, 0x0, 0xe, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x4000, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) ioctl$FICLONE(r0, 0x40049409, r0) 16:21:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x20000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) [ 3023.102080] FAT-fs (loop3): bogus number of reserved sectors [ 3023.127577] FAT-fs (loop3): Can't find a valid FAT filesystem 16:21:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) getpid() sched_setattr(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000080)={0x40, 0xfff, 0x4, 0x7b, 0x100, 0x3f, 0xffffffff00000000, 0x2, 0x0}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000240)={r3, 0x3, 0x30, 0x1000, 0x6}, &(0x7f0000000280)=0x18) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) [ 3023.226898] FAT-fs (loop3): bogus number of reserved sectors [ 3023.247843] FAT-fs (loop3): Can't find a valid FAT filesystem 16:21:42 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000480)={[0x9, 0x1, 0x6, 0x7ff, 0x9, 0x7, 0x7f, 0x39, 0x2, 0x3f, 0x9, 0x0, 0x2, 0x1, 0x10001, 0xf8], 0x6001}) fchdir(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000380)="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", 0xfd, 0xfffffffffffffff8) r3 = semget$private(0x0, 0x0, 0x42) stat(&(0x7f0000000100)='./bus\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffff9c, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000300), &(0x7f0000000880)=0x0, &(0x7f00000008c0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000900)={0x0, 0x0, 0x0}, &(0x7f0000000940)=0xc) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000980)={{0x401, r4, r5, r6, r7, 0x40, 0x40}, 0x2, 0x2, 0x80}) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0)={r2, 0xc4, 0xd7}, &(0x7f0000000180)={'enc=', 'pkcs1', ' hash=', {'cbcmac(arc4)\x00'}}, &(0x7f0000000580)="cbdf5268a2e5de7fed5fee8d3e9d214e0c44f7c9f308cdf33bf2a4cb467b71d2097af876af2e55721e1b2b34ebd98a9b619fac85219f899cb6605b9e2df0eda3210f0353d00ef0da3f8be464c05e29e0ef2f2ddbbe1439163bcbec4116275811df6c22156d002d24f960c2f7c9f43e607f1d38abc06b08eb783a91e71b9c7094b8a2a516aae448dff46ade828e8033ae9133d597654dbce124288a2475fa33e66c658b9390a0ab678acb870d0fe36e268ce0762303846862b0bb5ec9fb74c30602c142c0", &(0x7f0000000680)="7f10d628a1b65c49856412eafcf49507287e1a1c4d28852a4f95cfddebf792395ecaf39a4482f19d0e7a0012ef2c1d1667ae24d5fff34a599f21aa9bcd892d919d0e65b28f3e146919f8fd74a0e09187edd4f6e570dcd210d7cde19bcf39890ce45d5ea113de17b4d8a7c2085bcca647a363b8a1d87eb9089e899c4a02a68ad25273bc7c1e864e681aade8f8000dfe93dc2c89e1e2235fe94203491716d9a65f39605bc13ccac31327a3e6e5720f163f32a1c7b9b47320e630b0977e9ac73a527ecfefd944490456393a39d8dac30c5eb80c417c0d495f") unlink(&(0x7f0000001e00)='./bus\x00') getpid() sched_setattr(0x0, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x40000000000003) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) [ 3024.799444] Bluetooth: hci0: command 0xfc11 tx timeout [ 3024.804842] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:21:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5418, &(0x7f00000001c0)) 16:21:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x40000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:21:43 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x2) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17cfd5fba03d1a0813c4d51aacd9303af9ebe34ce37a7251487092968f0716229c7beb2393e873da65b1ab967e63874fb998b5b0765e687aceea9dd8aa3fa152352ed4dee7c75f79f17c4d7dd0f3fd8f92a11124188a0b363d8d790b08b08aad4b308250bff4834fdeacbc3580bd25bfbf1c029a1b64aa4b2a86fead56af374b7253cd43d8c8b2814de9fb448db"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) 16:21:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) write$UHID_CREATE2(r1, &(0x7f0000000340)={0xb, 'syz0\x00', 'syz1\x00', 'syz0\x00', 0x33, 0x6, 0x2, 0x4, 0xffffffffffffffe0, 0x9, "3db0b1c0013ec1eb9c6f88ae9fa618d911dbcf7d66776fc8b8ebda985a8bd77c810b928472f574a05031c65f670a417fb25f90"}, 0x14b) clock_getres(0x5, &(0x7f0000000080)) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) 16:21:43 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000100)='./bus\x00', &(0x7f0000000180)) fchdir(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000000)=0x68) getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 16:21:43 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x3) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800003}) [ 3024.952403] FAT-fs (loop3): bogus number of reserved sectors [ 3024.979542] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3025.002268] Bluetooth: hci0: Frame reassembly failed (-84) [ 3025.061507] FAT-fs (loop3): bogus number of reserved sectors [ 3025.067716] FAT-fs (loop3): Can't find a valid FAT filesystem 16:21:43 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) alarm(0x4) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 16:21:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0xe0000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:21:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x200200, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000001880)) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) unlinkat(r2, &(0x7f00000018c0)='./file1/file0\x00', 0x200) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000001c0)=0x1) fchdir(r2) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000280)={@remote, @local, 0x0}, &(0x7f0000000340)=0xc) sendmsg(r3, &(0x7f0000000500)={&(0x7f0000000380)=@can={0x1d, r4}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000400)="95f934cc56a417bbb43a2c68d2c9bc3fca72de625cdd8d414cf51d35e7a207a8500dc7c41271aea7cd9945e98a18757777101864841413ffd078382bae18d2b4d450643a2d48390d6afff5139d6e42cfbaf9655b01c207c6f429112e4392ab82e109d3c91b831a6e6b2b62b493c2259fa48e167874d07d41731d968c", 0x7c}, {&(0x7f0000000580)="fd9746380b2292b7bbe9638733560d2f4f406b5f1584a61392c25c6752b3d80d89d5dd9f3c7f46de0da33a0b644f1fde390c20d1e101b7c5856bf914f93c30a5d253a28bce3d81e5bf353e2cce10e5e612684fd382b9a5dde42756d9fedd27e80ef6c02e9903a9339e0e906da21d41e7ca63d49215fef581fdcfd3e9444388dd2c78c0704cbce20e8c3c9c114f0d3fd92a1b2223070ff6a5ebc45c09c3902362ae44ea309c899f52b90950c68218aae3f672d8902606de14a87c07c56d75df3c610c9e463db5270a28f8c621a6a4621f83ee510f05ac1b3216653322b4992489ae01484738b0479999f1135c93773c462a", 0xf1}, {&(0x7f0000000680)="6fb77a3e1d400bac9e02e56df232a73db436a89fb5e999311d964a3fe26ffa6f00c9d5ccf642270ae34d10741687b567f9a1dfad78794a0856fc9162b183ea01f229cd355a829bda222826fded79e519fcf213f84e261e5decd0cde130dbfd773ed6638de407693b1799d43ef1e5c44bc542e247942ecc08826dc8fc52016b7753d5d7e7c02a1de04c428489c31e9734d00c2c39f6511572e3e77d730b599da92f00ab66eb585c205a570ed453c87d8a4429883abef01119746ee3addcb394c5f4c8678f996197413149932464d6cb49374900c333a7ed1929c62c12fe40c3d7cbf37ab6633f8063e4634ddfb47c221d65aac3d6e650", 0xf6}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000000480)="2e092fdbba6f4888da312dc53542b9cc08db14d1d066b1e911b45e9ac4eaf863949098ce54e9e65d4b91c4722b42b293337cf3024378c113c6d165e8565f386f30183f8472da32b2d0628ffc2a9dc92dc08356794c8a593768c17be06891b4", 0x5f}], 0x5, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], 0x10c8}, 0x40000) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) 16:21:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x7fff}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000240)={r3, 0xff, 0x1f, "6eaab2ae5635fc09c3d9a05ab92e82e973314ed2e932e4a91879937622afac"}, 0x27) creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) [ 3025.341980] FAT-fs (loop3): bogus number of reserved sectors [ 3025.348314] FAT-fs (loop3): Can't find a valid FAT filesystem 16:21:44 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') getpid() sched_setattr(0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @mcast2, 0x1}], 0x1c) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0x1, 0x17, 0x1, {0x5, './bus'}}, 0xc) creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) [ 3025.429087] FAT-fs (loop3): bogus number of reserved sectors [ 3025.449931] FAT-fs (loop3): Can't find a valid FAT filesystem 16:21:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x1fffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) [ 3025.710025] FAT-fs (loop3): bogus number of reserved sectors [ 3025.785026] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3025.853999] FAT-fs (loop3): bogus number of reserved sectors [ 3025.876428] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3027.039380] Bluetooth: hci0: command 0xfc11 tx timeout [ 3027.044833] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:21:45 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r0) keyctl$instantiate_iov(0x14, r1, &(0x7f0000000240)=[{&(0x7f00000001c0)="860ee03ed4a9c111d9c87ff47ec84b9ae0c5f146f8a3750d0de97fd26a7bd647896777e25b87afcfd302", 0x2a}, {&(0x7f0000000440)="fdff070a38c459dbb9e435bc9f5f064b22e2a520bc126de32ffd1109849454f1b71a473ae666db7a5ee77e0ed7376192c1fbd3b5b37711a66acd7ca0cc1f9abe89240348e221c39bb5e5dc006f0ddc3b8cd87414ba9986c5080299e0cbc1354dafa388d38577272e2c10aab246cad0ea857d103f624ee9ef9bc62930a11132b1b5631df6", 0x84}, {&(0x7f0000000580)="48964e02fd24e82cbff5e99de8ad390341328aacd4438c41ac07ffecfafa5cbb5afcf9c102f0627a0e6bb24abb62b5bb474df8b4e3e2018f2b9deb5beb5e4830ac7e1d81bbd7cdfad0f8c485d23b7ce92316465d51f27f9182f8ea50a6dd976c8ad105cb7edbb6583d2a182f108715419a1273f7fe21a9707f613cc47345d0ba386252fc1f2e2ba25c6b4faa839f1e87ba5a8f6e911ab4e38b652605ab25101f9641fd047ba0cc23ef2fc4b75ddd1a305f3faafefbb47c63be780bc0464bf07b835cc455004e6e39707dfc91095d869b0be5300a21427a5b122b8eb31c7e57272b17ecf5f6fa4b1026215c6257a94a1c1a00a604c6db", 0xf6}], 0x3, r1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x2) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="002e0082e0f0dcc05d442c5081acc1387243a17db49736b8746061030001000000000000b20000aa44e174"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0x4, @loopback, 0x5}}, 0x0, 0x9, 0x0, "7b1f263f92ec1a96a1f1e15a345f76d0694fe7b3c1f774ccaa206dd2851fb8990836fb5890d08033ae562b13e8f8bb5f64a31e07dccf502525db2b6f828557a0db7a11a5ac66365d3278e2c57bfb82ae"}, 0xd8) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x8) fcntl$setflags(r2, 0x2, 0x1) 16:21:45 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x7, 0x80) bind(r0, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 16:21:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x541b, &(0x7f00000001c0)) 16:21:45 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x3) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800003}) 16:21:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000340)={0x8, 0x120, 0xfa00, {0x0, {0x8, 0x80000001, "19d7f28537ee29471d3230f52b5d5c8842b26d1544d3bc3b41e06dd18408192b93377fc515a4a441da1a1d5c1f87f727e7eef4b650af5c245be63694b226039e5e36111cfbcbeb3fc622e5d70846ff41c5f9040a17d38a3cc685fd9bf9e686213b9de5aaa00c4e94c54a23d292646fbd53fe2527bbe7fb34b1ddf65ec9de1d9e086a69a7f6e5509fd8f59b7839c7896a54747735fe21b5a94ccbd1d304cfedd979d2ff0de8f374e09be590200f29f69ac9905e16f003d41c5fadaa81c99aa22c807c2b664389741a656039b92575b49d7c9078abec6feaf2258ccf114de4d7af2e24224c665529a6c2491d781d2463492a291de17474177d7d59d9a821b8fb3d", 0x8, 0x80000000, 0xe29, 0x5, 0x4, 0x7f, 0x5, 0x1}, r3}}, 0x128) getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) 16:21:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x400000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) [ 3027.182292] FAT-fs (loop3): bogus number of reserved sectors [ 3027.237822] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3027.266456] Bluetooth: hci0: Frame reassembly failed (-84) [ 3027.279124] Bluetooth: hci0: Frame reassembly failed (-84) [ 3027.327406] FAT-fs (loop3): bogus number of reserved sectors 16:21:46 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000080)=""/111) creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 16:21:46 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/status\x00', 0x0, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000240)={0x1, 