3): Directory bread(block 6) failed [ 655.300553][T11802] FAT-fs (loop3): Directory bread(block 7) failed [ 655.346111][T11802] FAT-fs (loop3): Directory bread(block 8) failed [ 655.405415][T11802] FAT-fs (loop3): Directory bread(block 9) failed 18:30:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @alu={0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffff4, 0xfffffffffffffff0}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 655.452479][T11802] FAT-fs (loop3): Directory bread(block 10) failed [ 655.473272][T11802] FAT-fs (loop3): Directory bread(block 11) failed 18:30:37 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', 0x0) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>'}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:30:37 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @alu={0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffff4, 0xfffffffffffffff0}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 655.581132][T11802] FAT-fs (loop3): Directory bread(block 12) failed [ 655.617793][T11802] FAT-fs (loop3): Directory bread(block 13) failed [ 655.676219][T11802] FAT-fs (loop3): Directory bread(block 14) failed [ 655.689059][T11802] FAT-fs (loop3): Directory bread(block 15) failed [ 655.755856][ T34] audit: type=1804 audit(1604601037.362:822): pid=11820 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1538/file1/file0" dev="loop5" ino=331 res=1 errno=0 18:30:37 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240200404f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 655.937004][T11828] FAT-fs (loop3): Directory bread(block 6) failed [ 655.945185][T11828] FAT-fs (loop3): Directory bread(block 7) failed [ 655.951875][T11828] FAT-fs (loop3): Directory bread(block 8) failed [ 655.960302][T11828] FAT-fs (loop3): Directory bread(block 9) failed [ 655.970250][T11828] FAT-fs (loop3): Directory bread(block 10) failed [ 655.976972][T11828] FAT-fs (loop3): Directory bread(block 11) failed [ 655.985959][T11828] FAT-fs (loop3): Directory bread(block 12) failed [ 655.992698][T11828] FAT-fs (loop3): Directory bread(block 13) failed [ 656.000026][T11828] FAT-fs (loop3): Directory bread(block 14) failed [ 656.008675][T11828] FAT-fs (loop3): Directory bread(block 15) failed 18:30:37 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4, 0xfffffffffffffff0}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:38 executing program 4: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x0, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:38 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240210404f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:38 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff0}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 656.483311][T11841] FAT-fs (loop3): Directory bread(block 6) failed [ 656.508922][T11841] FAT-fs (loop3): Directory bread(block 7) failed [ 656.521817][T11841] FAT-fs (loop3): Directory bread(block 8) failed 18:30:38 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(0x0, &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) [ 656.528535][T11841] FAT-fs (loop3): Directory bread(block 9) failed [ 656.535136][T11841] FAT-fs (loop3): Directory bread(block 10) failed [ 656.541665][T11841] FAT-fs (loop3): Directory bread(block 11) failed [ 656.549135][T11841] FAT-fs (loop3): Directory bread(block 12) failed [ 656.555782][T11841] FAT-fs (loop3): Directory bread(block 13) failed [ 656.602152][T11841] FAT-fs (loop3): Directory bread(block 14) failed [ 656.642598][T11841] FAT-fs (loop3): Directory bread(block 15) failed [ 656.691066][ T34] audit: type=1804 audit(1604601038.292:823): pid=11851 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1539/file1/file0" dev="loop5" ino=333 res=1 errno=0 18:30:38 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000504f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:38 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff0}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:38 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000604f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 656.940831][T11863] FAT-fs (loop3): Directory bread(block 6) failed 18:30:38 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff0}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 657.118439][T11871] FAT-fs (loop3): Directory bread(block 6) failed 18:30:38 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240040604f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:38 executing program 4: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 657.325682][T11882] FAT-fs (loop3): Directory bread(block 6) failed [ 657.335246][T11882] FAT-fs (loop3): Directory bread(block 7) failed 18:30:39 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 657.397351][T11882] FAT-fs (loop3): Directory bread(block 8) failed [ 657.432911][T11882] FAT-fs (loop3): Directory bread(block 9) failed [ 657.444105][T11882] FAT-fs (loop3): Directory bread(block 10) failed [ 657.450646][T11882] FAT-fs (loop3): Directory bread(block 11) failed 18:30:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xa, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:39 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(0x0, &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:30:39 executing program 4: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', 0x0) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>'}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) [ 657.513184][T11882] FAT-fs (loop3): Directory bread(block 12) failed [ 657.552726][T11882] FAT-fs (loop3): Directory bread(block 13) failed 18:30:39 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 657.565024][T11882] FAT-fs (loop3): Directory bread(block 14) failed [ 657.572828][T11882] FAT-fs (loop3): Directory bread(block 15) failed 18:30:39 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000704f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 657.616225][ T34] audit: type=1804 audit(1604601039.222:824): pid=11893 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="file0" dev="sda1" ino=15857 res=1 errno=0 [ 657.721975][ T34] audit: type=1804 audit(1604601039.262:825): pid=11896 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1540/file1/file0" dev="loop5" ino=335 res=1 errno=0 [ 657.837607][T11907] FAT-fs (loop3): Directory bread(block 6) failed 18:30:39 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000904f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xa, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:39 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 658.163306][T11916] FAT-fs (loop3): Directory bread(block 6) failed 18:30:39 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000a04f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xa, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:40 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:40 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(0x0, &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) [ 658.545267][T11928] FAT-fs (loop3): Directory bread(block 6) failed 18:30:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000b04f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 658.662795][ T34] audit: type=1804 audit(1604601040.262:826): pid=11937 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1541/file1/file0" dev="sda1" ino=15879 res=1 errno=0 18:30:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xa, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:40 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:40 executing program 4: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 658.816054][T11942] FAT-fs (loop3): Directory bread(block 6) failed 18:30:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000c04f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:40 executing program 4: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000704f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 659.144899][T11956] FAT-fs (loop3): Directory bread(block 6) failed 18:30:40 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:40 executing program 4: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000704f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000d04f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 659.425592][T11967] FAT-fs (loop3): Directory bread(block 6) failed 18:30:41 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000e04f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:41 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', 0x0, 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:30:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000704f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:41 executing program 4: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4", 0x3) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) [ 659.718749][T11981] FAT-fs (loop3): Directory bread(block 6) failed [ 659.807309][ T34] audit: type=1804 audit(1604601041.413:827): pid=11985 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="file0" dev="sda1" ino=15886 res=1 errno=0 18:30:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240010e04f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 659.940567][ T34] audit: type=1804 audit(1604601041.543:828): pid=11990 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1542/file1/file0" dev="loop5" ino=337 res=1 errno=0 18:30:41 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 660.167434][T12001] FAT-fs (loop3): Directory bread(block 6) failed [ 660.223072][T12001] FAT-fs (loop3): Directory bread(block 7) failed [ 660.230874][T12001] FAT-fs (loop3): Directory bread(block 8) failed [ 660.248175][T12001] FAT-fs (loop3): Directory bread(block 9) failed [ 660.265492][T12001] FAT-fs (loop3): Directory bread(block 10) failed 18:30:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9}, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 660.279609][T12001] FAT-fs (loop3): Directory bread(block 11) failed [ 660.297093][T12001] FAT-fs (loop3): Directory bread(block 12) failed [ 660.321684][T12001] FAT-fs (loop3): Directory bread(block 13) failed [ 660.382395][T12001] FAT-fs (loop3): Directory bread(block 14) failed 18:30:42 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 660.429870][T12001] FAT-fs (loop3): Directory bread(block 15) failed 18:30:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000f04f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9}, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:42 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', 0x0, 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) [ 660.757396][T12013] FAT-fs (loop3): Directory bread(block 6) failed 18:30:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240201004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:42 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x0, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 660.939557][ T34] audit: type=1804 audit(1604601042.543:829): pid=12020 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1543/file1/file0" dev="loop5" ino=339 res=1 errno=0 [ 660.999236][T12024] FAT-fs (loop3): Directory bread(block 6) failed 18:30:42 executing program 4: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4", 0x3) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) [ 661.053923][T12024] FAT-fs (loop3): Directory bread(block 7) failed [ 661.087799][T12024] FAT-fs (loop3): Directory bread(block 8) failed 18:30:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000140)=@framed={{}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9}, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 661.178146][T12024] FAT-fs (loop3): Directory bread(block 9) failed 18:30:42 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x0, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 661.245386][T12024] FAT-fs (loop3): Directory bread(block 10) failed [ 661.264477][T12024] FAT-fs (loop3): Directory bread(block 11) failed [ 661.287415][T12024] FAT-fs (loop3): Directory bread(block 12) failed [ 661.309577][T12024] FAT-fs (loop3): Directory bread(block 13) failed [ 661.376139][T12024] FAT-fs (loop3): Directory bread(block 14) failed [ 661.446797][T12024] FAT-fs (loop3): Directory bread(block 15) failed 18:30:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240001104f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 661.592314][ T34] audit: type=1804 audit(1604601043.193:830): pid=12039 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="file0" dev="sda1" ino=16257 res=1 errno=0 [ 661.702558][T12044] FAT-fs (loop3): Directory bread(block 6) failed 18:30:43 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x0, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:43 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', 0x0, 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:30:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240001204f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 661.997407][ T34] audit: type=1804 audit(1604601043.603:831): pid=12056 