0xffff, 0xfffffffffffff800, 0xffffffff, 0x6, 0x1}) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x2) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) sched_setattr(0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cachefiles\x00', 0x180, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) [ 3027.389913] FAT-fs (loop3): Can't find a valid FAT filesystem 16:21:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x6b6b6b, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:21:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000080)={0xbfd6}) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) [ 3027.730237] FAT-fs (loop3): bogus number of reserved sectors [ 3027.748360] FAT-fs (loop3): Can't find a valid FAT filesystem 16:21:46 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000000)) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 16:21:46 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800003}) [ 3027.810403] FAT-fs (loop3): bogus number of reserved sectors [ 3027.827062] FAT-fs (loop3): Can't find a valid FAT filesystem 16:21:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x1000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:21:46 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x2) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="008f073bd6f16dc1c70ed2ca5a2a4ca6c80001000000000000000000aa44e17c48d30a036d93d18e04e899507db5cb1bee22991b129b7200d961c5"], 0xfffffffffffffd7e) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000340)=""/139) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000240)={0x4, &(0x7f00000001c0)=[{}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000280)={r2, &(0x7f0000000400)=""/189}) creat(&(0x7f0000000100)='./file1\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) [ 3028.029787] FAT-fs (loop3): bogus number of reserved sectors [ 3028.084775] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3028.161267] FAT-fs (loop3): bogus number of reserved sectors [ 3028.167115] FAT-fs (loop3): Can't find a valid FAT filesystem 16:21:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x541d, &(0x7f00000001c0)) 16:21:48 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800003}) 16:21:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) r2 = perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200dfdcc05db8746061e50001000000000000000000aa44e17ceaa9577b237f42fd6a32eaf87401410026cfdbdd6d77ea853d02d52c269f75f0cbb774508a1b17bb272a4b05d8bc16617d1c4cc38a7314c402010a38a94f76f413564ba5329d518f9d6fb71da7b1e003376e93efbe"], 0x1d) r4 = perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000340)={0x1, 0x6, 0x5, 0x0, 0x0, [{r1, 0x0, 0x772fb537}, {r2, 0x0, 0x6}, {r1, 0x0, 0x10001}, {r4, 0x0, 0x4f6}, {r4, 0x0, 0x1}]}) creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) 16:21:48 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000480)) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000300)='team\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000840)={{{@in6=@mcast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f0000000940)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000980)={'team_slave_0\x00', r3}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000009c0)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000ac0)=0xe8) getsockname$packet(r0, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000e00)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1200800}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="04020000", @ANYRES16=r2, @ANYBLOB="00022abd7000fddbdf250300000008000100", @ANYRES32=r3, @ANYBLOB="0001020040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r4, @ANYBLOB="08000700000000004c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004002000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004004000000008000100", @ANYRES32=r5, @ANYBLOB="e000020040000100240001006c62685f746f5f706d617070696e67000042f88bd7c39723610300000008000400", @ANYRES32=r6, @ANYBLOB="080007000000000064000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b00000034000400ff0000010000000004000304ff0000000000030200000000000000b20100008003000207330400005a4607ffab04000038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000008000300030000000800040001000000"], 0x204}, 0x1, 0x0, 0x0, 0x4}, 0x4c000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000380)=0x1, 0x4) r7 = gettid() perf_event_open(0x0, r7, 0xffffffffffffffff, r0, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r8, 0x107, 0x1, 0x0, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 16:21:48 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x2) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c579560f3366f8407c9ceb66154ef1aeca98048c57ef5d0ae702feb3b572829f6798b4e3dc841689749be85c47a017fb5dbfd3c4f2a8471a0cc57804087e7c0cd1ca1477fc29746ea60d55ad18b3659f634df43af5cb8f50118041993afd860310e0712c7373dc6ab0597d07eb3dfeea7fbea377e06fffb7965bec92d7cf2f303f165f10ec898f6fa66ad131fc1432977c41887dbdfd32d93f60c0e459f1e7d634874dafd84b4b716e87e55760f953302c9c3405a25429813c9a309b50ebfc2b5ac5bba7843b4a7770deb316b49670988ac81a853f1bc"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) 16:21:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) [ 3029.279436] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 3029.286516] Bluetooth: hci0: command tx timeout [ 3029.346336] FAT-fs (loop3): bogus number of reserved sectors [ 3029.373274] FAT-fs (loop3): Can't find a valid FAT filesystem 16:21:48 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800003}) [ 3029.395720] Bluetooth: hci0: Frame reassembly failed (-84) [ 3029.465081] FAT-fs (loop3): bogus number of reserved sectors 16:21:48 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x2) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000280)) write$binfmt_aout(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="232e3fa49645ae3d6c8df8c5f44ad990eb06471a5832ffffbc5e3545b8ebbcf3039d4c3cc1388bdbb7fdbc407b39ae3b56daeb6c127f6f2b44ab9bcd572b5a1839c8949f1d554fb4ea7f5ae4dbe8ffdbe371a942939c0efe2878f1a3aa929c83649cb808fcdd38e8675bcc319827c4b3e40cf061c340c3fc743a5c34d7bf380524ba044a536a5d44c146604507f40709000000d66095e5162792c30639e3c86b91e49c05d83855bf80002e0000000000000000"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sched_setattr(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0), 0x106}}, 0x20) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) 16:21:48 executing program 5: r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x3) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800003}) 16:21:48 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) mq_notify(r1, &(0x7f0000000080)={0x0, 0xb, 0x5, @tid=r2}) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) [ 3029.515706] FAT-fs (loop3): Can't find a valid FAT filesystem 16:21:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x3000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:21:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) gettid() r2 = fcntl$getown(r0, 0x9) perf_event_open(0x0, r2, 0xa, 0xffffffffffffffff, 0x3) r3 = accept4$inet(r1, 0x0, &(0x7f00000001c0), 0x80000) r4 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) getpid() sched_setattr(0x0, 0x0, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) [ 3029.773311] FAT-fs (loop3): bogus number of reserved sectors [ 3029.791461] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3029.870622] FAT-fs (loop3): bogus number of reserved sectors [ 3029.876573] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3031.439402] Bluetooth: hci0: command 0xfc11 tx timeout [ 3031.440223] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:21:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x541f, &(0x7f00000001c0)) 16:21:50 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x2) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="002e0002000300c05db8746061e50001000000000000000000aa44e17c303cba9cee0cb270c5fe511b74ca2efe14faba520e07386517dacf2cf99e2b919a78373375149877c3ba51dde7f6f03e3f8f87ca6d751a08d635c9e493577b7e112681c5f11efd47"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) 16:21:50 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x80000, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2, 0x4000) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 16:21:50 executing program 5: r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x3) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800003}) 16:21:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x4000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:21:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f00000001c0)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x4640, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) [ 3031.578191] FAT-fs (loop3): bogus number of reserved sectors [ 3031.614513] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3031.686541] Bluetooth: hci0: Frame reassembly failed (-84) [ 3031.705277] FAT-fs (loop3): bogus number of reserved sectors 16:21:50 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x101000, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) [ 3031.760767] FAT-fs (loop3): Can't find a valid FAT filesystem 16:21:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x5000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:21:50 executing program 5: r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x3) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800003}) 16:21:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380)={0x0}, &(0x7f00000003c0)=0xc) getpgrp(r2) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000400)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0x0, r1, 0x0, 0x5, &(0x7f00000007c0)='vfat\x00'}, 0x30) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000ac0)) perf_event_open(0x0, 0x0, 0x8, r1, 0x3) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r4 = syz_genetlink_get_family_id$team(&(0x7f0000000340)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000b00)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000580)={{{@in, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f00000004c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000880)={{{@in6=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000500)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000980)={{{@in=@multicast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@initdev}}, &(0x7f0000000780)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000b80)={{{@in6=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@empty}}, &(0x7f0000000c80)=0xe8) getpeername$packet(r3, &(0x7f0000000cc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000d00)=0x14) accept4$packet(r1, &(0x7f0000000d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000d80)=0x14, 0x80000) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000dc0)={@broadcast, @rand_addr, 0x0}, &(0x7f0000000e00)=0xc) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000e40)={0x0, @multicast2, @multicast2}, &(0x7f0000000e80)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000f80)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000001080)=0xe8) getsockname$packet(r3, &(0x7f00000010c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001100)=0x14) getsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000005700)={@local, 0x0}, &(0x7f0000005740)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000005780)={'team0\x00', 