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1544/file1/file0" dev="loop5" ino=341 res=1 errno=0 [ 662.005852][T12058] FAT-fs (loop3): Directory bread(block 6) failed 18:30:43 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x0, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240901504f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 662.491730][T12072] FAT-fs (loop3): Directory bread(block 6) failed [ 662.519118][T12072] FAT-fs (loop3): Directory bread(block 7) failed [ 662.544209][T12072] FAT-fs (loop3): Directory bread(block 8) failed [ 662.551048][T12072] FAT-fs (loop3): Directory bread(block 9) failed [ 662.558022][T12072] FAT-fs (loop3): Directory bread(block 10) failed [ 662.565006][T12072] FAT-fs (loop3): Directory bread(block 11) failed [ 662.573792][T12072] FAT-fs (loop3): Directory bread(block 12) failed [ 662.583050][T12072] FAT-fs (loop3): Directory bread(block 13) failed [ 662.656496][T12072] FAT-fs (loop3): Directory bread(block 14) failed 18:30:44 executing program 4: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4", 0x3) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:30:44 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x0, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 662.715452][T12072] FAT-fs (loop3): Directory bread(block 15) failed 18:30:44 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:30:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240041704f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:44 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x0, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 662.925341][ T34] audit: type=1804 audit(1604601044.533:832): pid=12087 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="file0" dev="sda1" ino=15885 res=1 errno=0 [ 662.996131][ T34] audit: type=1804 audit(1604601044.593:833): pid=12086 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1545/file1/file0" dev="loop5" ino=343 res=1 errno=0 18:30:44 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x0, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 663.123255][T12097] FAT-fs (loop3): Directory bread(block 6) failed [ 663.152464][T12097] FAT-fs (loop3): Directory bread(block 7) failed [ 663.242883][T12097] FAT-fs (loop3): Directory bread(block 8) failed [ 663.249460][T12097] FAT-fs (loop3): Directory bread(block 9) failed [ 663.257818][T12097] FAT-fs (loop3): Directory bread(block 10) failed [ 663.264447][T12097] FAT-fs (loop3): Directory bread(block 11) failed [ 663.271059][T12097] FAT-fs (loop3): Directory bread(block 12) failed [ 663.277677][T12097] FAT-fs (loop3): Directory bread(block 13) failed [ 663.284392][T12097] FAT-fs (loop3): Directory bread(block 14) failed [ 663.290961][T12097] FAT-fs (loop3): Directory bread(block 15) failed 18:30:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240041804f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0x0, 0x0, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 663.635900][T12114] FAT-fs (loop3): Directory bread(block 6) failed [ 663.663588][T12114] FAT-fs (loop3): Directory bread(block 7) failed [ 663.670064][T12114] FAT-fs (loop3): Directory bread(block 8) failed 18:30:45 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x0, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 663.689606][T12114] FAT-fs (loop3): Directory bread(block 9) failed [ 663.700663][T12114] FAT-fs (loop3): Directory bread(block 10) failed [ 663.711719][T12114] FAT-fs (loop3): Directory bread(block 11) failed [ 663.722240][T12114] FAT-fs (loop3): Directory bread(block 12) failed [ 663.732703][T12114] FAT-fs (loop3): Directory bread(block 13) failed [ 663.744152][T12114] FAT-fs (loop3): Directory bread(block 14) failed [ 663.750663][T12114] FAT-fs (loop3): Directory bread(block 15) failed 18:30:45 executing program 4: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x0, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:45 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:30:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0x0, 0x0, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240041904f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:45 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x0, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 664.016527][ T34] audit: type=1804 audit(1604601045.623:834): pid=12126 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1546/file1/file0" dev="loop5" ino=345 res=1 errno=0 [ 664.042192][T12127] FAT-fs (loop3): Directory bread(block 6) failed [ 664.062698][T12127] FAT-fs (loop3): Directory bread(block 7) failed [ 664.102817][T12127] FAT-fs (loop3): Directory bread(block 8) failed [ 664.109326][T12127] FAT-fs (loop3): Directory bread(block 9) failed [ 664.117574][T12127] FAT-fs (loop3): Directory bread(block 10) failed [ 664.124383][T12127] FAT-fs (loop3): Directory bread(block 11) failed [ 664.131025][T12127] FAT-fs (loop3): Directory bread(block 12) failed [ 664.142009][T12127] FAT-fs (loop3): Directory bread(block 13) failed [ 664.149630][T12127] FAT-fs (loop3): Directory bread(block 14) failed [ 664.156442][T12127] FAT-fs (loop3): Directory bread(block 15) failed 18:30:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0x0, 0x0, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240041a04f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:46 executing program 4: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', 0x0, 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) [ 664.391998][T12142] FAT-fs (loop3): Directory bread(block 6) failed 18:30:46 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x0, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 664.468333][T12142] FAT-fs (loop3): Directory bread(block 7) failed 18:30:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 664.547672][T12142] FAT-fs (loop3): Directory bread(block 8) failed [ 664.566665][ T34] audit: type=1804 audit(1604601046.173:835): pid=12149 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="file0" dev="sda1" ino=16291 res=1 errno=0 [ 664.610367][T12142] FAT-fs (loop3): Directory bread(block 9) failed 18:30:46 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x0, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 664.664300][T12142] FAT-fs (loop3): Directory bread(block 10) failed [ 664.671490][T12142] FAT-fs (loop3): Directory bread(block 11) failed [ 664.706906][T12142] FAT-fs (loop3): Directory bread(block 12) failed [ 664.783684][T12142] FAT-fs (loop3): Directory bread(block 13) failed 18:30:46 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) [ 664.840936][T12142] FAT-fs (loop3): Directory bread(block 14) failed [ 664.880617][T12142] FAT-fs (loop3): Directory bread(block 15) failed 18:30:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:46 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x0, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:46 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240041b04f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 665.060045][ T34] audit: type=1804 audit(1604601046.663:836): pid=12163 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1547/file1/file0" dev="loop5" ino=347 res=1 errno=0 [ 665.156325][T12172] FAT-fs (loop3): Directory bread(block 6) failed [ 665.163778][T12172] FAT-fs (loop3): Directory bread(block 7) failed [ 665.179145][T12172] FAT-fs (loop3): Directory bread(block 8) failed 18:30:46 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0x0, 0xfffffffffffffff0}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 665.267422][T12172] FAT-fs (loop3): Directory bread(block 9) failed [ 665.345844][T12172] FAT-fs (loop3): Directory bread(block 10) failed [ 665.427596][T12172] FAT-fs (loop3): Directory bread(block 11) failed [ 665.486994][T12172] FAT-fs (loop3): Directory bread(block 12) failed [ 665.511274][T12172] FAT-fs (loop3): Directory bread(block 13) failed [ 665.528193][T12172] FAT-fs (loop3): Directory bread(block 14) failed [ 665.536077][T12172] FAT-fs (loop3): Directory bread(block 15) failed 18:30:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240041c04f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:47 executing program 4: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:30:47 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0x0, 0xfffffffffffffff0}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 665.678814][T12184] FAT-fs (loop3): Directory bread(block 6) failed [ 665.698397][T12184] FAT-fs (loop3): Directory bread(block 7) failed 18:30:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 665.733985][T12184] FAT-fs (loop3): Directory bread(block 8) failed [ 665.748627][T12184] FAT-fs (loop3): Directory bread(block 9) failed [ 665.758137][T12184] FAT-fs (loop3): Directory bread(block 10) failed [ 665.767317][T12184] FAT-fs (loop3): Directory bread(block 11) failed [ 665.777181][T12184] FAT-fs (loop3): Directory bread(block 12) failed 18:30:47 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x0, 0x0, 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) [ 665.785398][T12184] FAT-fs (loop3): Directory bread(block 13) failed [ 665.803437][T12184] FAT-fs (loop3): Directory bread(block 14) failed [ 665.822702][T12184] FAT-fs (loop3): Directory bread(block 15) failed 18:30:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240041d04f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 665.925910][ T34] audit: type=1804 audit(1604601047.533:837): pid=12195 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="file0" dev="sda1" ino=15812 res=1 errno=0 18:30:47 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0x0, 0xfffffffffffffff0}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 666.087531][ T34] audit: type=1804 audit(1604601047.693:838): pid=12197 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1548/file1/file0" dev="sda1" ino=15815 res=1 errno=0 [ 666.137008][T12207] FAT-fs (loop3): Directory bread(block 6) failed [ 666.178524][T12207] FAT-fs (loop3): Directory bread(block 7) failed 18:30:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 666.260215][T12207] FAT-fs (loop3): Directory bread(block 8) failed [ 666.289494][T12207] FAT-fs (loop3): Directory bread(block 9) failed [ 666.352031][T12207] FAT-fs (loop3): Directory bread(block 10) failed 18:30:48 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 666.407022][T12207] FAT-fs (loop3): Directory bread(block 11) failed [ 666.468853][T12207] FAT-fs (loop3): Directory bread(block 12) failed [ 666.515156][T12207] FAT-fs (loop3): Directory bread(block 13) failed [ 666.542658][T12207] FAT-fs (loop3): Directory bread(block 14) failed [ 666.549313][T12207] FAT-fs (loop3): Directory bread(block 15) failed 18:30:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240041e04f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:48 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 666.800099][T12224] FAT-fs (loop3): Directory bread(block 6) failed [ 666.836443][T12224] FAT-fs (loop3): Directory bread(block 7) failed [ 666.850664][T12224] FAT-fs (loop3): Directory bread(block 8) failed [ 666.864205][T12224] FAT-fs (loop3): Directory bread(block 9) failed [ 666.875343][T12224] FAT-fs (loop3): Directory bread(block 10) failed [ 666.882071][T12224] FAT-fs (loop3): Directory bread(block 11) failed [ 666.894513][T12224] FAT-fs (loop3): Directory bread(block 12) failed [ 666.948081][T12224] FAT-fs (loop3): Directory bread(block 13) failed [ 666.987848][T12224] FAT-fs (loop3): Directory bread(block 14) failed 18:30:48 executing program 4: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:30:48 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x0, 0x0, 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:30:48 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 667.002597][T12224] FAT-fs (loop3): Directory bread(block 15) failed 18:30:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240041f04f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:48 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 667.204622][T12237] FAT-fs (loop3): Directory bread(block 6) failed [ 667.225243][ T34] audit: type=1804 audit(1604601048.833:839): pid=12241 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="file0" dev="sda1" ino=15885 res=1 errno=0 [ 667.229589][T12237] FAT-fs (loop3): Directory bread(block 7) failed 18:30:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 667.261402][T12237] FAT-fs (loop3): Directory bread(block 8) failed [ 667.268258][T12237] FAT-fs (loop3): Directory bread(block 9) failed [ 667.274902][T12237] FAT-fs (loop3): Directory bread(block 10) failed [ 667.281441][T12237] FAT-fs (loop3): Directory bread(block 11) failed [ 667.288109][T12237] FAT-fs (loop3): Directory bread(block 12) failed [ 667.294741][T12237] FAT-fs (loop3): Directory bread(block 13) failed [ 667.301366][T12237] FAT-fs (loop3): Directory bread(block 14) failed [ 667.308276][T12237] FAT-fs (loop3): Directory bread(block 15) failed [ 667.326581][ T34] audit: type=1804 audit(1604601048.923:840): pid=12245 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1549/file1/file0" dev="sda1" ino=15815 res=1 errno=0 18:30:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240002004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:49 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 667.545505][T12257] FAT-fs (loop3): Directory bread(block 6) failed 18:30:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240042004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:49 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 667.733210][T12267] FAT-fs (loop3): Directory bread(block 6) failed [ 667.782549][T12267] FAT-fs (loop3): Directory bread(block 7) failed [ 667.818952][T12267] FAT-fs (loop3): Directory bread(block 8) failed 18:30:49 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 667.880079][T12267] FAT-fs (loop3): Directory bread(block 9) failed [ 667.924516][T12267] FAT-fs (loop3): Directory bread(block 10) failed [ 667.931029][T12267] FAT-fs (loop3): Directory bread(block 11) failed [ 668.025115][T12267] FAT-fs (loop3): Directory bread(block 12) failed [ 668.082534][T12267] FAT-fs (loop3): Directory bread(block 13) failed [ 668.104156][T12267] FAT-fs (loop3): Directory bread(block 14) failed [ 668.134660][T12267] FAT-fs (loop3): Directory bread(block 15) failed 18:30:49 executing program 4: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', 0x0, 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:30:49 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:49 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240102004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:49 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x0, 0x0, 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) [ 668.371655][T12282] FAT-fs (loop3): Directory bread(block 6) failed [ 668.418321][ T34] audit: type=1804 audit(1604601050.023:841): pid=12287 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="file0" dev="sda1" ino=16382 res=1 errno=0 [ 668.425093][T12282] FAT-fs (loop3): Directory bread(block 7) failed [ 668.490559][T12282] FAT-fs (loop3): Directory bread(block 8) failed [ 668.504099][T12282] FAT-fs (loop3): Directory bread(block 9) failed [ 668.510982][T12282] FAT-fs (loop3): Directory bread(block 10) failed [ 668.540759][T12282] FAT-fs (loop3): Directory bread(block 11) failed [ 668.561176][T12282] FAT-fs (loop3): Directory bread(block 12) failed [ 668.579123][T12282] FAT-fs (loop3): Directory bread(block 13) failed 18:30:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 668.621244][T12282] FAT-fs (loop3): Directory bread(block 14) failed [ 668.637710][ T34] audit: type=1804 audit(1604601050.243:842): pid=12290 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1550/file1/file0" dev="loop5" ino=349 res=1 errno=0 [ 668.642778][T12282] FAT-fs (loop3): Directory bread(block 15) failed 18:30:50 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240042104f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 668.935602][T12305] FAT-fs (loop3): Directory bread(block 6) failed [ 668.953258][T12305] FAT-fs (loop3): Directory bread(block 7) failed [ 669.031040][T12305] FAT-fs (loop3): Directory bread(block 8) failed 18:30:50 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 669.107245][T12305] FAT-fs (loop3): Directory bread(block 9) failed [ 669.162010][T12305] FAT-fs (loop3): Directory bread(block 10) failed [ 669.172325][T12305] FAT-fs (loop3): Directory bread(block 11) failed [ 669.182352][T12305] FAT-fs (loop3): Directory bread(block 12) failed 18:30:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 669.195223][T12305] FAT-fs (loop3): Directory bread(block 13) failed 18:30:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240002504f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:51 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) [ 669.195234][T12305] FAT-fs (loop3): Directory bread(block 14) failed [ 669.195248][T12305] FAT-fs (loop3): Directory bread(block 15) failed 18:30:51 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 669.519350][T12319] FAT-fs (loop3): Directory bread(block 6) failed 18:30:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240a12604f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:51 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:51 executing program 4: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 669.666730][ T34] audit: type=1804 audit(1604601051.273:843): pid=12328 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1551/file1/file0" dev="loop5" ino=352 res=1 errno=0 18:30:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 669.777025][T12338] FAT-fs (loop3): Directory bread(block 6) failed [ 669.837169][T12338] FAT-fs (loop3): Directory bread(block 7) failed [ 669.914822][T12338] FAT-fs (loop3): Directory bread(block 8) failed [ 669.921452][T12338] FAT-fs (loop3): Directory bread(block 9) failed 18:30:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 669.956239][T12338] FAT-fs (loop3): Directory bread(block 10) failed [ 670.019049][T12338] FAT-fs (loop3): Directory bread(block 11) failed [ 670.074742][T12338] FAT-fs (loop3): Directory bread(block 12) failed 18:30:51 executing program 4: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x0, 0x0, 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) [ 670.124892][T12338] FAT-fs (loop3): Directory bread(block 13) failed [ 670.136719][T12338] FAT-fs (loop3): Directory bread(block 14) failed 18:30:51 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 670.184500][ T34] audit: type=1804 audit(1604601051.793:844): pid=12352 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="file0" dev="sda1" ino=16376 res=1 errno=0 [ 670.185138][T12338] FAT-fs (loop3): Directory bread(block 15) failed 18:30:51 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:52 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:30:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240a22604f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:52 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 670.664313][ T34] audit: type=1804 audit(1604601052.273:845): pid=12369 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1552/file1/file0" dev="loop5" ino=354 res=1 errno=0 [ 670.772142][T12375] FAT-fs (loop3): Directory bread(block 6) failed [ 670.791350][T12375] FAT-fs (loop3): Directory bread(block 7) failed 18:30:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 670.872520][T12375] FAT-fs (loop3): Directory bread(block 8) failed [ 670.879010][T12375] FAT-fs (loop3): Directory bread(block 9) failed 18:30:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:52 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 670.991263][T12375] FAT-fs (loop3): Directory bread(block 10) failed [ 671.037701][T12375] FAT-fs (loop3): Directory bread(block 11) failed [ 671.116345][T12375] FAT-fs (loop3): Directory bread(block 12) failed [ 671.123617][T12375] FAT-fs (loop3): Directory bread(block 13) failed [ 671.131313][T12375] FAT-fs (loop3): Directory bread(block 14) failed [ 671.138093][T12375] FAT-fs (loop3): Directory bread(block 15) failed 18:30:52 executing program 4: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240033104f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:52 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 671.341846][T12389] FAT-fs (loop3): Directory bread(block 6) failed [ 671.378668][T12389] FAT-fs (loop3): Directory bread(block 7) failed 18:30:53 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) [ 671.420443][T12389] FAT-fs (loop3): Directory bread(block 8) failed [ 671.428941][T12389] FAT-fs (loop3): Directory bread(block 9) failed [ 671.435451][T12389] FAT-fs (loop3): Directory bread(block 10) failed [ 671.443142][T12389] FAT-fs (loop3): Directory bread(block 11) failed [ 671.450938][T12389] FAT-fs (loop3): Directory bread(block 12) failed [ 671.457587][T12389] FAT-fs (loop3): Directory bread(block 13) failed [ 671.464147][T12389] FAT-fs (loop3): Directory bread(block 14) failed 18:30:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 671.470974][T12389] FAT-fs (loop3): Directory bread(block 15) failed 18:30:53 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240033304f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 671.616549][ T34] audit: type=1804 audit(1604601053.213:846): pid=12403 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1553/file1/file0" dev="loop5" ino=356 res=1 errno=0 18:30:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 671.700384][T12412] FAT-fs (loop3): Directory bread(block 6) failed [ 671.707858][T12412] FAT-fs (loop3): Directory bread(block 7) failed [ 671.716083][T12412] FAT-fs (loop3): Directory bread(block 8) failed [ 671.724254][T12412] FAT-fs (loop3): Directory bread(block 9) failed [ 671.730844][T12412] FAT-fs (loop3): Directory bread(block 10) failed [ 671.737626][T12412] FAT-fs (loop3): Directory bread(block 11) failed 18:30:53 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 671.744342][T12412] FAT-fs (loop3): Directory bread(block 12) failed [ 671.751157][T12412] FAT-fs (loop3): Directory bread(block 13) failed [ 671.757860][T12412] FAT-fs (loop3): Directory bread(block 14) failed [ 671.764475][T12412] FAT-fs (loop3): Directory bread(block 15) failed 18:30:53 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240033504f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 672.020067][T12425] FAT-fs (loop3): Directory bread(block 6) failed [ 672.033702][T12425] FAT-fs (loop3): Directory bread(block 7) failed [ 672.040182][T12425] FAT-fs (loop3): Directory bread(block 8) failed [ 672.134410][T12425] FAT-fs (loop3): Directory bread(block 9) failed [ 672.162077][T12425] FAT-fs (loop3): Directory bread(block 10) failed 18:30:53 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {0x0, 0x0, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:30:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 672.253798][T12425] FAT-fs (loop3): Directory bread(block 11) failed 18:30:53 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:53 executing program 4: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) [ 672.296406][T12425] FAT-fs (loop3): Directory bread(block 12) failed [ 672.315830][T12425] FAT-fs (loop3): Directory bread(block 13) failed [ 672.342661][T12425] FAT-fs (loop3): Directory bread(block 14) failed [ 672.369707][ T34] audit: type=1804 audit(1604601053.963:847): pid=12433 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1554/file1/file0" dev="loop5" ino=358 res=1 errno=0 [ 672.396288][T12425] FAT-fs (loop3): Directory bread(block 15) failed 18:30:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 672.427598][ T34] audit: type=1804 audit(1604601054.033:848): pid=12440 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="file0" dev="sda1" ino=15813 res=1 errno=0 18:30:54 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240003f04f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:54 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 672.702290][T12453] FAT-fs (loop3): Directory bread(block 6) failed 18:30:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:54 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240004004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 673.097822][T12463] FAT-fs (loop3): Directory bread(block 6) failed 18:30:54 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {0x0, 0x0, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:30:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:54 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:54 executing program 4: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {0x0, 0x0, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:30:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:54 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240004804f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 673.400774][ T34] audit: type=1804 audit(1604601054.993:849): pid=12476 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1555/file1/file0" dev="loop5" ino=360 res=1 errno=0 [ 673.486747][T12481] FAT-fs (loop3): Directory bread(block 6) failed 18:30:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:55 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240004c04f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 673.701129][ T34] audit: type=1804 audit(1604601055.293:850): pid=12491 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="file0" dev="sda1" ino=16379 res=1 errno=0 [ 673.873746][T12496] FAT-fs (loop3): Directory bread(block 6) failed 18:30:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240005c04f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:55 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {0x0, 0x0, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:30:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:55 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 674.289095][T12501] FAT-fs (loop3): Directory bread(block 6) failed 18:30:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240006004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 674.499646][ T34] audit: type=1804 audit(1604601056.094:851): pid=12510 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1556/file0" dev="sda1" ino=15820 res=1 