0x0}) accept$packet(r1, &(0x7f0000005800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000005840)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000005c80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000005c40)={&(0x7f0000005880)=ANY=[@ANYBLOB="94030000", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250100000008000100", @ANYRES32=r5, @ANYBLOB="3c00020038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400f8ffffff08000100", @ANYRES32=r6, @ANYBLOB="0400020008000100", @ANYRES32=r7, @ANYBLOB="6402020040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r8, @ANYBLOB="08000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000000000100000000000400040008000600", @ANYRES32=r12, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b00000008000400fcffffff08000600", @ANYRES32=r13, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004002b00000038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000008000300030000000800040022000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000200000008000600", @ANYRES32=r14, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000100010008000600", @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="bc0002003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r17, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000800000008000600", @ANYRES32=r18, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r19], 0x394}, 0x1, 0x0, 0x0, 0x8000}, 0x44080) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) getpid() futex(&(0x7f0000000080), 0x8c, 0x80000001, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240), 0x1) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) 16:21:50 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x2) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_out(r1, 0x5462, &(0x7f00000001c0)) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = gettid() sched_setattr(r2, 0x0, 0x40) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) 16:21:50 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x7, 0x4005) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000380)={0x7, 0x0, [{0x40000007, 0x80000001, 0x7, 0x2, 0x10000, 0xff, 0x401}, {0xa, 0x4, 0x1, 0x5, 0x1b, 0x67e, 0x9}, {0xc0000007, 0xc5, 0x4, 0x3, 0x100000000, 0x4, 0x6a}, {0x8000001f, 0x0, 0x2, 0x0, 0x3f, 0x5, 0x82}, {0x80000019, 0xc082, 0x1, 0x80, 0x2, 0x9, 0x2}, {0xd, 0x0, 0x1, 0x8001, 0x4, 0x7, 0x8}, {0xd, 0x8, 0x4, 0x9, 0x8001, 0x6, 0xbc9}]}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000000c0)={0x1, 0x5, 0x10001, 0x15, 0x7, 0xffffffff, 0x79dd}) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @empty, 'veth0\x00'}}) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) fsetxattr$security_smack_entry(r2, &(0x7f0000000080)='security.SMACK64\x00', &(0x7f0000000180)='-#\x00', 0x3, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') getpid() sched_setattr(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000000)={0x10000000}) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) [ 3032.072779] FAT-fs (loop3): bogus number of reserved sectors [ 3032.078825] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3032.227075] FAT-fs (loop3): bogus number of reserved sectors [ 3032.256576] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3033.759376] Bluetooth: hci0: command 0xfc11 tx timeout [ 3033.759487] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:21:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5421, &(0x7f00000001c0)) 16:21:52 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x3) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800003}) 16:21:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x6000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:21:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) r2 = perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="157a29e5e60a77acb72f7f371bfd70da5dd24da232d9ffc02ae6a6165926f4fc5853038fcb2e37edac70f92c9635f9bb3ff0879b26c44cd05084402bca03eee29b4dcec058b9997a7bcbad3a16254b8ffa514f1be1ae30c73ea96f6693889bfc0a17329dfa166fc0ebf423d68500d1c628d2ac9c866c82d05f2594e19f8182fbb52afe8f9b809313627e9df3040bd44ea55605f023ff27e043fcda8e24e1eb669b7d23a295f0e9fc452bd477c4df16521adf545005c7", @ANYBLOB="161b0c7de7af8fd9dfe9cffc1af7cbe62c6e1a1da62c46e8cff97d6e5702d15ddb829bd70ade18de2655c77aed4c661f9577c273a7b6f1da41a2efd8fce511cac8dac1ed7762162a58e014f171bd5a10e61d4fbdbbdf0c1f594c7dc950fadf5c642beddcdc5a97d3ae06af2c7556b39f8c8b9efcc28ef2885fda7b41fb262f37d4552da42bc677be7669693b5481b6b4c7cb5244eb4a", @ANYRESDEC=r2, @ANYRESDEC=r0], 0xfffffd7f) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) 16:21:52 executing program 2: socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000500)='/dev/input/mice\x00', 0x0, 0x80) bind(r0, &(0x7f0000000080)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0xb5) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e23, 0x7f, @remote, 0x1}}}, &(0x7f0000000100)=0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000180)={r2, 0x1f, 0x5}, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r3 = creat(0x0, 0x1) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000000)=0x7, 0x4) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 16:21:52 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x2) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) creat(&(0x7f0000000100)='./file1\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) [ 3033.929473] FAT-fs (loop3): bogus number of reserved sectors [ 3033.959286] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3033.994282] Bluetooth: hci0: Frame reassembly failed (-84) [ 3034.024102] FAT-fs (loop3): bogus number of reserved sectors 16:21:52 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x7, 0x880) openat$cgroup(r0, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000340)=""/106) fchdir(r1) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000280)={0x9, 0x8, 0x1, 0x0, 0x0, [{r0, 0x0, 0x53ca}]}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x2) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c1790aebf812f9d7a68f94bd7e765040c28f704d664a19e6eec41e8ee40f9e2107be937460a79d797ae71efddbaff271ce6fea0df7cf0fe069ee2116007a5579e0b869cb678e1f7865ae7b9a566ed80b72b6415ac168f37dd98"], 0x1d) r3 = perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x3}) 16:21:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) getpid() creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) [ 3034.049969] FAT-fs (loop3): Can't find a valid FAT filesystem 16:21:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:21:52 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x6a) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000000100)={0x1000000000000000, 0x7004, 0x4, 0xd, 0x17}) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000580)={0xb, 'syz1\x00', 'syz1\x00', 'syz0\x00', 0xcc, 0x81, 0xf5e, 0x20, 0x0, 0x3, "261bbcbc3eeba40657fe8e1294a15bf2c48cffd728ae9458d59453dc03318f3fa62fbf2b8cf1d6e81a083d40a82660d0e1264ed06c0378d77aefeae401a579e7288e8a462eb0a6f29a784f7534ccc77b05526126c0e1cc935d037eea5f3371407b5264cd1be8d3a7d6552c0ed9d94b7cb713996e93d9af72c9ebe49e44525ade10e215bff5bbf1cc6a2656b7677430cde8d9627c327e1216d3bec6626e48854b6b9a69b1422644a19d3cfac79fc849d153cf42b5844765ccbb2a1a18f9065090a03125f57d08c0b2d8f1dad2"}, 0x1e4) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') getpid() sched_setattr(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x9, 0x10000, 0xe8, 0x1000}, 0x8) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f00000000c0)) creat(0x0, 0x1) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000180)=0x80) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 16:21:52 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x3) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800003}) [ 3034.267206] FAT-fs (loop3): bogus number of reserved sectors [ 3034.283971] FAT-fs (loop3): Can't find a valid FAT filesystem 16:21:53 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0x0) fchdir(r0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x2) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) [ 3034.345558] FAT-fs (loop3): bogus number of reserved sectors [ 3034.369416] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3035.999377] Bluetooth: hci0: command 0xfc11 tx timeout [ 3035.999418] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:21:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)) 16:21:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x9000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:21:54 executing program 1: r0 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000080)={0x2, 0x0, @broadcast}, &(0x7f00000001c0)=0x10, 0x0) write$binfmt_elf64(r0, &(0x7f0000000880)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffff, 0xdbba, 0x6c3, 0x3f, 0x401, 0x3, 0x3, 0x10001, 0x19e, 0x40, 0x33a, 0x81, 0x3ff, 0x38, 0x2, 0x2, 0x5, 0x100}, [{0x7474e557, 0x800, 0x1, 0xa994, 0x3f, 0x6, 0x80000001, 0x39}], "87d60c5a2679406b4950aed975391593c2cb5b4d5fcf94e1506508df4a230a1c8c09be5ab5bacba420d0ed02039f7681f230e93fc39fedd1b9051c934818ea712c9e8171fef9b8119a1cb8d8a47ecc24a5b040c1dc627f9544c1266a6aaa16", [[], [], [], [], [], [], [], [], []]}, 0x9d7) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r2) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) 16:21:54 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000380)={'lapb0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) r2 = semget(0x2, 0x0, 0x680) semctl$IPC_RMID(r2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x84, "80ef1a833b7c647b6c56a5907301fc10fb85a4c9f873c27199db9e2cecd166c78b0ef416b3f4b2b09107ce5bba21b78ee10dcbf7f8404bbd959243ff3e7aead8c8437fbded7f2ba3969c83d464008293cf1f2be8498e2d939eda1e01679011ceba97cc777cd8372927e7c7320e8d3aa697ea80ff3e2f73d7304b7c4fa635ddbffe51818a"}, &(0x7f0000000000)=0x8c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={r3, 0x800000000}, &(0x7f00000001c0)=0x8) getpid() ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f00000003c0)=0x1) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r4 = creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000300)=""/28) 16:21:54 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x3) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800003}) 16:21:54 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x2) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sched_setattr(0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000340)) [ 3036.152723] FAT-fs (loop3): bogus number of reserved sectors [ 3036.178676] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3036.214907] Bluetooth: hci0: Frame reassembly failed (-84) [ 3036.239037] FAT-fs (loop3): bogus number of reserved sectors 16:21:55 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x2) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="002e000200f1dcc05db874602f1e2361e500010000000000000a0000aa44e1"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) [ 3036.267031] FAT-fs (loop3): Can't find a valid FAT filesystem 16:21:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0xa000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:21:55 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000500)=0xe8) sendmmsg(r1, &(0x7f0000006300)=[{{&(0x7f0000000080)=@ethernet={0x1, @local}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000000)="c8f454", 0x3}, {&(0x7f0000000100)="9c8d40caceffc099949e2aef", 0xc}, {&(0x7f0000000380)="f57240795501c17ae498c7abc085b4b2ad159f339cbafe6507227dd381158b1d6144eadd62af9725e91d21b3fbb723cc3c947dad4c3c7f2210389824a50cbeec2e1b6e1772be4902270cb647ba7390bdde3a90759751dcc5de96369c1fd9a29919f5ba45cab0f9ec6e17d766d3640b4b5babd821d27cb40eb60a7b089424309f9432713a558312121e28a88502cdbd47d869f534590e0dc7902eeb9f6ea2dc559850e9659e68417bc3ceebcfafa98aa00ae23170b1603fad7806f9f222cd7a7875dc74237037a49ad4135de181a7f654bbf7a6bf5258535a1a5f3c032c3b099976028fbdf8489a0e7a293ffc", 0xec}, {&(0x7f0000000580)="e77f02a63331afabefb5d94d818a3b26fe7ab5c9145fbfe76360e8dd11926e7b2f2f9dfb7093b9191c635089c9ea9cce234c4237834e404889c3dd5958bd2777c591bdfc772ee1655761c13ad28e90864df1b27fbb5203c504a3ff531c602270395885c1ff8a74bb59fdacb1803f2e350156bad8bd6168b7a350ec8a4c50148b532a21c316ffec6887cd7be2cf5e13b0c9e1edefd7604c668cd7fa8938f5144fd33631b5459e5606a6e23e5391ce91fa50e6b387f79be920dc8127fa631c47da057d7f181c732b", 0xc7}, {&(0x7f0000000180)="ad4eeb0ddf1c62d1555f8016e73efeacc987", 0x12}, {&(0x7f00000001c0)="89fd76e64613973e037164493315dfd2c46e7d84295f15b2745179d2f47c624f55476c08e2319c05c3e3aede3f7f", 0x2e}, {&(0x7f0000000680)="657753770cab405f6817542dd8477d699ca6e2fbe6a0008daa31a2385e126921b22315ff7af1e141a7e3c0152e4c1df76bf9e9f3381c616c645dd854677212ebfefa622d448419f7b99f658a2f26973092e97ef34a8951c35f99412a4285f40e65ac99fe16004bee9ff2c5587205f4e0e316f6ee757760cdbec6cec00b62db31ec9814fe26c5961252a4ee2ede8682dfed5e5f9a3b14e06e76c56f1e2f44b4007eefa4482803e8582db399850e055f4ed98b77281e4878affe72b7c31a3cbfe0f4fa38c5e2cd6c1811feea13224f192b770d", 0xd2}, {&(0x7f0000000300)="fccbf6f50927d21ca8e4ce1d30e7219b97aa5122990dce35e29d1a9cd872b9826d227a04806472631f3fa5ed97566e819a", 0x31}], 0x8, &(0x7f0000000780)=[{0xd8, 0x13d, 0x3, "296deaeed86f11464fa6c2f5df791a066b1d459a61bd8e84b90509bedca9cad552d2453c5c0620c3416a55b66e6d88a7eb81b770e68e9cd49c563af96b01a0965ff32f08ad93ece6146a4c95ab47b393530971b524487652bcb101233d03a80992d01a6752ef7b8e420fd4172d264e793cb5c0e9919b1f277d33daa1c3aa948c2c072bed7313dfc1bc6f0dd0d19fdd1aed3edae41176198b7f51b4ed5903b0a4d29dbf4256da6419c53c3a60a59463348986ff1b00ebfd04132ec8120b15be4fc4cf36"}, {0xf8, 0x10d, 0x3, "0c65fd82d77e6358cdef9360c730f8b8044fe52cc0f19d503460ed9e9dc7ddee004f5f69556c8efefc2b7bc78eaaf944226db073e1ad3dc492330084bace44c21731a729da10ace99aa1f795fa7e30c06cc6bf2d9eaa21b6feabf1a4638cca783b60d329ea054796b52ffb9d2591bf9d237750ba43f0449b1ec4cd1ca94128a071be78ad429f53982002c0c52e91d4e93b8d42993453961be6c680d46526d3b347530222fb7411c14b1205aada5f063f11171986969e2124466af08799901fd89b26d8d81146ffe48dd89e0ee8549f9fba509327a43f02397d53a15c107360199af202"}], 0x1d0}}, {{&(0x7f0000000a80)=@xdp={0x2c, 0x0, r2, 0x5}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000000b00)="f515ed416b003897b8ecda1e3c0ec2a47b3076a7a9970e30a84acb03cde6fba3fc15b77978777eb1cd1c8c71b4ef95044e8aed3f5b3293404ec54ec37d4723d4", 0x40}, {&(0x7f0000000b40)="cfc2a9d926a606a1f2c274133dde4d4df054e75ac448fc43500b7a278700a66650ad1a56970c7f4b171aa15ebc6536ac357ae5d1542070ca4db872bc44098804e81a82a21b2c8d2c0731480f6cf187b3625694aeb779edf8d9754a3ada6ee4af5d112854f440b16ec86cd54714301674ad99be05084d0f08b2e33e8cddd48a8ad93cbc37cc414ead7879bfb27835ea4ae66de4e63115f52681f3a65d0e11969e1c42fc9596bf86de4eafa975e6f3d14a44c515bf8f6cd3e65a01f529", 0xbc}, {&(0x7f0000000c00)="235f40ac41ed4049549c7796782f4dc5e78d1f85ed77719cfe5037c88d135969897a584d6aabefeaa0a568e7ac37de5dba4cdcac0104b0e81c776fb803c4cc609503feaaf6627641abdca537b959d4b70622cd44815789fed49086223b433697529cd680a74c629830a43daa18ee65efa7b6af176fc3250b7c7792e13008b6a95919e5edc77f91e503fe4e3c2c8a88cb", 0x90}, {&(0x7f0000000cc0)="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", 0x1000}, {&(0x7f0000001cc0)="45b5b058faa002ec488f90e072", 0xd}], 0x5, &(0x7f0000001e40)=[{0xc8, 0x1ff, 0x5, "744d49d6ab7ffcccecd6e0127666c7b5b571df21d0a6cffa46f09ddf688de87d80d52a37258e00f0be1adb87fa697fce094b7546459b449f8771f0b110b6cfc1eaeeeb5c5e4b31fabaab1183ffcf65b98b9ed6618def7b562b0095a752d32ad5b800b00cbbbd70030b5e5dcf8d0700d4ff312d4d851488f8be5309366bce42fb99c63633dca0e6783dfb417e8d1f3bfe17c4d31e5d644f8e3abf7f624f390c5909a917b6b330afc86fdf69436f9bfcfbae"}, {0x1010, 0x0, 0x5477, "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"}, {0x60, 0x110, 0x8001, "6658ae5a19dd3c198d4a6dbfe4599b87429f7efb51f10a0f44df5669309767fc7fe60341b8f8b475f37aa6dbce3d0fbaf401e52ae2f6c260280974582cdf0fd3fd9b0f3a54d282f7890eb1"}, {0x10, 0x11f, 0x81}, {0x108, 0x108, 0x9, "a13816978db084a06ced10e2652d8e679c1755a3a19f41e4cbb46e52a734590c9e8f3abbf2e7a39ec3c65746ff7cad3103086f1af476d03d0bbdbf44abbfcefba301dd66dde2dfc61a4b1bad6a0017dd7af2930e80950c461c362239a18f379da53435c70f86b58c811f58a4895ceed49f0ce6cf5978c56ff7bd5c445101009853d0ec585facd1f01f7536c88ab92e4241332253dba33421e646f6aba3c747f7d004b59c476c80625af9a88b8091f5c0c460eb7f58d2ce24cb70f77dd1845fabdef3d4ad8cb268a399f11a08e7c63d21bb1acdc2933e1070ede0f0df4456a5d9841451faf8158f456e53967ea06f7aa0b914cd5603"}, {0x1010, 0x0, 0x8aaf, "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"}, {0x1010, 0x6, 0x0, "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"}, {0xb0, 0x0, 0x8, "538f437601872b22f03c919f1669fc507c7c6b33cae16f5e4db08039d3182135a0ebda5cc33e0fcd98e026e4360b3f139a41b06e8844f20bafa2702e5fc7331a9e6a9054a82ca80dd499f602858f4952f15a5ab8f7bc4ffea82fce4dc7e4ff42a90e2adf042426e4e7c0a05a837978f92e6058ede406f5bb37fc85b46bab767152793760f6cb9c84895139d635f232b3671d4ec5212d481ec93b5405c5"}], 0x3320}}, {{&(0x7f0000001d80)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x7fff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xec44}}, 0x80, &(0x7f0000005340)=[{&(0x7f0000005180)="e3c732b902bc85db8d20aed12494db05955169a31522341acf14cdb1c8fa66d44074d6bcd08d18678d44440d767c82f22d72952ed55064da9b48a60ccbe832c83524fbda067b3d3410604d7324a0c87bff0eb3b4acfae9a53526f5af3a9aea0d1927480f8b70b5769c71ea12d9e5d68c47c93ed168a88cc443d116fd2f55098aa11d3fde44d5ddcdebeaad500deb78ca0a6dcc3e2274f8a93d01158350f96e74d10d2a904cba13837b4c88e0", 0xac}, {&(0x7f0000005240)="ec1dbd4e6d56b40a8a9c50bef8e308c66ee890ca21c5dbe2e76d13aaffbbff78de5b538244abfedddefcda55e08a18c6333b705c66e555bb4f1fc4a28f1024bdd4282877098b994ea03796b33c19c7c76c8f1f31b45a3985f42ef4323560ded3043205c644b4799eee24c2429c3d6da17a9e66be7a150f424cd646173c7b52c65f7ef67b9bc422e4515226b3b6e817f7a97b773045fa63a1ed3b8374b1fb66efb1708b4d2da7b648d727fc9f6fdbec0ac0428a4782d249cdeab04518a7e69d7bbf5fedb4a9a8e00e", 0xc8}], 0x2, &(0x7f0000005380)=[{0x100, 0x114, 0x1ff, "baea73fb45174b1d3618f8ab3f71cf21bad764f90edaeae2ad02e2c65bea49aa563ed9189b4fc60489cc879606ad166aa87d529348e56907e35bd32c3058901dc53d4f7da8ff616911688ea2022e35b21a830e907ae743f6bd850728ae45dc9f64f5992dfa8285aed7dfaa327d196a91c459df7604ab62306ba7374d2156d861797e5495f2cdafc1ce3272e30071aaecbb305090b27d836f3614c536e56de493799acc37438c7ef14333c6f5a45d75358aed4755e0aae3af3125f01ec3c37b5ea8b3aa2edd14ac627b5833549654f021e7b1d9d7bf5eb8f6cc13d378a2454fe92d92d5f7d5cec404b6f2"}, {0xb0, 0x0, 0x9, "ff7df7e1a24d72bc3436a98436c0489b8dfd549f59217e81043a8632354f9485bca151e2334ffe4e1da619774a5feee8c54681ff8aaa2801f07a10964493fb74000e4b8961ee96e6aedf163886201f1ac37e5bbf4edd6fa29d6b02c039aa89802093a52fb6739c0aace1e1730b8fe76ff83dcbf52f6e879074f4ed6751970e329b437dd37e1c4cb1b75d0e6625a548d52cfee4a987f857c5f49b8ead"}, {0xc8, 0x101, 0x2, "873d1a03ad223785cea29d633bb23883e7157019b92a18e2705896a68d231696b7766f37510b42cbf0da0c0cf870ba076d064d1895cd4e15ac49ea41e1192e742ae8e752854aae29a7dcdfcd0af5be97c9d045d83fe6fac8881cb6983a720b32a5309106d026426ce7543ae216b9723469adf0b2b0d16ea71b129ac240b33db750caf9f934808095d73dd00930534c4922016eda6ad3c12e933616e565b65ceb956b6b8c38fce3e0127eacb919b63227dcaef6d36388be18"}, {0xb8, 0x11, 0x9, "6f13fafa50ed7a231d85c638dec266cf6b47491db1032de2f4e07dd328aea331514dec5f3e97bd907126ceea0a825c4ba4e3b86573790ea3f8db1e1267eb8ce2cc84f64d2cac72c9bc81c3a4b554c22016df1d32e3d45108dc32174b7ea8f609ee3d1e5e96c97dd70a85902912d2ee7662a9ed51bb9d0725d05010b75aa026afa4536e6f6d2ec79300dfdd0e91dbfda69dcbe8c42f366959f76d924b8e64f5ac8e06"}, {0xc8, 0x10f, 0x3, "634e666c253664465ccd592faa1a8dfa69a45959cbb4762b2f175ac64078d6ed16b90f831f904d25a16847b0159067e949185cf679111fbabdefc0682eebb329ba12de357d17ba95a1eb44ae7d29b1fa587f9998e22c7de8bf7f6030f7d5b68db41bc824734e802d853c0fa9d926171b1112641d89ee6395fb621ccab927fed3b258cc3341c7fcf5822bb90472351a746b70f33152c2ce9dfa992ebdbb5979d1b5c9fc856aeff90d6556fc4add1469d46bc75e2ac2c1ffa5"}], 0x3f8}}, {{&(0x7f0000005780)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@null, @default, @bcast, @null, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null]}, 0x80, &(0x7f0000005e00)=[{&(0x7f0000005800)="e1434ffbfd4ef461e1997d7599effd1cfa9bcbaea533c8be49633ac1a1790afbb4050cf75ba84484114b0a1ca8bf545e05eaccf9fbe01d3b4f1bc4d5a37741a6114da7653ba28b4802d6aaa7726181c440dc6145072291056140a1f7d5a4dafb4f4844277e1f85268113e8a1ceb9f81983450b7600695ebe5c5f436f3b4d3efd02893f7e9194e2242fc12c8a4b93feeb8fdb91fbf23888f34404e6c21da8ce00c35c7ae0b3097a63643413d3f7f4c225c38e9932b01edd", 0xb7}, {&(0x7f00000058c0)="c437bf7ac4dfd694a965be8beb4c9c471eea04b64b8cb68e03061fa9b4731b5838107f643fe6888973811015f32c3a3a33a674e07202d3d1581af5a89891e4df68ca85c270a383", 0x47}, {&(0x7f0000005940)="d890d3905adb931ee07f7a75c6843b2b190fb5e0eec465016be61ba98fc4574c7149e81c816a7919dfd45cde4dbde13e0fa727ed7a1a3a473a06551edbddf5528a25f2ef29c57e6dc3f433dfae371df776f3fc2b6eb17bfd15e2cfb08bd4dd402216b46d0208de6de099d41165a940b2b9c9adea1b2da2efcc14dc728de69a5f702521c20dc2cc69a59f939aca5cb9e9991f8f4cc8881bf83ec1be2e03eaa2d273c9269eac538705526ace70690a0d8f701b", 0xb2}, {&(0x7f0000005a00)="c02b8de417ae7f1483f7c81e6348986e9d7d414e791066ca1b43278f6f8644cc35e00116819e0b0b17befbdbd636698ee47cac5eff91c52398334da82830053e9f58bd94d7756d65f09b1142f37c4beab012aa9282b8f2cf3d7c44e7f2053e014d0ce6e0ae1d740ef442f78593e06ba9ea49cff164f481008b0f3561", 0x7c}, {&(0x7f0000005a80)="e3df953cdbde7a4b428735b6aff2e8d504f8b49d7946cc3d7e67e79a1b992283de65ed9974beab1423fe321a466a54dec4ec2615ed13fec94b56828273ebd5fdd03dca7fe6ea94891672a09c5afe4ebf3526494a", 0x54}, {&(0x7f0000005b00)="e25d59df95408d6170ddd2986fe0e746a5e771c2f48b24679123722f8d59bf86ff0a6430a9f505ce88df4e4b5daa2d661db9ad318baff64174d76462f946dc3031c520faf8317d22a5f8b10cb98f8c7712ef0a9ad5bc7294b505f9c02c94156d2ee69d12b13464c97a6d74a79a552c0054229d", 0x73}, {&(0x7f0000005b80)="228c953a527250b156fc38fcff224c30204f3b93aee8d22456618f8778a23ad0d23fa1862037119c2c3bd30312fa61a03a06fcc4e2fac934314b7d0b740c204a5407588f1786091c4de14d1c9ba12a5f4784cdb56dc23a", 0x57}, {&(0x7f0000005c00)="50b55119c02bee2a7d5e7183ce19ee3471985f2a4b29fc4a43a22aee92fc09bd8e8ea3a2f4cc5c0756684957a95343c9e247f8b0af4381ebc8da6f6e8451053f4ec052ab6abb337d8b365c3f5b6413c7f5dc046938e88750d5439e704570286f11d3e7a553bfa972d190bdbc2bf67f3fccc6f95feb555ce05da179542e0e234fbe185f7f6a1e533f2f67c41bb1592227416ea8f333f44bbe5c3e20f1feed534371188870867a5b0276cef57afa04239c6a5f2f2de9024ae6085565df576760d511bcf4c741af79b8bdd810f0364c34bc2caacba032aa56160bd766214e923a3747eac20ed537d6a395", 0xe9}, {&(0x7f0000005d00)="58c9c6f66e153ec1b4487b5a45f8e7d41ae192bb463db8ace31edb926e7ec71855bc18ddb88d319500b2312d2bca6b57647d36634366da56afde0a68f42eecfadff6f18abd199dd804cfeab1eb36fd863288cd8e0c697cae60a22b57f0c08e0de8ca1d43beb5a8edc703deb65bf024f6b41a1028eaf40e1fb0a33d6614c169b45e586ff2bb68556a183e95a7420e", 0x8e}, {&(0x7f0000005dc0)}], 0xa}}, {{&(0x7f0000005ec0)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x4}, [@bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}, 0x80, &(0x7f0000006100)=[{&(0x7f0000005f40)}, {&(0x7f0000005f80)="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", 0xfc}, {&(0x7f0000006080)="14098ed0c6ffc462b0f4750afa79415b980f5f95a4131d698506a8311f8040b31e732d8525357a9bf20efd1a739f814548a36737074f777b1139c0a16037c1e66e4a8356aafab1210a4cfe0186748a9523a1ea05b6552a7895a8629b4b3df6968009a77181a65582ee9e3c771f0684", 0x6f}], 0x3, &(0x7f0000006140)=[{0xd0, 0x112, 0x8, "dc66fa77c19fe546ef87ac0da2b357bc2bee360d9de671694b5130d26217bceafdab1a6d510e2ec700f428643674ce8d7ae76d65817ef507b084d4f2db069eb31b3b28d6d6e8343ab0586254eec6e93a9577d476d98585af6cfb2aa4cf1b4ae359268024d86f460691e89ba0cd395314e2aef6398ef2a2f2d3161e370f19212631220d12978d5e75ecd6ccfd4fb90493c52d8493d93a324c4c866eec8b668eabd1fa1e6ff575a8384a89b333cd0cc26cbdf289349e0c8d66e8ed7b9f93da"}, {0xe8, 0x115, 0x8, "acbd766ee53265b555d6244cfbc536ef50306fa2ef721a89101b0386a8862ec36af9b8e7f2a8d0f185446ab9ec4154f45cf447cad8ba0e37811f3d3858a9a94b48784b0b0416586b237c491e599ef53777e1213d98056186756c9ad3008c61a9b9168296d12f0655c8060243ad24b50f97e5e5f19ba770751f9e856f484907481020bd13f90cb2dbaf48b3a6605c47c6fff2f6b96631f2340060b2de6eb385a32d149e2b970aa20d1d97a528fd186827506de748d797b71e5940b8d7ab689f341088043ddb5a68ef656633de14b516f6792093e1"}], 0x1b8}}], 0x5, 0x20004004) getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 16:21:55 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x3) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800003}) 16:21:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, &(0x7f0000000140), 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) [ 3036.484691] FAT-fs (loop3): bogus number of reserved