errno=0 [ 674.671315][T12518] FAT-fs (loop3): Directory bread(block 6) failed 18:30:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240026004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:56 executing program 4: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:30:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:30:56 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x0, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 674.857510][T12522] FAT-fs (loop3): Directory bread(block 6) failed [ 674.893704][T12522] FAT-fs (loop3): Directory bread(block 7) failed [ 674.969894][T12522] FAT-fs (loop3): Directory bread(block 8) failed [ 675.002549][ T34] audit: type=1804 audit(1604601056.604:852): pid=12531 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="file0" dev="sda1" ino=16380 res=1 errno=0 [ 675.040528][T12522] FAT-fs (loop3): Directory bread(block 9) failed [ 675.095714][T12522] FAT-fs (loop3): Directory bread(block 10) failed [ 675.164244][T12522] FAT-fs (loop3): Directory bread(block 11) failed [ 675.215036][T12522] FAT-fs (loop3): Directory bread(block 12) failed [ 675.233140][T12522] FAT-fs (loop3): Directory bread(block 13) failed [ 675.251308][T12522] FAT-fs (loop3): Directory bread(block 14) failed 18:30:56 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x0, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 675.272127][T12522] FAT-fs (loop3): Directory bread(block 15) failed 18:30:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240006804f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 18:30:57 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200), 0x0, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) [ 675.500504][T12542] FAT-fs (loop3): Directory bread(block 6) failed 18:30:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240006c04f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 18:30:57 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x0, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240007404f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 675.670290][T12549] FAT-fs (loop3): Directory bread(block 6) failed [ 675.863691][T12560] FAT-fs (loop3): Directory bread(block 6) failed [ 675.900995][ T34] audit: type=1804 audit(1604601057.494:853): pid=12562 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1557/file1/file0" dev="loop5" ino=362 res=1 errno=0 18:30:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240007804f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:57 executing program 4: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:30:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 18:30:57 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x0, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 676.181080][T12570] FAT-fs (loop3): Directory bread(block 6) failed 18:30:57 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x0, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 676.266063][ T34] audit: type=1804 audit(1604601057.864:854): pid=12578 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="file0" dev="sda1" ino=16379 res=1 errno=0 18:30:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240007a04f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 676.446614][T12587] FAT-fs (loop3): Directory bread(block 6) failed 18:30:58 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200), 0x0, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:30:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240159004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:58 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x0, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 676.828483][T12596] FAT-fs (loop3): Directory bread(block 6) failed [ 676.851937][T12596] FAT-fs (loop3): Directory bread(block 7) failed [ 676.858381][T12596] FAT-fs (loop3): Directory bread(block 8) failed [ 676.875246][T12596] FAT-fs (loop3): Directory bread(block 9) failed [ 676.907807][T12596] FAT-fs (loop3): Directory bread(block 10) failed [ 676.930646][T12596] FAT-fs (loop3): Directory bread(block 11) failed [ 676.965248][ T34] audit: type=1804 audit(1604601058.564:855): pid=12600 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1558/file0" dev="sda1" ino=16364 res=1 errno=0 [ 677.001143][T12596] FAT-fs (loop3): Directory bread(block 12) failed 18:30:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 677.080124][T12596] FAT-fs (loop3): Directory bread(block 13) failed [ 677.122400][T12596] FAT-fs (loop3): Directory bread(block 14) failed [ 677.129532][T12596] FAT-fs (loop3): Directory bread(block 15) failed 18:30:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240019e04f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 677.173873][T12605] squashfs: Unknown parameter '%' 18:30:58 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x0, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:58 executing program 4: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) [ 677.437642][T12615] FAT-fs (loop3): Directory bread(block 6) failed [ 677.463883][ T34] audit: type=1804 audit(1604601059.064:856): pid=12618 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="file0" dev="sda1" ino=16377 res=1 errno=0 [ 677.471879][T12615] FAT-fs (loop3): Directory bread(block 7) failed 18:30:59 executing program 2: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)=';\'', 0x2) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:30:59 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x0, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 677.589291][T12615] FAT-fs (loop3): Directory bread(block 8) failed [ 677.623070][ T34] audit: type=1804 audit(1604601059.224:857): pid=12621 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir097691008/syzkaller.48mdpk/1848/file1/file0" dev="loop2" ino=364 res=1 errno=0 [ 677.628376][T12615] FAT-fs (loop3): Directory bread(block 9) failed [ 677.710727][T12615] FAT-fs (loop3): Directory bread(block 10) failed [ 677.806732][T12615] FAT-fs (loop3): Directory bread(block 11) failed [ 677.844816][T12615] FAT-fs (loop3): Directory bread(block 12) failed [ 677.851429][T12615] FAT-fs (loop3): Directory bread(block 13) failed [ 677.858130][T12615] FAT-fs (loop3): Directory bread(block 14) failed [ 677.865076][T12615] FAT-fs (loop3): Directory bread(block 15) failed 18:30:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740002800100024026a104f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:59 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200), 0x0, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:30:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740002800100024026a204f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:30:59 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x0, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:30:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740002800100024000ca04f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 678.489172][T12637] FAT-fs (loop3): Directory bread(block 6) failed 18:31:00 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740002800100024000cc04f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 678.580578][ T34] audit: type=1804 audit(1604601060.174:858): pid=12640 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1559/file1/file0" dev="loop5" ino=366 res=1 errno=0 18:31:00 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:31:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:31:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:31:00 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 678.833376][T12651] FAT-fs (loop3): Directory bread(block 6) failed 18:31:00 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:31:00 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740002800100024000ce04f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:31:00 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 679.127904][T12664] FAT-fs (loop3): Directory bread(block 6) failed 18:31:00 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be8835", 0x5c, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:31:00 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740002800100024003ee04f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:31:00 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:31:01 executing program 4: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200), 0x0, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) [ 679.455553][T12672] FAT-fs (loop3): Directory bread(block 6) failed 18:31:01 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:31:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 679.490654][ T34] audit: type=1804 audit(1604601061.084:859): pid=12676 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="file0" dev="sda1" ino=16375 res=1 errno=0 [ 679.494960][T12672] FAT-fs (loop3): Directory bread(block 7) failed [ 679.516411][T12672] FAT-fs (loop3): Directory bread(block 8) failed [ 679.522871][T12672] FAT-fs (loop3): Directory bread(block 9) failed [ 679.578308][T12672] FAT-fs (loop3): Directory bread(block 10) failed [ 679.601832][T12672] FAT-fs (loop3): Directory bread(block 11) failed [ 679.602768][ T34] audit: type=1804 audit(1604601061.204:860): pid=12679 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1560/file1/file0" dev="loop5" ino=368 res=1 errno=0 [ 679.616231][T12672] FAT-fs (loop3): Directory bread(block 12) failed [ 679.742631][T12672] FAT-fs (loop3): Directory bread(block 13) failed [ 679.808268][T12672] FAT-fs (loop3): Directory bread(block 14) failed [ 679.884767][T12672] FAT-fs (loop3): Directory bread(block 15) failed 18:31:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:31:01 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:31:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740002800100024000ef04f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:31:01 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:31:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740002800100024003f604f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 680.239966][T12698] FAT-fs (loop3): Directory bread(block 6) failed 18:31:02 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be8835", 0x5c, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) [ 680.391366][T12705] FAT-fs (loop3): Directory bread(block 6) failed [ 680.409413][T12705] FAT-fs (loop3): Directory bread(block 7) failed [ 680.441686][T12705] FAT-fs (loop3): Directory bread(block 8) failed [ 680.448251][T12705] FAT-fs (loop3): Directory bread(block 9) failed [ 680.454829][T12705] FAT-fs (loop3): Directory bread(block 10) failed [ 680.461801][T12705] FAT-fs (loop3): Directory bread(block 11) failed [ 680.468443][T12705] FAT-fs (loop3): Directory bread(block 12) failed [ 680.475145][T12705] FAT-fs (loop3): Directory bread(block 13) failed [ 680.481984][T12705] FAT-fs (loop3): Directory bread(block 14) failed [ 680.488565][T12705] FAT-fs (loop3): Directory bread(block 15) failed 18:31:02 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740002800100024003f704f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:31:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x2, 0xde, 0x4, 0x800], 0x4, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:31:02 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 680.633738][T12712] FAT-fs (loop3): Directory bread(block 6) failed [ 680.641240][ T34] audit: type=1804 audit(1604601062.234:861): pid=12711 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1561/file1/file0" dev="loop5" ino=370 res=1 errno=0 [ 680.654619][T12712] FAT-fs (loop3): Directory bread(block 7) failed 18:31:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 680.785015][T12712] FAT-fs (loop3): Directory bread(block 8) failed [ 680.855933][T12712] FAT-fs (loop3): Directory bread(block 9) failed [ 680.937434][T12712] FAT-fs (loop3): Directory bread(block 10) failed [ 680.985572][T12712] FAT-fs (loop3): Directory bread(block 11) failed [ 681.020665][T12712] FAT-fs (loop3): Directory bread(block 12) failed [ 681.039249][T12712] FAT-fs (loop3): Directory bread(block 13) failed [ 681.057317][T12712] FAT-fs (loop3): Directory bread(block 14) failed 18:31:02 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 681.112718][T12712] FAT-fs (loop3): Directory bread(block 15) failed 18:31:02 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000280010002400fff04f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:31:02 executing program 2: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)=';\'', 0x2) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) [ 681.320998][T12732] FAT-fs (loop3): Directory bread(block 6) failed [ 681.332900][T12732] FAT-fs (loop3): Directory bread(block 7) failed [ 681.349602][T12732] FAT-fs (loop3): Directory bread(block 8) failed [ 681.377491][T12732] FAT-fs (loop3): Directory bread(block 9) failed 18:31:03 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be8835", 0x5c, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) [ 681.408311][ T34] audit: type=1804 audit(1604601063.004:862): pid=12734 