sectors [ 3036.519491] FAT-fs (loop3): Can't find a valid FAT filesystem 16:21:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x2) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000400)={0x8, 0x0, 'client1\x00', 0x1, "04d4b0e4140798a4", "73c46d695fd0c26ec969a6b8654bf3d890d2a6c862c505c5f439fa389e536734", 0x7, 0x10000}) write$binfmt_aout(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="002e000200f1dcc05f0002c400000000000000000000000000aa44e17cd173e723ce8d99a0c36a25a723c9ef1fedc23f5ae0bdfe8c97d02f30e79ed033820bf11a2143ff7ae33f36bdb7c11edd4c4d370abe83779288d28d8338dfbad31ed50a3a3afb5afc24971dad11dbaf95495a24e3ed3f29af6f3356470ff693bf7398342e961f49396e55c52747de45755058b0552fa6c4a8c7f6059317541d2b303ba2e7"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000180), &(0x7f0000000240)=0x6) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r3 = creat(&(0x7f0000000100)='./file1\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) fallocate(r0, 0x0, 0x7ff, 0x7) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}}) [ 3036.617522] FAT-fs (loop3): bogus number of reserved sectors [ 3036.639969] FAT-fs (loop3): Can't find a valid FAT filesystem 16:21:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5424, &(0x7f00000001c0)) 16:21:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0xa0e0000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:21:57 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000000)='./file0\x00') getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 16:21:57 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x3) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800003}) 16:21:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) r3 = perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) getpid() sched_setattr(0x0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x20000, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f0000000880)=""/4096) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) 16:21:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r2 = add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYRES64=r2], 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) [ 3038.239446] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 3038.246846] Bluetooth: hci0: command tx timeout [ 3038.326933] FAT-fs (loop3): bogus number of reserved sectors [ 3038.367181] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3038.393785] Bluetooth: hci0: Frame reassembly failed (-84) [ 3038.399756] Bluetooth: hci0: Frame reassembly failed (-84) 16:21:57 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x2) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="002e000200f1dcd51de3160d9ed0a1666d0ae599fe39b8746061e50001000000000000000013aa44e17c"], 0x1d) r2 = perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r3 = creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f00000003c0)={0x7, &(0x7f0000000380)=[{}, {0x0}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000400)={r4, 0x2}) socket$inet_udplite(0x2, 0x2, 0x88) times(&(0x7f0000000280)) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000340)) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000240)={0xdcc}, 0x1) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f00000001c0)) 16:21:57 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) r1 = geteuid() stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$jfs(&(0x7f0000000100)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x80, 0x6, &(0x7f0000000680)=[{&(0x7f00000001c0)="968e590e0dd65177af7922a5c4ab6d0bb48179812ac266cbc90c51f5bfbe7da14c118350c8c3861550180c84b40b05c8e8798e21dbd35fa3525f87fbe1256923", 0x40, 0x8}, {&(0x7f0000000300)="66d869f11344f8d92d2d5c80198c", 0xe, 0x9}, {&(0x7f0000000380)="a409f12751297c8b69f78b217070b715432b68ff418eb6869e035b1a89ae60ef96bf7b5525efee7e45708daec68d0bc8b1137a0b47302845954c7f4b6544", 0x3e, 0xc17}, {&(0x7f00000003c0)="5cf718e2f91b0ba08f0ab5fdea51a7d282e7d03bf5317575749a8ad2865c5b9c6f0125f24f25ee1041c24680c59f561394337646cf8edcf16c35307888f8f6a1047e07def72f5095d2df2560cb812718c808b53ec302004fd0eff0f6431c1147861bbf6b2e11618e2a053b57e9ced8e3c240a35e3a1c36142ef9497a981a6967fdca5540527e4d7ac39be3d975f8cef9beaef6ecca", 0x95, 0x6}, {&(0x7f0000000480)="b839a9fdc4cb45792c627b8b8289ac97e6984567575d55df575dad5bcd30392e228a51c7e365f582c1c7cc2a76fdb29b739aa2c8966d0ee48c93ed", 0x3b, 0x7fffffff}, {&(0x7f0000000580)="c43709bda0fe1bfbc2964bddfede05701516a094048f940e0b5f372f1ade150e3631f4efc184e31eaff56760736ec6a1a85603cabda964bf47ef66fdc4e9449d8ce919c36ff5912753e34d1076b370f9c7060bc7006dbc94393edbaea8160c3e5c6ccb2d6529ce95c9189dd0ac9980fadfe0d96fce5c958473e7953c5745a1bafa3c14ac1ec1a224001eef9ce4e4616e9d5d21000018d2fffd3b85d41c14c76b8bd0bd1d597d9232b6b4df4f9d2301b060c2a05e5fc5441a089609ef14b7f4da5f436c6426ecf14b488cc0a1007851d830c96aac09c06d11", 0xd8, 0x100000001}], 0x1000000, &(0x7f00000007c0)={[{@nointegrity='nointegrity'}], [{@fowner_gt={'fowner>', r1}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@euid_gt={'euid>', r2}}, {@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@obj_role={'obj_role', 0x3d, '({\''}}]}) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') getpid() ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='veth0_to_bridge\x00') sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) [ 3038.462714] FAT-fs (loop3): bogus number of reserved sectors [ 3038.499793] FAT-fs (loop3): Can't find a valid FAT filesystem 16:21:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0xb000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:21:57 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x3) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800003}) 16:21:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="002e0c0200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) 16:21:57 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x2) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000cb071187c156b21c49d0c4aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x2, 'syz0\x00', @null, 0x8, 0x7, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) [ 3038.742446] FAT-fs (loop3): bogus number of reserved sectors [ 3038.773016] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3040.399428] Bluetooth: hci0: command 0xfc11 tx timeout [ 3040.404821] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:21:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5425, &(0x7f00000001c0)) 16:21:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x10000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:21:59 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') getpid() sched_setattr(0x0, 0x0, 0x0) getresuid(&(0x7f0000000080)=0x0, &(0x7f00000000c0), &(0x7f0000000100)) r3 = getgid() fchown(r1, r2, r3) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) getcwd(&(0x7f0000000380)=""/167, 0xa7) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x40000, 0x0) 16:21:59 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x3) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800003}) 16:21:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db874600000000000aa44e17c0000000000000000"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) 16:21:59 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x2) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) [ 3040.544948] FAT-fs (loop3): bogus number of reserved sectors [ 3040.579468] FAT-fs (loop3): Can't find a valid FAT filesystem 16:21:59 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x2) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f00000001c0)={0x0, @speck128}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) [ 3040.650366] FAT-fs (loop3): bogus number of reserved sectors [ 3040.686442] FAT-fs (loop3): Can't find a valid FAT filesystem 16:21:59 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x3) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800003}) 16:21:59 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000100)={'\x00', {0x2, 0x4e20, @broadcast}}) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000080)={0xe, 0x4, 0x80, 0x80000001, 0x4a, "22dfd05ba28adbb73072fe6a7cb22242fb76912eddf1f7c3d38bd9fd248e29e47f8efe1724a2cb7709de933617be8bf076f84080d16fc2507126ee2813c243bb4b7372275c9f01168dab"}, 0x56) creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 16:21:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x1f000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:21:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) write$P9_RXATTRWALK(r1, &(0x7f00000001c0)={0xf, 0x1f, 0x2, 0x4}, 0xf) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/80) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) ioctl$KDMKTONE(r1, 0x4b30, 0xb3) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) getpid() sched_setattr(0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x200000, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r3 = creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) signalfd4(r2, &(0x7f0000000340)={0x4}, 0x8, 0x800) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) [ 3040.988707] FAT-fs (loop3): bogus number of reserved sectors [ 3041.000605] FAT-fs (loop3): Can't find a valid FAT filesystem 16:21:59 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000001c0)={0x9f, 0x4, 0x9, 0x81, 0x2}, 0x14) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x2) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) [ 3041.065554] FAT-fs (loop3): bogus number of reserved sectors [ 3041.094693] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3042.719394] Bluetooth: hci0: command 0xfc11 tx timeout [ 3042.719416] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:22:01 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x3) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800003}) 16:22:01 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16, 0x20000000000}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x300, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(0x0, 0x1) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x4, 0x7, [0xa6, 0x1, 0xffff, 0x401, 0x6, 0x6056, 0xdcb3]}, &(0x7f00000000c0)=0x16) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000380)={r1, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x1, 0x81, 0x9, 0x100000001}, &(0x7f0000000100)=0x98) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 16:22:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x20000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:22:01 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5427, &(0x7f00000001c0)) 16:22:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, &(0x7f0000000140), 0x2000000, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000240)={0x5, 0x10, 0xfa00, {&(0x7f0000000340), r2, 0x1}}, 0x18) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) ioctl$EVIOCGRAB(r1, 0x40044590, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) getpid() sched_setattr(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=0x0, &(0x7f0000000280)=0x4) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000580)={r4, 0x4a9}, &(0x7f00000005c0)=0x8) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) 16:22:01 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000002e40)={0x0, 