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir097691008/syzkaller.48mdpk/1853/file1/file0" dev="loop2" ino=372 res=1 errno=0 [ 681.437370][T12732] FAT-fs (loop3): Directory bread(block 10) failed [ 681.461604][T12732] FAT-fs (loop3): Directory bread(block 11) failed [ 681.468143][T12732] FAT-fs (loop3): Directory bread(block 12) failed 18:31:03 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 681.597460][ T34] audit: type=1804 audit(1604601063.134:863): pid=12741 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1562/file0" dev="sda1" ino=15938 res=1 errno=0 [ 681.671936][T12732] FAT-fs (loop3): Directory bread(block 13) failed [ 681.684888][T12732] FAT-fs (loop3): Directory bread(block 14) failed [ 681.692208][T12732] FAT-fs (loop3): Directory bread(block 15) failed 18:31:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x2, 0xde, 0x4, 0x800], 0x4, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 681.746919][T12744] squashfs: Unknown parameter '%' 18:31:03 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000200f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:31:03 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 682.039941][T12753] FAT-fs (loop3): Directory bread(block 6) failed 18:31:03 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240002f00f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:31:03 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:31:03 executing program 4: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be8835", 0x5c, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:31:03 executing program 2: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)=';\'', 0x2) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) [ 682.356753][T12761] FAT-fs (loop3): Directory bread(block 6) failed 18:31:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240004700f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 682.480732][ T34] audit: type=1804 audit(1604601064.074:864): pid=12767 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="file0" dev="sda1" ino=16161 res=1 errno=0 18:31:04 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b81", 0x8a, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:31:04 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 682.590778][ T34] audit: type=1804 audit(1604601064.184:865): pid=12770 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir097691008/syzkaller.48mdpk/1854/file1/file0" dev="loop2" ino=374 res=1 errno=0 [ 682.656041][T12776] FAT-fs (loop3): Directory bread(block 6) failed 18:31:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240009100f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 682.860440][T12787] FAT-fs (loop3): Directory bread(block 6) failed [ 682.893490][ T34] audit: type=1804 audit(1604601064.494:866): pid=12786 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1563/file1/file0" dev="loop5" ino=376 res=1 errno=0 18:31:04 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:31:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240009200f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 683.217568][T12797] FAT-fs (loop3): Directory bread(block 6) failed 18:31:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240001001f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:31:05 executing program 2: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240004700f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:31:05 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 683.510725][T12802] FAT-fs (loop3): Directory bread(block 6) failed 18:31:05 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740002800100024000a001f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 683.642124][T12810] FAT-fs (loop2): Directory bread(block 6) failed 18:31:05 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b81", 0x8a, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:31:05 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:31:05 executing program 4: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:31:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:31:05 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740002800100024000a401f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 683.912645][T12823] FAT-fs (loop3): Directory bread(block 6) failed [ 683.928602][ T34] audit: type=1804 audit(1604601065.524:867): pid=12824 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1564/file1/file0" dev="loop5" ino=378 res=1 errno=0 18:31:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x2, 0xde, 0x4, 0x800], 0x4, 0xc00, 0x0, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305839, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7, 0x2, 0x0, r2}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 684.060416][T12832] FAT-fs (loop3): Directory bread(block 6) failed 18:31:05 executing program 4: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:31:05 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 684.213429][ T34] audit: type=1804 audit(1604601065.814:868): pid=12840 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="file0" dev="sda1" ino=16051 res=1 errno=0 18:31:05 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000003f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 684.386264][T12848] FAT-fs (loop3): Directory bread(block 6) failed 18:31:06 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240003203f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:31:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x2, 0xde, 0x4, 0x800], 0x4, 0xc00}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305839, &(0x7f0000000000)) write$cgroup_int(r1, &(0x7f0000000040), 0x12) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:31:06 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:31:06 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b81", 0x8a, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) [ 684.731561][T12853] FAT-fs (loop3): Directory bread(block 6) failed 18:31:06 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240003303f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 684.914888][ T34] audit: type=1804 audit(1604601066.514:869): pid=12864 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1565/file1/file0" dev="loop5" ino=380 res=1 errno=0 [ 684.979243][T12868] FAT-fs (loop3): Directory bread(block 6) failed 18:31:06 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:31:06 executing program 4: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b81", 0x8a, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:31:06 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240003403f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 685.245388][T12875] FAT-fs (loop3): Directory bread(block 6) failed 18:31:06 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 685.314273][ T34] audit: type=1804 audit(1604601066.914:870): pid=12878 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="file0" dev="sda1" ino=16116 res=1 errno=0 18:31:07 executing program 2: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:31:07 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240003503f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:31:07 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 685.610180][T12888] FAT-fs (loop3): Directory bread(block 6) failed 18:31:07 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e", 0xa1, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:31:07 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240003603f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:31:07 executing program 2: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 685.916768][ T34] audit: type=1804 audit(1604601067.514:871): pid=12895 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1566/file1/file0" dev="loop5" ino=382 res=1 errno=0 [ 685.956999][T12899] FAT-fs (loop3): Directory bread(block 6) failed 18:31:07 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240003703f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:31:07 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 686.290868][T12910] FAT-fs (loop3): Directory bread(block 6) failed 18:31:08 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000204f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:31:08 executing program 4: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:31:08 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:31:08 executing program 2: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:31:08 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 686.575720][T12916] FAT-fs (loop3): Directory bread(block 6) failed 18:31:08 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e", 0xa1, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:31:08 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000304f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:31:08 executing program 4: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e", 0xa1, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) [ 686.845400][ T34] audit: type=1804 audit(1604601068.444:872): pid=12928 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1567/file1/file0" dev="loop5" ino=384 res=1 errno=0 18:31:08 executing program 2: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e", 0xa1, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) [ 686.963532][ T34] audit: type=1804 audit(1604601068.524:873): pid=12933 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="file0" dev="sda1" ino=16130 res=1 errno=0 [ 686.993342][T12935] FAT-fs (loop3): Directory bread(block 6) failed 18:31:08 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:31:08 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000404f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 687.216922][ T34] audit: type=1804 audit(1604601068.774:874): pid=12942 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir097691008/syzkaller.48mdpk/1862/file1/file0" dev="loop2" ino=386 res=1 errno=0 [ 687.331495][T12951] FAT-fs (loop3): Directory bread(block 6) failed 18:31:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000504f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:31:09 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:31:09 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e", 0xa1, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) [ 687.726811][T12958] FAT-fs (loop3): Directory bread(block 6) failed 18:31:09 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:31:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000604f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:31:09 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 687.940445][ T34] audit: type=1804 audit(1604601069.534:875): pid=12964 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1568/file1/file0" dev="loop5" ino=388 res=1 errno=0 18:31:09 executing program 2: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b81", 0x8a, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) [ 688.002887][T12969] FAT-fs (loop3): Directory bread(block 6) failed 18:31:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:31:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000704f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:31:09 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 688.235904][ T34] audit: type=1804 audit(1604601069.834:876): pid=12978 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir097691008/syzkaller.48mdpk/1863/file1/file0" dev="loop2" ino=390 res=1 errno=0 18:31:10 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 688.423843][T12988] FAT-fs (loop3): Directory bread(block 6) failed 18:31:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000804f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:31:10 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:31:10 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca", 0xad, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:31:10 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 688.750181][T12999] FAT-fs (loop3): Directory bread(block 6) failed 18:31:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000904f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:31:10 executing program 4: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(0xffffffffffffffff, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:31:10 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 688.902030][ T34] audit: type=1804 audit(1604601070.505:877): pid=13006 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1569/file1/file0" dev="loop5" ino=392 res=1 errno=0 [ 689.017573][T13013] FAT-fs (loop3): Directory bread(block 6) failed [ 689.132226][ T34] audit: type=1804 audit(1604601070.595:878): pid=13012 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="file0" dev="sda1" ino=16259 res=1 errno=0 18:31:10 executing program 2: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:31:10 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:31:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000a04f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:31:10 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:31:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000b04f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 