0x1000, "6921218137366e9831a1e4eb865a535ea30a287652745e0751cfa390ce701fbbed0e555064ce7919e647296a6b0a6958e47f67f91fc8d8fbef18039b2f080318d4ee6a0f6644883ccb7a8f89c41538600ead7e232438c696547bd9fe4e95be88868dc08dc70ca18c3223c7560f626ddf470e4938ab97cf469742e606eaca64ed72b5e05a72300b820378725134a4db9eba9fd15361b43e43389af05a1ec9fbcdee4d1cb40bdb7c89a8b8ff0fcc5c9735e18d29afc3ad758bd5af17558e16af5361fa961dac528fb0cd28b4fa049f3165849e1fbe4ef88a6b0ebf30a719434ead1f36391bcddccc65d60b0cfef780f5116731f9c1e49a3e3816f28e4de5d49119fb090e82d5822e56df4b2a59a998c796e7800b5d31143b6d705d0333470bc1cc933b0f7d3fb4d2fab83be84edc3a6c5d71f2df522ffb20f18d0da744666ecfcf4073dc647c4e11237e198844a0bdcbd84d2ff3fd5fc5d938955beb30c4afa284d22225619c3cfe31acc71c3656827174abfa9d3478df9c8253ea897eb07c0ba2a2668dd4ea21bc1a6deb8f03fa72e71a1ee507c954563211c4ced7896f222f65372a486ba7f055fe9b420137c19e44aea3323c273d75bebb7294463000f9e8fe65bff9465a99c402bcbe31a81dfcd011aaccc30df6a53ea8a66956cfb2541b70130d47dde135c02501144696fdff18c654ccf8edc9069b4055b8c936dec5bf56bbf85e5fa3cf28c0a7734d406bbc67947709c2c47723bd6e3d5f1f0a2f02a67d61a8bdf901a8cddca72bab4a0077a73271868b34f909c6822295ca0013add5fba3dd733be0b4fe4d44d206b041097352659b8fa210399bfd9fed2507428d8835fa6eb12b34cd5d0bd97946718b180e468efa9877d5fb444f015057eba7753e5f83004a0203f2f983c97c54f58819d4f0210960ad9dc31cac327087be0bfe8bbc0989f46e0ddd93fd8c54579c9ea7823d12b64d6ca36e87aa79754050cc8026cb3c63c00334df01f1df3aea55936dd92f0daff8a4de29e05b44a3c41b7381e942c78a26353e0128422118ba8b748df2d610e560a8921f79f9c0f16f645ff8cd0614708104c9469044f854c7959276faa1e3e5a7220d195bfd6fbec8db571b10c98f0d276e1607d48b96f25924a961682b1b81670bf18c14db9cd8d3c58d4e24c769aba15911c66f9d8d2e94c28108be3d2c9d9f57d51fec1440d320eb84d3226f5b741e65243e8f7a48ca46ce9f092470b605cbe23f703bce69dcad8d7d4ce4a1819d78d82ba7f5fc8bea9e342514d2af5162527afd23e4869071c1bb6457e81563fe6ddcfbaee69bc5bbb5277cd7d7d8ebfc865333e715285977851c4c412b555f3818e9a8a19f347196ac96d23df5d1c5da9839e3d06154dc69b99bd29f0f7b969b83e3c59b434e47d4a6be8e5b9c0828cf537b8c7013ed10f9a229ada3f32a0059500899e81d153bc1283002a4a670395098be79870103d83e85c78f7b746061dd2c01bcd11b18bba167e5d7272dba95521a1d1455b07af4ecc20b78c5d27c38625f4841b2b115efe26ed0c5a614799461996b5fac06c45556647287415e7a358bfc4227fde094888d148ca7ec679a791d389689e2adcdd968d476d14687851873fecd8b0c4ce3f91526ad05257e56270dd272e1f229179256eab2e1fb0f768dc49d332efc712859962102c4d7a94eb1f3a07e1697ab8588eac2f7b5050dd1479d28bb2190f3eea19fe910345a87ba4ff8afede4ecf1a185c981530c119d78d210dc9c2bdd532ad1305e42b4a78f3185f64820a6e24776bfce93b2bd1917a5921c3d61581f6e9f41689540d130e105e14dc5f4762092978b7b12f5b1296fe3d4fa53cc9e7b79e03dc394193568aa820f59810b2b9c2d60bb80bcdb67c16af444bc87581f3d97d193af7736996b9be361990bf168baab71065e46cec892ad29e9156562b1eff1ff191debf7e881e2425fddae095c82fb505250696ba7b8b6f6a7a08c4f9d5d6d43bf338c7dd83a71a206807ef0599fe8e8bbcddab4fb29ece701c966e438508fb74627186bba9f383c132c1c73521a11b2fc7981a6d5e74705c3cf58c4bca511f34fcfb96201da75c3d61280672b5c5f5dcb4f2d665d19fc0958c8d0db95dae97c8b23fda767dfc0eeda258adabf0f64e49b92ecc39a9dbcf32ff3d343ce8d7e0c3174f60f8a94f203a2196f70496d48c716c784e182fd85413efa376d961554032d3712e532a6fb35bd6d33379dffd0554af75e66b845e4411d933d47a66fea7434623f4b3604ca92c3973713c9322ba8cb35d925da8c969b3cb2a1a4da86d0e7332f8f49726f03e67982d4deeab3f3c93e9fe57b725de1431f8cdf6adb779ab7f1ba354092d4724c48c2bda0a44ed7622f813e0542aab6aa0566c8c0a30bb4d7cb2a9da05a10a281499b35c6903e15e40dab9a9fac191a6ec7106f437132ae9940100529923c81c022fc65e1a66a73eb5b23468aa988608e37d5e00b74783f5972f2fc328cdc6f23162b3ab2cdbff27cd375d5dfa276564db37858b8d63138bd7abd95b09a44eb6ee6cf71e9da7a1207f7f46bab15976539a0cad491013c5cea6700d7b93b09b8d539ede81c5a88b7d9cdaf8a1ff6d01fce4599095f14f129a186a939130d4776693765b4e32aeee5a943c714fc654da95cae00f9903338d16d106076aa55bb9278e901a717c56c1d5b6346244073e252d7e0cd4e72596494318dd2b81ae41ddff19ca1970a0709d75637ae959d02fcc8b708d01bddde3c206b11a7b8d871dd8e17431057307b4f7dbb3612f86632083a8c96aefee6b6813d2f01f9a383218f5b7a4b761acbc66d8301e9a97bace149332961ae4b033f14ad321ee8a11ec41a2a660eb5c539aa5c61fb264da7f85b79c471ed7d0f72035c7638a4ebe1907edbb36a7acfecabd2e7e33436fc636b98e249af3d3f942e8eec6d62d6b0576c868a5b3c4c213200ee60992739946734d23712109d0ac87df6440542fdca56f2ffb7befaf3cf73c96e78d5c534726cd4b0ca3aa65c0aa88370a8fb171d39d79e9057514c761e7042fd7bffe8349542f8a8dafcd072206f3d2d19704b92762b57e76f170f441404ec7129b9de28eb387060c85efc84dae83e79f17e0cb877f9cca1cd8e8c4e40e4e40f09e5eba0ebcc92650879cacae5b532b64b36b1eac65b6bd535eeb30f6b8de99aa94b7bcee67416e103d27b062ae0f542612474bb1fea0d8154957ceb1f4ff0511776ddb45dede3c97bc530cdd77669455f342c25c3ed0209fefa0d0c2243a0b1184084e43f8b8eaa99497b7ae9135dde818023453b25f6a719a26caba3213b9802d7c9861d3b00f5e61992112c2ca6782db90c1a35c6f311415b293cd7bc953de8c0d8b8d3a9f969550572734b8749faa7355083c92307189c382176cef483fd83aff20c89e5ec36f691f2164ab0727f596567e80b4e7e0260af36be5a3dcac5e5f33dfa1d952127063d5da94e7319dd9bcb408762fe46b8d632966139bd122c5f9bc1d3cd735e1a4b293d8c48d0171ce076f54c1796214df78062cc71fd7a9ed4a799f70f06cf4d280dcf805ddde64d2edad84e86015833c0f46f1c9e34e7ff1ab75c2251bcec09490b9e4d06fc2e2d718288846d365fc1579209412507f1b8c21a6a3e1d29200a438b90bb0a09fa22ee47427d87c3ac1e061395f194b4d9cb618269cdc0e8073fdb42041af6a7604f4535f6b1273cff1b204c2748d766d703da28e059c12e216cd5b249a64b4abff2b42165c49a6428d41cbf7f425ff75a31dddc6c4ce634bbe9624b76600afc836f6be586a363f66b779232dd13494b9ed218819efb4f4020b615714d4087d8330ecb27f108501094d9e601302c1d17e291b361ffb2f336af10f37d8fa10abc2dba2776b9fbab6c04b66b979f5bfd8acd931cc8aa8a8e0f3efc4ac8f3833baf2a940e1f39102367ee3e653852e4854a4f10070c03c486f7612192bd794905dcaed97d2770d31c1d5eb998d55ade31eb0b37125d227451009b673a215deef657be3cee7305319a88ff56f8f69afb48f3a3a36e6a1629f29da4b0f0811abfd28af73aefd53e89b7cd695bd5572e236ae7f978c622ea549f0b057ae0501afebe40ab3637064da347c3372066e2bf6beaecfbd8323805a44f290fc21e97396856bdd5dbb10121a871dddcd58ccef71a8146948547346ca3de64eb519024440a40f0c3cc8c259bd4c1425161123ead24fd1d161ccea3e0c5b24979eade59747bb467118ac703e4c9d6fa4f4c4914f35d958db9b16a1a8342e198a2fa475daeea0c6f0927f883b1b6d90d129fac80864ec005740f884c1957a5458ef57bc2e1a0579e28ebdc479466c3cdaf3854291fb20617090d753efa3e477b37a9e3d562a2af4908ecae08a93a0a734e92e89deeceeb71f592e4886b15386ad62763c877f8d92f41d17e46b89c2a4bd165a4609eb8f4ba8912f24cf88f45a4d7b36773a4351f99156bfa4fa7578afecc5c0de9913f06b0f86e51a2456bcd67cd7babf79dc975e40fea1f75b68c67fc4715d5b389ce1d3088365e1bcee290781db81890e9eec1e296d9ba3de594dfde800b9eb86d1b7017f39ef46c7e5c02e3af27145be5f96fbc0fca3e33677a29db1e96a95d9bd4720f98ef66334fcbfe91e4b197c075fe5a18fd2497f0bee6384d0f342c2571f735aa4222a8977f00f7f9c42710f9c10e27f414403779546a673a1e75f6abefffb73930db4cdcfa889c72dda3b5e4ca296f34d231842e3aa6aa4b31a34083315f2c7ddd25b55993384a496f985bdb21297d160504b21e988e7c26a83c5fb5acfd42284048de810b3f948c6d63221ea9a395a2930639632014ada35e6f88c152d6202ad027c81dc3f9572565077e6bd88896c5ede7e257d3e0f4cdbec67145f3e6bd18887d55369ea92a0cac3797ef725b59146a780c9ca486affad4f21046b353d5ba5a5cfca491849fe559605bb8b72c5c1c4e2aa44210c61f3a041609d3c7d0e66b95410343d8b6a3389d3c2ee3c6f19148eb4af188dbc1a8da67707f8edaf744ee9d445903949d4b249ea059702fb1e7f976ce47436b4043495bd666be1dbe2b3d11e2e3173e06b3e124fcce6a27a366c8c3f7df31a5d083ecbf27b7a94160b729e63d4b07701b3e4d457901ee6e3dcf36a4d5a966106c455ce81b19e22ae22ff2268d50cc753ed40b1b23fe4155049c6a141c8f73e7ce0c43c4c18d42d1b0bb9eb0084534a1678fe54c4245eb63012029177f2f7157ce6ca5b74da56c39c3f98b58d16f4d6c0b4acbf5228fe93dcc15ffea06c40ed2c9f4fb71509735a76615e3265dc5042cea2a86ad3b65b57bd3edea2655aca3fc1c836c41674aedf7bddc558aa0cceaaede2eedb5af0da79d3db5f555b5b7b9d040b2eb4e72f0b7b2e3221a7f4965bf6a6c3ac5937f00697c9cdadac858823e97747ccb2f3d58c68c9fc9db976b3bc6a06e24f3706f324cb88d7b3a084f164b9268e1d177ce596a3e9ab3feb82a2b2ffca362679e56e72da89c78b44e7d2d0aeea9684d81719e72e6a4e811584c6d286607650984f915daf051d743325d07a436dd78f28012cfed400d3dcc4661f889fb8441eae77aa5576b40e58ed0343780da4bb2c0888dc6774b907efd4eccd8c2a9a118dc3e1329c696b7d9fe8f0aef08dce931f20754d83ce780f55647c988cf4d6755615f946f41d93d09a9e960c0e518d98e88f636fdb78b9cfebd12ee72709d5341e874c0d222758d82c93c6cf8a0caa3abecb327f5008d5b553d72abeb5562fa4c5f23e5626212"}, &(0x7f00000004c0)=0x1008) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001980)={r1, @in={{0x2, 0x4e23, @multicast2}}, 0x1f, 0x8, 0x3f, 0x1, 0x10}, &(0x7f0000000500)=0x98) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r2) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) r4 = perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r5 = getuid() syz_mount_image$ntfs(&(0x7f00000001c0)='ntfs\x00', &(0x7f0000000240)='./file1\x00', 0x1, 0x8, &(0x7f00000006c0)=[{&(0x7f0000000880)="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", 0x1000, 0x1}, {&(0x7f0000000280), 0x0, 0x5}, {&(0x7f0000000340)="a2a10ee0f5b0150e6e287673495e085958ab08f034838dfbbff0dee761994cd41a37159756bb3d4c6f3becd36b934a7d83c059480b056d73a2639d0d3fa6c574db14c959780a323325bbda8b2b0a3ef15099262909cfada1a81e2818687b0ef6b1f204bd5b128e70bb1bf268f40e2ab3dd2666879be05012df6b4be2f091ac0d0d15f3c14a79f4ebafb54e4128d5b770ed0d6e379157480c83194d65b3564c4620228d25955fbc6bcd619c4189252f38fe4635581cec927ecf827a7484e92f351338ca8a565eab26ab3f4038f303d9a77404b33a1537bf968ab633b97e6f316a0de3183f2bd0eaad3976cd", 0xeb, 0xfffffffffffff001}, {&(0x7f0000000440)="f8799f4f10c8ae6182f79ec724749f442d827679fa64aa3208bd9093a2fd79f0cc7b645c63999a64c4a1ef418051040af05989763b069517d336f5fc43f5b3a50f9406", 0x43, 0xffffffffffffffff}, {&(0x7f00000004c0), 0x0, 0xd45}, {&(0x7f0000001e40)="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", 0x1000, 0x6}, {&(0x7f0000000580)="0c76e855fd110ae5f4551ef5eccbfc817c83c694297cb6509cc35be32168683040cca2b255633eafb313c53a08eccb9577f6867827b8bc8399925fafeb9d19c9a81c16e93bafdd04fed72c614f5c85667835980455c9615e9bb1ea", 0x5b, 0x3}, {&(0x7f0000000600)="04d1fcde9751777326601bfc02c566e88f5dfd822f484b83296f40048ec3d5345b0593505e95af589070a13beb8d4c711377e27918c66b1572a05c5833dcb622731074eb188fe0c7b766b6596da834c21e7e8ab176244a26544d1cf4881db6317252e9f9e4010641ca5f161ded8a89996fa89a548fa0bf58096747667f7bb3d644ee0b8969e33fe9eb8d31f02d8b6630de6b1caad5168d31e88291c86eba62566ac876d9f8ec18f59b2e1ab74f7c3fad89a9be22e7c7", 0xb6, 0x5}], 0x0, &(0x7f0000001880)={[{@disable_sparse_no='disable_sparse=no'}, {@utf8='utf8'}, {@umask={'umask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@disable_sparse_no='disable_sparse=no'}, {@errors_continue='errors=continue'}, {@nls={'nls', 0x3d, 'koi8-r'}}, {@case_sensitive_yes='case_sensitive=yes'}, {@dmask={'dmask', 0x3d, 0x2c70}}, {@case_sensitive_no='case_sensitive=no'}], [{@func={'func', 0x3d, 'FILE_CHECK'}}, {@euid_eq={'euid', 0x3d, r5}}]}) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) [ 3042.866279] FAT-fs (loop2): bogus number of reserved sectors [ 3042.879014] FAT-fs (loop3): bogus number of reserved sectors [ 3042.895896] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3042.910453] FAT-fs (loop2): Can't find a valid FAT filesystem [ 3042.948247] Bluetooth: hci0: Frame reassembly failed (-84) [ 3042.954455] Bluetooth: hci0: Frame reassembly failed (-84) 16:22:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x22000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:22:01 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x7, 0x53a, 0xffffffffffffff21, 0x814, 0x5, 0x801}, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 16:22:01 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x3) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800003}) 16:22:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8740161e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000080)=0x8, 0x4) getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f0000000500)={0x9, &(0x7f00000001c0)=""/30, &(0x7f0000001900)=[{0x1, 0x9f, 0xfffffffffffffffa, &(0x7f0000000340)=""/159}, {0x5d, 0xdd, 0x20, &(0x7f0000000400)=""/221}, {0x1f, 0xd2, 0x10001, &(0x7f0000000580)=""/210}, {0x8, 0x25, 0x5, &(0x7f0000000240)=""/37}, {0x81, 0x4a, 0x1, &(0x7f0000000680)=""/74}, {0xd9ee, 0x9a, 0x100, &(0x7f0000000700)=""/154}, {0x1, 0x2a, 0x10000, &(0x7f0000000280)=""/42}, {0x0, 0x54, 0x7f, &(0x7f0000000880)=""/84}, {0x5, 0x1000, 0x2, &(0x7f0000000900)=""/4096}]}) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r2 = creat(&(0x7f0000000100)='./file1\x00', 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f00000007c0)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000001a00)={0x0, r3}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) [ 3043.217523] FAT-fs (loop3): bogus number of reserved sectors [ 3043.246209] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3043.316531] FAT-fs (loop3): bogus number of reserved sectors [ 3043.334883] FAT-fs (loop3): Can't find a valid FAT filesystem 16:22:02 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x2) syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f00000001c0)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) 16:22:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x23000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:22:02 executing program 2: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001500)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000001600)=0xe8) r1 = socket$netlink(0x10, 0x3, 0x15) bind(r1, &(0x7f00000016c0)=@ll={0x11, 0x7, r0, 0x1, 0x7, 0x6, @remote}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000001480), &(0x7f00000014c0)=0x4) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000240)=0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r4 = creat(0x0, 0xd4b0b9ec135021a6) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r4, 0x110, 0x5, &(0x7f0000000280)=[0x2, 0x3], 0x2) recvmmsg(r4, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000080)=""/176, 0xb0}, {&(0x7f0000000180)=""/106, 0x6a}, {&(0x7f0000000380)=""/182, 0xb6}, {&(0x7f0000000000)=""/57, 0x39}, {&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f0000000580)=""/200, 0xc8}, {&(0x7f0000000680)=""/231, 0xe7}, {&(0x7f0000000780)=""/111, 0x6f}], 0x8}, 0x1}, {{&(0x7f0000000880)=@alg, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000900)=""/194, 0xc2}, {&(0x7f0000000300)=""/9, 0x9}, {&(0x7f0000000a00)=""/224, 0xe0}, {&(0x7f0000000b00)=""/103, 0x67}, {&(0x7f0000000b80)=""/128, 0x80}, {&(0x7f0000000500)=""/21, 0x15}], 0x6, &(0x7f0000000c80)=""/144, 0x90}, 0x2}, {{&(0x7f0000000d40)=@generic, 0x80, &(0x7f0000001300)=[{&(0x7f0000000dc0)=""/141, 0x8d}, {&(0x7f0000000e80)=""/68, 0x44}, {&(0x7f0000000f00)=""/159, 0x9f}, {&(0x7f0000000fc0)=""/11, 0xb}, {&(0x7f0000001000)=""/203, 0xcb}, {&(0x7f0000001100)=""/233, 0xe9}, {&(0x7f0000001200)=""/246, 0xf6}], 0x7}, 0x2}], 0x3, 0x10002, &(0x7f0000001440)) 16:22:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa489de5b7b3a40edfb3595c0444e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x48080fffffffe) getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./bus\x00', &(0x7f0000000240)='trusted.overlay.redirect\x00', &(0x7f0000000280)='./file0\x00', 0x8, 0x1) creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) [ 3043.633203] FAT-fs (loop3): bogus number of reserved sectors [ 3043.663236] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3043.684408] audit: type=1400 audit(1562084522.431:137): avc: denied { bind } for pid=9432 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 3043.729587] FAT-fs (loop3): bogus number of reserved sectors [ 3043.742937] FAT-fs (loop3): Can't find a valid FAT filesystem 16:22:02 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x2) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00a32cdc61f1dcc05db8756061e5000100000000bcb2000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r2 = creat(&(0x7f0000000100)='./file1\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000340)="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") 16:22:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x2c000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) [ 3043.935164] FAT-fs (loop3): bogus number of reserved sectors [ 3043.967517] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3044.028044] FAT-fs (loop3): bogus number of reserved sectors [ 3044.054559] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3044.959391] Bluetooth: hci0: command 0xfc11 tx timeout [ 3044.966330] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:22:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5428, &(0x7f00000001c0)) 16:22:03 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x2, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000080)='./bus/../file0\x00', r0}, 0x10) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 16:22:03 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66712e666174000204010202000270fff8", 0x7}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r0) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x807) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)={0x0, 0x0, 0xc5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000440)={r2, 0x80000, r0}) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="002e000200f1dcc25db8746061e50001000000005700000000aa44e17c3cd10a16eec1d28a70722948ab2f9f7e9b66bcdb79169888f4a47700594b9bbc5ebfe8035edbf26ff34c94691188"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) getpid() prctl$PR_GET_NO_NEW_PRIVS(0x27) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x24, r3, 0x400, 0x70bd2b, 0x25dfdbff, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x96a4}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x800) socket$bt_cmtp(0x1f, 0x3, 0x5) sched_setattr(0x0, 0x0, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000600)='NET_DM\x00') ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000640)) creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = msgget(0x1, 0x100) msgctl$IPC_STAT(r5, 0x2, &(0x7f0000000680)=""/204) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000340)={0x3, @null, r4}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) 16:22:03 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x3) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800003}) 16:22:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x3f000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:22:03 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x2) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e1e6"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) [ 3045.131222] FAT-fs (loop3): bogus number of reserved sectors [ 3045.145216] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3045.233251] FAT-fs (loop3): bogus number of reserved sectors [ 3045.248853] FAT-fs (loop3): Can't find a valid FAT filesystem 16:22:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x40000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:22:04 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) truncate(&(0x7f0000000000)='./bus\x00', 0xcd3) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)=0x40, 0x4) getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 16:22:04 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x3) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800003}) 16:22:04 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x2) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746082e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r2 = creat(&(0x7f0000000100)='./file1\x00', 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000240)={0x0, 0xfffffffffffffffc}, &(0x7f0000000280)=0x8) r4 = syz_open_dev$dspn(&(0x7f0000000500)='/dev/dsp#\x00', 0x400, 0x2441) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000580)={r3, 0xec}, 0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000440)={r3, 0x64, "1f0b55f54ca6213177fb0dbeff1a89434255d96db340cb00336831f2d2da30f7025c91c3dddc857d117e1457fd0abbb766e15731b8b0fb65eba2eec829914b8745f5a3d2e4c56887b85a7c0c13ff34f96957de8f01b28a896cbffa89bceffa47422b1d7b"}, &(0x7f00000004c0)=0x6c) ioctl$KDGETLED(r1, 0x4b31, &(0x7f00000001c0)) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, &(0x7f0000000340)="548f42bce60f57f9cccc8330d8b848f9262a5104671a69d8fd63d99d2c1e6f402099f194f882fa0d32e5a4800adc5d93840d42bea37460e5f3d63b7d50316b6b6138f5e0459294c8434281d723acede9af6eadfe69486890b36cf137a914e11605096b56e6370c5fe1c3c3bf6da9e58ab4964edd0775f5e67ff7b3c2f9a208cd06072574b954521ffcf447d3d2d87eab3da9eb83f8984947d5e4de85684f6bfc53054c712f185a1099ee7c50997ab2b172f100d5a76185cd17ae3c8c0f06f9b089285d7b1443d55461706ffb0b7eeccdb9af38d93a23b50f8d44b5b533ff166a91a9508ff931893b5695572806af7278", 0xf0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) [ 3045.446495] FAT-fs (loop3): bogus number of reserved sectors [ 3045.471830] FAT-fs (loop3): Can't find a valid FAT filesystem 16:22:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) perf_event_open(0x0, 0x0, 0x12, 0xffffffffffffff9c, 0x9) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) 16:22:04 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) io_setup(0x1, &(0x7f00000000c0)=0x0) io_submit(r2, 0x4, &(0x7f0000000680)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x9, r1, &(0x7f0000000380)="b66f0c0368091b63a1c65365acdb5deef5fbc35b831911b99618bf44fb4643646d1c5893fe76ca61390b344b63d49e666b0cbacf01b1621ff82026395ff20a7524b071256c2fda370128feac750ecfe731b8008e828b56d40569cfa1a1a3ebaf8746afc876542009f702c2c61250f6ba29f951f7973b6897dd106a6c9e06d9755d2a5853e1365cb71d8b77cce9d4445424580010efb11b166338ca38e2b0c96aabd664faa53bf6cb82f249d4fa73fd75dfcc95256237ca2fe4ecb2af7462f901a4db72efce719680", 0xc8, 0x10000, 0x0, 0x2}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x1, r1, &(0x7f0000000580)="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", 0xfa, 0xf8, 0x0, 0x1, r0}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x27cc, r1, &(0x7f00000001c0)="00d54d03852f99cf56a07f3c03d530a555807862527bfca267f12b43ebfd3e22bbaec77542219db2a40c82e0f9e5addbb3c7999567ea67fc9c5e85ed9a73b1", 0x3f, 0xca, 0x0, 0x0, r1}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1f, r1, &(0x7f0000000480)="569b883fb69b0a54fd4af14cbe1650625dc0b04f0ab52a27f4e740204ab55af87b508b03f32a55f9b38783b16790fba0f9912d60227b37fbef18902317bfe4e0373450808dc3c49c2c87537b2460510f9110b3b3926fff6510b7659fa5ca4237d49d6654aacc6ed948954e1a3857", 0x6e, 0x6, 0x0, 0x1, r0}]) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000006c0)={{0xffffffffffffffff, 0x0, 0x0, 0x2, 0xad9e}}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) r4 = perf_event_open(0x0, r3, 0x0, r0, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000080)) getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$VT_ACTIVATE(r4, 0x5606, 0x29a) [ 3045.606638] FAT-fs (loop3): bogus number of reserved sectors [ 3045.627526] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3047.199382] Bluetooth: hci0: command 0xfc11 tx timeout [ 3047.199436] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:22:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5437, &(0x7f00000001c0)) 16:22:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x45040000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:22:06 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x2) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa441b7c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000240)={0x1, 0x1, @start={0x10000, 0x1}}) creat(&(0x7f0000000100)='./file1\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) 16:22:06 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x8, 0x7f, 0x8, 'queue1\x00', 0x100}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 16:22:06 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(0x0, 0x3) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800003}) 16:22:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="002e0090c7a15db8746061e50001000100000080000000ab44e17c00"/40], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) 16:22:06 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(0x0, 0x3) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800003}) [ 3047.339751] FAT-fs (loop3): bogus number of reserved sectors [ 3047.345719] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3047.443275] FAT-fs (loop3): bogus number of reserved sectors [ 3047.469631] FAT-fs (loop3): Can't find a valid FAT filesystem 16:22:06 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') getpid() sched_setattr(0x0, 0x0, 0x0) clock_getres(0x7, &(0x7f0000000000)) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r1 = creat(0x0, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 16:22:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x48000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:22:06 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(0x0, 0x3) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800003}) 16:22:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000280)=@assoc_value, &(0x7f0000000340)=0x8) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) r2 = perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000380)=0x0) getpriority(0x0, r4) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) getpid() ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0x0, 0x1ff, 0x2, 0x9}]}) read$eventfd(r3, &(0x7f0000000080), 0x8) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) [ 3047.733807] FAT-fs (loop3): bogus number of reserved sectors 16:22:06 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800003}) [ 3047.800672] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3047.907215] FAT-fs (loop3): bogus number of reserved sectors [ 3047.977106] FAT-fs (loop3): Can't find a valid FAT filesystem 16:22:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x543e, &(0x7f00000001c0)) 16:22:08 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x2) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f00000001c0)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r2 = getuid() r3 = getegid() r4 = geteuid() write$P9_RSTATu(r0, &(0x7f0000000240)={0x64, 0x7d, 0x1, {{0x0, 0x4e, 0x9a02, 0x4, {0x5, 0x0, 0x5}, 0x10000, 0x20, 0x10000, 0x3, 0x3, 'syz', 0x0, '', 0x13, '.