689.413564][T13027] FAT-fs (loop3): Directory bread(block 6) failed 18:31:11 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:31:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x10, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x2, 0xde, 0x4, 0x800], 0x4, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 689.629869][T13036] FAT-fs (loop3): Directory bread(block 6) failed 18:31:11 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca", 0xad, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:31:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000c04f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:31:11 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 689.806938][T13045] FAT-fs (loop3): Directory bread(block 6) failed 18:31:11 executing program 4: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(0xffffffffffffffff, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:31:11 executing program 2: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca", 0xad, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:31:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000d04f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:31:11 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, 0x0) [ 689.923679][ T34] audit: type=1804 audit(1604601071.525:879): pid=13050 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1570/file1/file0" dev="loop5" ino=394 res=1 errno=0 [ 690.122379][ T34] audit: type=1804 audit(1604601071.625:880): pid=13055 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir097691008/syzkaller.48mdpk/1866/file1/file0" dev="loop2" ino=396 res=1 errno=0 18:31:11 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, 0x0) [ 690.174281][T13064] FAT-fs (loop3): Directory bread(block 6) failed 18:31:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000e04f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:31:12 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, 0x0) 18:31:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000f04f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 690.476571][T13076] FAT-fs (loop3): Directory bread(block 6) failed 18:31:12 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}}) 18:31:12 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca", 0xad, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) [ 690.682618][T13084] FAT-fs (loop3): Directory bread(block 6) failed 18:31:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240001004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:31:12 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}}) [ 690.937813][ T34] kauditd_printk_skb: 1 callbacks suppressed [ 690.937827][ T34] audit: type=1804 audit(1604601072.535:882): pid=13093 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1571/file1/file0" dev="loop5" ino=398 res=1 errno=0 [ 691.047803][T13096] FAT-fs (loop3): Directory bread(block 6) failed 18:31:12 executing program 4: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(0xffffffffffffffff, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:31:12 executing program 2: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca", 0xad, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:31:12 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}}) 18:31:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240001104f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 691.225623][ T34] audit: type=1804 audit(1604601072.825:883): pid=13103 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir097691008/syzkaller.48mdpk/1867/file1/file0" dev="loop2" ino=400 res=1 errno=0 18:31:12 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}}) [ 691.421999][T13110] FAT-fs (loop3): Directory bread(block 6) failed 18:31:13 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240001204f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:31:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x2, 0xde, 0x4, 0x800], 0x4, 0xc00, 0x0, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305839, &(0x7f0000000000)) write$cgroup_int(r2, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7, 0x2, 0x0, r2}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 691.573457][ T34] audit: type=1804 audit(1604601073.175:884): pid=13116 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="file0" dev="sda1" ino=16375 res=1 errno=0 [ 691.690992][T13118] FAT-fs (loop3): Directory bread(block 6) failed 18:31:13 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed214", 0xb3, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:31:13 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240002504f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 692.029350][ T34] audit: type=1804 audit(1604601073.625:885): pid=13130 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1572/file1/file0" dev="loop5" ino=402 res=1 errno=0 18:31:13 executing program 0: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca", 0xad, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) [ 692.144877][T13132] FAT-fs (loop3): Directory bread(block 6) failed 18:31:13 executing program 2: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca", 0xad, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) [ 692.203936][ T34] audit: type=1804 audit(1604601073.805:886): pid=13138 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="file0" dev="sda1" ino=16366 res=1 errno=0 18:31:13 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240004804f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:31:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x2, 0xde, 0x4, 0x800], 0x4, 0xc00, 0x0, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305839, &(0x7f0000000000)) write$cgroup_int(r2, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7, 0x2, 0x0, r2}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 692.448619][T13145] FAT-fs (loop3): Directory bread(block 6) failed [ 692.484624][ T34] audit: type=1804 audit(1604601074.085:887): pid=13144 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir097691008/syzkaller.48mdpk/1868/file1/file0" dev="loop2" ino=404 res=1 errno=0 18:31:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240004c04f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:31:14 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed214", 0xb3, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) [ 692.887294][T13156] FAT-fs (loop3): Directory bread(block 6) failed 18:31:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240005c04f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 693.059946][ T34] audit: type=1804 audit(1604601074.655:888): pid=13161 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1573/file1/file0" dev="loop5" ino=406 res=1 errno=0 [ 693.172311][T13166] FAT-fs (loop3): Directory bread(block 6) failed 18:31:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240006004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:31:15 executing program 2: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca", 0xad, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:31:15 executing program 0: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed214", 0xb3, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) [ 693.500018][T13174] FAT-fs (loop3): Directory bread(block 6) failed 18:31:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x2, 0xde, 0x4, 0x800], 0x4, 0xc00, 0x0, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305839, &(0x7f0000000000)) write$cgroup_int(r2, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7, 0x2, 0x0, r2}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:31:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240006804f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 693.644060][ T34] audit: type=1804 audit(1604601075.245:889): pid=13177 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="file0" dev="sda1" ino=16377 res=1 errno=0 [ 693.726312][ T34] audit: type=1804 audit(1604601075.325:890): pid=13182 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir097691008/syzkaller.48mdpk/1869/file1/file0" dev="loop2" ino=408 res=1 errno=0 [ 693.817344][T13187] FAT-fs (loop3): Directory bread(block 6) failed 18:31:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240006c04f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:31:15 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed214", 0xb3, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) [ 694.005045][T13194] FAT-fs (loop3): Directory bread(block 6) failed [ 694.148133][ T34] audit: type=1804 audit(1604601075.745:891): pid=13199 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1574/file1/file0" dev="loop5" ino=410 res=1 errno=0 18:31:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240007404f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 694.360208][T13205] FAT-fs (loop3): Directory bread(block 6) failed 18:31:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240007804f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:31:16 executing program 4: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed214", 0xb3, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:31:16 executing program 2: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca", 0xad, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) [ 694.696617][T13212] FAT-fs (loop3): Directory bread(block 6) failed 18:31:16 executing program 0: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:31:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240007a04f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:31:16 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c9", 0xb6, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) [ 695.025106][T13224] FAT-fs (loop3): Directory bread(block 6) failed 18:31:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740002800100024000ca04f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 695.376283][T13234] FAT-fs (loop3): Directory bread(block 6) failed 18:31:17 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740002800100024000cc04f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 695.674528][T13244] FAT-fs (loop3): Directory bread(block 6) failed 18:31:17 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740002800100024000ce04f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:31:17 executing program 4: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740002800100024000ca04f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:31:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x2, 0xde, 0x4, 0x800], 0x4, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 696.010082][T13249] FAT-fs (loop3): Directory bread(block 6) failed 18:31:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x2, 0xde, 0x4, 0x800], 0x4, 0xc00, 0x0, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305839, &(0x7f0000000000)) write$cgroup_int(r2, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7, 0x2, 0x0, r2}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) 18:31:17 executing program 4: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740002800100024000ca04f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:31:17 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740002800100024000ef04f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:31:17 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c9", 0xb6, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:31:17 executing program 4: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740002800100024000ca04f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 696.298195][T13263] FAT-fs (loop3): Directory bread(block 6) failed 18:31:17 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000005f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 696.419888][ T34] kauditd_printk_skb: 4 callbacks suppressed [ 696.419902][ T34] audit: type=1804 audit(1604601078.015:896): pid=13270 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1576/file1/file0" dev="loop5" ino=416 res=1 errno=0 18:31:18 executing program 0: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c9", 0xb6, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:31:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x2, 0xde, 0x4, 0x800], 0x4, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 696.583555][T13276] FAT-fs (loop3): Directory bread(block 6) failed 18:31:18 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000006f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 696.666489][ T34] audit: type=1804 audit(1604601078.265:897): pid=13282 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="file0" dev="sda1" ino=16381 res=1 errno=0 [ 696.849383][T13288] FAT-fs (loop3): Directory bread(block 6) failed 18:31:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x2, 0xde, 0x4, 0x800], 0x4, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:31:18 executing program 2 (fault-call:7 fault-nth:0): mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:31:18 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000007f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:31:18 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c9", 0xb6, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) [ 697.192793][T13296] FAULT_INJECTION: forcing a failure. [ 697.192793][T13296] name failslab, interval 1, probability 0, space 0, times 0 [ 697.243124][T13296] CPU: 1 PID: 13296 Comm: syz-executor.2 Not tainted 5.10.0-rc2-syzkaller #0 [ 697.251918][T13296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 697.261960][T13296] Call Trace: [ 697.265248][T13296] dump_stack+0x116/0x15d [ 697.269647][T13296] should_fail+0x231/0x240 [ 697.274127][T13296] __should_failslab+0x81/0x90 [ 697.278887][T13296] should_failslab+0x5/0x20 [ 697.283454][T13296] slab_pre_alloc_hook+0x20/0xb0 [ 697.288384][T13296] __kmalloc+0x73/0x2c0 [ 697.292536][T13296] ? tomoyo_realpath_from_path+0x98/0x3b0 [ 697.298245][T13296] ? __rcu_read_unlock+0x51/0x220 [ 697.303323][T13296] tomoyo_realpath_from_path+0x98/0x3b0 [ 697.308863][T13296] tomoyo_path_number_perm+0xc1/0x2d0 [ 697.314332][T13296] ? __rcu_read_unlock+0x51/0x220 [ 697.319391][T13296] tomoyo_file_ioctl+0x1c/0x20 [ 697.324148][T13296] security_file_ioctl+0x45/0x90 [ 697.329139][T13296] __se_sys_ioctl+0x48/0x140 [ 697.333836][T13296] __x64_sys_ioctl+0x3f/0x50 [ 697.338458][T13296] do_syscall_64+0x39/0x80 [ 697.342943][T13296] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 697.348824][T13296] RIP: 0033:0x45deb9 [ 697.352740][T13296] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 697.372341][T13296] RSP: 002b:00007fbbeeab0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 697.380807][T13296] RAX: ffffffffffffffda RBX: 000000000001a8c0 RCX: 000000000045deb9 [ 697.388860][T13296] RDX: 00000000200a0fe0 RSI: 00000000c028aa03 RDI: 0000000000000003 [ 697.396967][T13296] RBP: 00007fbbeeab0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 697.404937][T13296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 697.412951][T13296] R13: 00007ffef62b074f R14: 00007fbbeeab19c0 R15: 000000000118bf2c [ 697.453673][T13298] FAT-fs (loop3): Directory bread(block 6) failed 18:31:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x2, 0xde, 0x4, 0x800], 0x4, 0xc00, 0x0, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x1, 0x6, 0x7, 0x9, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x9, 0xc3}, 0x10}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:31:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000009f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:31:19 executing program 0: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c9", 0xb6, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) [ 697.618093][ T34] audit: type=1804 audit(1604601079.215:898): pid=13307 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1577/file1/file0" dev="loop5" ino=418 res=1 errno=0 [ 697.692725][T13296] ERROR: Out of memory at tomoyo_realpath_from_path. [ 697.722312][T13312] FAT-fs (loop3): Directory bread(block 6) failed 18:31:19 executing program 4 (fault-call:10 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:31:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740002800100024000000af801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:31:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 697.864530][ T34] audit: type=1804 audit(1604601079.455:899): pid=13320 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="file0" dev="sda1" ino=16371 res=1 errno=0 [ 697.940696][T13324] FAT-fs (loop3): Directory bread(block 6) failed 18:31:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740002800100024000000bf801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:31:19 executing program 2: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 698.258324][T13334] FAT-fs (loop3): Directory bread(block 6) failed 18:31:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740002800100024000000cf801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:31:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740002800100024000000df801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:31:20 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951", 0xb7, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:31:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0x2, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 698.634588][T13344] FAT-fs (loop3): Directory bread(block 6) failed [ 698.657159][ T34] audit: type=1804 audit(1604601080.255:900): pid=13349 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1578/file1/file0" dev="loop5" ino=420 res=1 errno=0 18:31:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740002800100024000000ef801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:31:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0x10, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:31:20 executing program 0 (fault-call:8 fault-nth:0): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) 18:31:20 executing program 2: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0x2, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 698.916981][T13361] FAT-fs (loop3): Directory bread(block 6) failed 18:31:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) 18:31:20 executing program 2: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0x10, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 698.993633][T13368] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 699.017629][T13368] 8021q: adding VLAN 0 to HW filter on device bond5 18:31:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0x4c01, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:31:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740002800100024000000ff801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 699.113582][T13407] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 18:31:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0x541b, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:31:20 executing program 2: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0x4c01, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 699.199920][T13415] FAT-fs (loop3): Directory bread(block 6) failed [ 699.246327][T13407] 8021q: adding VLAN 0 to HW filter on device bond6 [ 699.337448][T13413] bond6: (slave vcan2): The slave device specified does not support setting the MAC address [ 699.398140][T13413] bond6: (slave vcan2): Error -22 calling dev_set_mtu 18:31:21 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951", 0xb7, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:31:21 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000011f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:31:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0x5421, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:31:21 executing program 2: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0x541b, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:31:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) 18:31:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0x5450, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:31:21 executing program 2: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0x5421, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 699.535736][T13471] FAT-fs (loop3): Directory bread(block 6) failed [ 699.591536][T13477] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 699.620898][T13477] 8021q: adding VLAN 0 to HW filter on device bond7 [ 699.640628][T13477] bond7: (slave vcan2): The slave device specified does not support setting the MAC address [ 699.652322][T13477] bond7: (slave vcan2): Error -22 calling dev_set_mtu 18:31:21 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000012f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:31:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0x5451, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 699.691570][ T34] audit: type=1804 audit(1604601081.285:901): pid=13514 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1579/file1/file0" dev="loop5" ino=422 res=1 errno=0 18:31:21 executing program 2: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0x5450, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 699.845982][T13533] FAT-fs (loop3): Directory bread(block 6) failed 18:31:21 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240001318f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:31:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0x5452, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 699.892747][T13522] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 699.954663][T13522] bond7: (slave vcan2): The slave device specified does not support setting the MAC address [ 700.043607][T13522] bond7: (slave vcan2): Error -22 calling dev_set_mtu [ 700.110684][T13550] FAT-fs (loop3): Directory bread(block 6) failed 18:31:22 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951", 0xb7, 0x20}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:31:22 executing program 2: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0x5451, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:31:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0x5460, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:31:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000419f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:31:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) 18:31:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0x6364, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 700.498517][T13564] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 700.540149][T13561] FAT-fs (loop3): Directory bread(block 6) failed [ 700.559640][T13564] 8021q: adding VLAN 0 to HW filter on device bond8 18:31:22 executing program 2: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0x5452, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 700.594751][T13570] bond8: (slave vcan2): The slave device specified does not support setting the MAC address [ 700.632725][T13570] bond8: (slave vcan2): Error -22 calling dev_set_mtu 18:31:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740002800100024000041af801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 700.648095][ T34] audit: type=1804 audit(1604601082.245:902): pid=13608 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1580/file1/file0" dev="loop5" ino=424 res=1 errno=0 18:31:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0x890b, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:31:22 executing program 2: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0x5460, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 700.755850][T13570] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 700.794404][T13570] bond8: (slave vcan2): The slave device specified does not support setting the MAC address 18:31:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0x8913, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:31:22 executing program 2: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0x6364, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 700.854185][T13627] FAT-fs (loop3): Directory bread(block 6) failed [ 700.879549][T13570] bond8: (slave vcan2): Error -22 calling dev_set_mtu 18:31:23 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:31:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) 18:31:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740002800100024000041bf801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:31:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0x8914, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:31:23 executing program 2: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0x8913, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 701.467837][T13649] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 701.488194][T13649] 8021q: adding VLAN 0 to HW filter on device bond9 18:31:23 executing program 2: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0x8914, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 701.531846][T13684] FAT-fs (loop3): Directory bread(block 6) failed [ 701.564993][T13687] bond9: (slave vcan2): The slave device specified does not support setting the MAC address 18:31:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0x8933, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:31:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740002800100024000041cf801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 701.613424][ T34] audit: type=1804 audit(1604601083.215:903): pid=13695 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1581/file1/file0" dev="loop5" ino=426 res=1 errno=0 [ 701.626859][T13687] bond9: (slave vcan2): Error -22 calling dev_set_mtu 18:31:23 executing program 2: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0x8933, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:31:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0x400448c9, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:31:23 executing program 2: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0x400448c9, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 701.865207][T13712] FAT-fs (loop3): Directory bread(block 6) failed [ 701.912780][T13687] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 18:31:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740002800100024000041df801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 701.978974][T13687] bond9: (slave vcan2): The slave device specified does not support setting the MAC address [ 702.115562][T13687] bond9: (slave vcan2): Error -22 calling dev_set_mtu [ 702.160071][T13731] FAT-fs (loop3): Directory bread(block 6) failed 18:31:24 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:31:24 executing program 2: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0x400448dd, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:31:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0x400448dd, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:31:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) 18:31:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740002800100024000041ef801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 702.474061][T13741] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 702.534542][T13742] FAT-fs (loop3): Directory bread(block 6) failed [ 702.567872][T13741] 8021q: adding VLAN 0 to HW filter on device bond10 18:31:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0x400454ca, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 702.605689][ T34] audit: type=1804 audit(1604601084.205:904): pid=13785 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1582/file1/file0" dev="loop5" ino=428 res=1 errno=0 18:31:24 executing program 2: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0x400454ca, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:31:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740002800100024000041ff801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 702.663430][T13750] bond10: (slave vcan2): The slave device specified does not support setting the MAC address [ 702.699881][T13750] bond10: (slave vcan2): Error -22 calling dev_set_mtu 18:31:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0x40049409, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:31:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000020f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 702.810427][T13798] FAT-fs (loop3): Directory bread(block 6) failed 18:31:24 executing program 2: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0x40049409, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 702.903995][T13750] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 18:31:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0x40186366, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 702.946976][T13750] bond10: (slave vcan2): The slave device specified does not support setting the MAC address [ 702.986562][T13750] bond10: (slave vcan2): Error -22 calling dev_set_mtu [ 703.063967][T13816] FAT-fs (loop3): Directory bread(block 6) failed 18:31:24 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) write$9p(r0, &(0x7f0000001400)="3b27a4b4", 0x4) sendfile(r0, r1, 0x0, 0x1c500) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@generic={0x3, 0xffff, 0x2}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000140)='squashfs\x00', &(0x7f0000000180)='./file1\x00', 0xab6b, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9b863f5e485d155b634bd78479c32f29a892aa20065661880c158ef60d", 0x1d, 0xf1}, {&(0x7f0000000200)="7752130dcbab40364d525f1c272e15057b5d60e8815ebbc4b315b91675e795165ce1003050316049225a4bc21b878070bb93f3c3fed456f368c03870d7be3cfeaf39f666c62a29728c4d92056a2125c58da80076a53c0c8ae1be88357660c1690562f331f86a2047969f584b988fbceec8b0bb8349f463334ddb86c1e46d3f1b29cb4c7a994894567b810114874aa5f5ba406fa3a0609b3c0c3b6c5260b8c1210e8c189a6be20bd62b318e37ca27d7b4eed2144893c951ed", 0xb8}], 0x80, &(0x7f0000000480)={[{'%'}, {'cpuacct.usage_all\x00'}, {'%:\'^\xac)y]/%@{'}, {'msdos\x00'}, {'%\\'}, {}, {'cpuacct.usage_all\x00'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x32, 0x31, 0x63, 0x37, 0x66, 0x66], 0x2d, [0x38, 0x37, 0x32, 0x65], 0x2d, [0x32, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x36, 0x30], 0x2d, [0x30, 0x35, 0x38, 0x36, 0x54, 0x38, 0x33]}}}]}) 18:31:24 executing program 2: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0x40186366, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:31:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0x4020940d, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 18:31:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) 18:31:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000420f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) 18:31:25 executing program 2: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0x4020940d, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:31:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000421f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 703.429049][T13833] FAT-fs (loop3): Directory bread(block 6) failed [ 703.458742][T13831] 8021q: adding VLAN 0 to HW filter on device bond11 18:31:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0x80086301, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 703.509166][T13864] bond11: (slave vcan2): The slave device specified does not support setting the MAC address 18:31:25 executing program 2: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1007}, [@generic={0x0, 0x6, 0x7, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x0, 0x1, 0x2, 0x2, 0x2, 0xfffffffffffffff4}, @map_val={0x18, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7}, @ldst={0x2, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x0, 0xf, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0x80086301, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:31:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000064f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8']) [ 703.555179][T13877] FAT-fs (loop3): Directory bread(block 6) failed [ 703.561443][T13864] bond11: (slave vcan2): Error -22 calling dev_set_mtu [ 703.576671][ T34] audit: type=1804 audit(1604601085.175:905): pid=13880 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195322152/syzkaller.eVll6L/1583/file1/file0" dev="loop5" ino=430 res=1 errno=0 18:31:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 703.695179][T13864] bond11: (slave vcan2): The slave device specified does not support setting the MAC address 18:31:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0xc00}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@btf_id, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @exit, @map_val={0x18, 0x7}, @ldst={0x0, 0x2, 0x0, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x3f, 0x7, 0xf, 0x600, 0x9}]}, 0x0, 0x0, 0xaa, &(0x7f0000000240)=""/170, 0x1b77b606f3a8e9ba, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0x8010aa02, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) [ 703.764921][T13864] bond11: (slave vcan2): Error -22 calling dev_set_mtu [ 703.774138][T13902] FAT-fs (loop3): Directory bread(block 6) failed [ 703.899865][T13880] ================================================================== [ 703.907997][T13880] BUG: KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers [ 703.916475][T13880] [ 703.918791][T13880] write to 0xffff88810ecb3190 of 8 bytes by task 13889 on cpu 0: [ 703.926589][T13880] sync_mapping_buffers+0x155/0x7d0 [ 703.931783][T13880] fat_file_fsync+0xa9/0x100 [ 703.936367][T13880] vfs_fsync_range+0x107/0x120 [ 703.941133][T13880] generic_file_write_iter+0x103/0x130 [ 703.946584][T13880] do_iter_readv_writev+0x2cb/0x360 [ 703.951772][T13880] do_iter_write+0x112/0x4b0 [ 703.956352][T13880] vfs_iter_write+0x4c/0x70 [ 703.960851][T13880] iter_file_splice_write+0x42a/0x780 [ 703.966209][T13880] direct_splice_actor+0x80/0xa0 [ 703.971138][T13880] splice_direct_to_actor+0x345/0x650 [ 703.976530][T13880] do_splice_direct+0xf5/0x170 [ 703.981281][T13880] do_sendfile+0x574/0xb70 [ 703.985686][T13880] __x64_sys_sendfile64+0xf2/0x130 [ 703.990789][T13880] do_syscall_64+0x39/0x80 [ 703.995197][T13880] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 704.001069][T13880] [ 704.003398][T13880] read to 0xffff88810ecb3190 of 8 bytes by task 13880 on cpu 1: [ 704.011018][T13880] mark_buffer_dirty_inode+0x92/0x1b0 [ 704.016380][T13880] fat_mirror_bhs+0x205/0x330 [ 704.021048][T13880] fat_ent_write+0xc2/0xd0 [ 704.025460][T13880] fat_chain_add+0x149/0x400 [ 704.030043][T13880] fat_get_block+0x429/0x5a0 [ 704.034624][T13880] __block_write_begin_int+0x48d/0xf30 [ 704.040073][T13880] block_write_begin+0x4f/0x1b0 [ 704.044921][T13880] cont_write_begin+0x429/0x600 [ 704.049765][T13880] fat_write_begin+0x61/0xf0 [ 704.054346][T13880] generic_perform_write+0x196/0x3a0 [ 704.059621][T13880] __generic_file_write_iter+0x15c/0x330 [ 704.065258][T13880] generic_file_write_iter+0x75/0x130 [ 704.070623][T13880] vfs_write+0x617/0x690 [ 704.074857][T13880] ksys_write+0xce/0x180 [ 704.079087][T13880] __x64_sys_write+0x3e/0x50 [ 704.083673][T13880] do_syscall_64+0x39/0x80 [ 704.088082][T13880] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 704.093960][T13880] [ 704.096277][T13880] Reported by Kernel Concurrency Sanitizer on: [ 704.102425][T13880] CPU: 1 PID: 13880 Comm: syz-executor.5 Not tainted 5.10.0-rc2-syzkaller #0 [ 704.111175][T13880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 704.121220][T13880] ================================================================== [ 704.129273][T13880] Kernel panic - not syncing: panic_on_warn set ... [ 704.135853][T13880] CPU: 1 PID: 13880 Comm: syz-executor.5 Not tainted 5.10.0-rc2-syzkaller #0 [ 704.144600][T13880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 704.154643][T13880] Call Trace: [ 704.157928][T13880] dump_stack+0x116/0x15d [ 704.162254][T13880] panic+0x1e7/0x5fa [ 704.166149][T13880] ? vprintk_emit+0x2f2/0x370 [ 704.170819][T13880] kcsan_report+0x67b/0x680 [ 704.175312][T13880] ? __queue_work+0x7ca/0xa90 [ 704.179987][T13880] ? kcsan_setup_watchpoint+0x46a/0x4d0 [ 704.185529][T13880] ? mark_buffer_dirty_inode+0x92/0x1b0 [ 704.191068][T13880] ? fat_mirror_bhs+0x205/0x330 [ 704.195912][T13880] ? fat_ent_write+0xc2/0xd0 [ 704.200500][T13880] ? fat_chain_add+0x149/0x400 [ 704.205259][T13880] ? fat_get_block+0x429/0x5a0 [ 704.210018][T13880] ? __block_write_begin_int+0x48d/0xf30 [ 704.215645][T13880] ? block_write_begin+0x4f/0x1b0 [ 704.220664][T13880] ? cont_write_begin+0x429/0x600 [ 704.225695][T13880] ? fat_write_begin+0x61/0xf0 [ 704.230454][T13880] ? generic_perform_write+0x196/0x3a0 [ 704.235906][T13880] ? __generic_file_write_iter+0x15c/0x330 [ 704.241704][T13880] ? generic_file_write_iter+0x75/0x130 [ 704.247238][T13880] ? vfs_write+0x617/0x690 [ 704.251643][T13880] ? ksys_write+0xce/0x180 [ 704.258566][T13880] ? __x64_sys_write+0x3e/0x50 [ 704.263495][T13880] ? do_syscall_64+0x39/0x80 [ 704.268072][T13880] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 704.274143][T13880] ? _raw_spin_unlock_irq+0x22/0x40 [ 704.279421][T13880] ? __schedule+0x39b/0x550 [ 704.283924][T13880] kcsan_setup_watchpoint+0x46a/0x4d0 [ 704.289294][T13880] mark_buffer_dirty_inode+0x92/0x1b0 [ 704.294659][T13880] ? __getblk_gfp+0x35/0x1f0 [ 704.299246][T13880] fat_mirror_bhs+0x205/0x330 [ 704.303920][T13880] fat_ent_write+0xc2/0xd0 [ 704.308331][T13880] fat_chain_add+0x149/0x400 [ 704.312916][T13880] fat_get_block+0x429/0x5a0 [ 704.317505][T13880] ? fat_block_truncate_page+0x30/0x30 [ 704.322958][T13880] __block_write_begin_int+0x48d/0xf30 [ 704.328412][T13880] ? workingset_activation+0x1b0/0x1b0 [ 704.333867][T13880] ? fat_block_truncate_page+0x30/0x30 [ 704.339407][T13880] ? wait_for_stable_page+0x7a/0xa0 [ 704.344601][T13880] ? fat_block_truncate_page+0x30/0x30 [ 704.350053][T13880] block_write_begin+0x4f/0x1b0 [ 704.354905][T13880] cont_write_begin+0x429/0x600 [ 704.359756][T13880] fat_write_begin+0x61/0xf0 [ 704.364343][T13880] ? fat_block_truncate_page+0x30/0x30 [ 704.369796][T13880] generic_perform_write+0x196/0x3a0 [ 704.375081][T13880] ? fat_write_begin+0xf0/0xf0 [ 704.379840][T13880] __generic_file_write_iter+0x15c/0x330 [ 704.385467][T13880] ? generic_write_checks+0x242/0x290 [ 704.390837][T13880] generic_file_write_iter+0x75/0x130 [ 704.396205][T13880] vfs_write+0x617/0x690 [ 704.400444][T13880] ksys_write+0xce/0x180 [ 704.404677][T13880] __x64_sys_write+0x3e/0x50 [ 704.409259][T13880] do_syscall_64+0x39/0x80 [ 704.413670][T13880] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 704.419550][T13880] RIP: 0033:0x45deb9 [ 704.423437][T13880] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 704.443033][T13880] RSP: 002b:00007fcff858dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 704.451444][T13880] RAX: ffffffffffffffda RBX: 0000000000039cc0 RCX: 000000000045deb9 [ 704.459411][T13880] RDX: 00000000ffffffc4 RSI: 00000000200000c0 RDI: 0000000000000006 [ 704.467373][T13880] RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 [ 704.475335][T13880] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 704.483300][T13880] R13: 00007ffe33fb150f R14: 00007fcff858e9c0 R15: 000000000118bf2c [ 704.491983][T13880] Kernel Offset: disabled [ 704.496313][T13880] Rebooting in 86400 seconds..