&keyringsecurity\x10,', 0x5, 'vfat\x00'}, 0x1, ',', r2, r3, r4}}, 0x64) creat(&(0x7f0000000100)='./file1\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) 16:22:08 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x20) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x800000000000) unlink(&(0x7f0000001e00)='./bus\x00') getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 16:22:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17cca47062774b761b9fb1c87fbe3c6ee6317804ff092d18099dd51c45b37fe520842f69333c4a01e05bb1c2e030e06576cd7d39a38f778820d"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000080)='./file1\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) 16:22:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x4c000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:22:08 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800003}) [ 3049.439604] Bluetooth: hci0: command 0xfc11 tx timeout [ 3049.445203] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:22:08 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800003}) [ 3049.521649] FAT-fs (loop3): bogus number of reserved sectors [ 3049.527809] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3049.609951] FAT-fs (loop3): bogus number of reserved sectors [ 3049.617807] Bluetooth: hci0: Frame reassembly failed (-84) [ 3049.623830] Bluetooth: hci0: Frame reassembly failed (-84) [ 3049.661073] FAT-fs (loop3): Can't find a valid FAT filesystem 16:22:08 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800003}) 16:22:08 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) unlink(&(0x7f0000001e00)='./bus\x00') getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 16:22:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x2) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r0, r2, &(0x7f0000000240), 0x4) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r3 = creat(&(0x7f0000000100)='./file1\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x5004, 0x0, 0x0, r3, 0x8}) 16:22:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x51040000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:22:08 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) [ 3049.915059] FAT-fs (loop3): bogus number of reserved sectors [ 3049.939852] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3049.998989] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 3050.006712] FAT-fs (loop4): Filesystem has been set read-only [ 3050.033198] FAT-fs (loop3): bogus number of reserved sectors [ 3050.054384] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3051.679397] Bluetooth: hci0: command 0xfc11 tx timeout [ 3051.679425] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:22:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5441, &(0x7f00000001c0)) 16:22:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="002e0200f1dcc05d6c830000000000000000000000000000aa44e100"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) 16:22:10 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x2) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) setsockopt$ax25_int(r1, 0x101, 0xe, &(0x7f00000001c0)=0x8000, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) 16:22:10 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x28100010}, 0xc) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x802, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 16:22:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x52040000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:22:10 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) 16:22:10 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) [ 3051.848905] FAT-fs (loop3): bogus number of reserved sectors [ 3051.905586] FAT-fs (loop3): Can't find a valid FAT filesystem 16:22:10 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) poll(&(0x7f0000000000)=[{r1, 0x100}, {r1, 0x400}, {r0, 0x8400}, {r0, 0xc6cc}, {r0, 0x8000}], 0x5, 0x5f52) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') getpid() ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000080)={0x4, 0x7, 0xa1e, 0x5, 0x6, 0x4}) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 16:22:10 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x2) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="002e0002c1f0dc1fc05d503645ab8bdc557f0400000098a4000209007dd62c3b9e33a11653f5000100000000000500000000000000e5439426dfae13d788fcf2c20efe5ca4760cee3e42720f04b5a2bcb9035b4456ab22f1791501c110c9d6b6f00c78779ed44dffc4c8cdafd64aa6262a60f8b1e3095374b6b21a5ee61b64aa25e8b343e970c98bf03eacae9d777590db46a275a682d435fbd36980c900"/180], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) openat$urandom(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x400, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) 16:22:10 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)) [ 3051.990960] FAT-fs (loop3): bogus number of reserved sectors [ 3052.002041] FAT-fs (loop3): Can't find a valid FAT filesystem 16:22:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x53040000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) [ 3052.065872] Bluetooth: hci0: Frame reassembly failed (-84) 16:22:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="002ea17935844c25a4400000aa44e17cd0e27e2d4f41145a98fbebfa02e07143f8963c6ff3ec89a81b275052a8fa66a7d32bfceac8b8fbbe58f5a56696ab41349af116c99f3ce167a8906846b205dea3bbe769c086d96aad6fdcb3a42d2f90865bc2085347e217df7cee589a7082db6e979ec5d8c8e0ab91bb2292b203951129a0c20beb249901a020804f4c474698769c30441cd10882f9aa6f8e012c7f57ab0e5c97588d89d741b8bc74b921691d276f0be3663430ded0c51395fc4fe948ea12ae3d45f8515c2c6927024583abbc13ef4d26"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) getpid() sched_setattr(0x0, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000240)={'filter\x00', 0x4}, 0x68) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) [ 3052.200267] FAT-fs (loop3): bogus number of reserved sectors [ 3052.237308] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3052.313299] FAT-fs (loop3): bogus number of reserved sectors [ 3052.332270] FAT-fs (loop3): Can't find a valid FAT filesystem 16:22:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5450, &(0x7f00000001c0)) 16:22:12 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)) 16:22:12 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000380)=ANY=[@ANYBLOB="0008000000000000030000000000000003000000ffa438cc5a1e23c06e000000"]) unlink(&(0x7f0000001e00)='./bus\x00') getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(0x0, 0x1) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 16:22:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x54040000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:22:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) socket$pptp(0x18, 0x1, 0x2) write$binfmt_aout(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c25ce81a7dbcddbbcf84ef1ceffd848889163caeb0aca428caf1b71279fbd2d100431719fa7ef3096b7f6c7b22644810ae43f339fceafb853e782ab4b133176c9650117818556d3de31a8c196432fdc4aa91e158807948846fe8a9fb481e36b04bd5bc4e8c4eb0d4ded453c97e929e73b091d6908d0cdaebbbed4ab16fe8ca04d86bfcec2e0b5a5e84bbad2fb26d41f56177872e32fd7b6303b3f5caef292c267cf3c39883e40b285c64b939a291e2689fe549deb"], 0x1d) r2 = perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r3 = getpid() sched_setattr(0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "c00643d0f28f3853", "0a174c4959c1e51e8780e8fdf3d4e9e1", "4bded58c", "9b8d435da87d55aa"}, 0x28) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) fcntl$lock(r2, 0x26, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x9, r3}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) 16:22:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer\x00', 0x64000, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000880)={'filter\x00', 0x7, 0x4, 0x480, 0x140, 0x258, 0x140, 0x398, 0x398, 0x398, 0x4, &(0x7f00000004c0), {[{{@arp={@loopback, @loopback, 0x0, 0xff, @empty, {[0xff, 0xff, 0xa18312170a484ef1, 0xff, 0xff, 0xff]}, @mac=@random="f93869a2902e", {[0xff, 0xff, 0x0, 0xff, 0xff]}, 0x1f, 0x6, 0x9000000000000000, 0xfffffffffffffffa, 0x3, 0x5, 'bcsf0\x00', 'netdevsim0\x00', {0xff}, {}, 0x0, 0x4}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @broadcast, @multicast2, 0x2}}}, {{@uncond, 0xf0, 0x118}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x46, 0x2}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="c340a8996060", @empty, @loopback, @empty, 0xd, 0xffffffff}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r2) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="002e000200f1dcc07984686362e2cd2dd59af6ce741ac8445db8746061e50001000000000000000000aa44e1782321acdfee66350154c3c7eab9fa38cdd137a5b6ff292d6b3d5614338ec7f0fb736ede57f8024bc0040166e5d4c32f0ed20f9f4e90618aab0f71548286f9e352f860dcda95f3b8f61229ea71f23cab93c08794bfcd5ecfa868961b52d697e290355db22dcf5b0120d424ac8e8d98916dc1c7ceba6c1f24af1c99055ff62e69253268562fce7a106cbb8db1b76a3fb2b38772154954574501197aaff31490ec0d9d274ba7c7f91063a86072aa286c9e53cb48ff48859ad39cee5753af851a37df63413987826afd1c8a60d43f899f9a9b7a33"], 0x1d) r4 = perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x80000001}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={r5, 0x101}, &(0x7f0000000280)=0x8) sched_setattr(0x0, 0x0, 0x4) accept4$inet(r0, 0x0, &(0x7f0000000440), 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x4, 0x0, 0x6, 0xffffffffffffffff, 0x2}) [ 3054.079373] Bluetooth: hci0: command 0xfc11 tx timeout [ 3054.079435] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:22:12 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)) [ 3054.169516] FAT-fs (loop3): bogus number of reserved sectors [ 3054.196135] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3054.204560] Bluetooth: hci0: Frame reassembly failed (-84) [ 3054.265972] FAT-fs (loop3): bogus number of reserved sectors [ 3054.279142] FAT-fs (loop3): Can't find a valid FAT filesystem 16:22:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, 0x0) 16:22:13 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) r0 = socket$kcm(0x10, 0x802, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e0000001c00810ee00f80ecdb4cb9f207c804a00d000000430006fb0a0002000e0ada1b40d805000600c50083b8", 0x2e}], 0x1}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0xfffffffffffffffd}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000380)=ANY=[@ANYRES32=r3, @ANYBLOB="d5000000a305f629c1b5270c518a113354c7f6478645333cfa71ac60009b7313df0590edbaa685b6d896727d05273c4031e899387c8c0806f27bf2cfd9b9cbca162266805f8493a14579ae4ee476ed80defe22453ba0c5a5087826cfc43d03636c8ec3b285407691da056a98cafee7ebbc2d8a84f2c8de62532f619100c6bde2fdbc65a829414be344aa87f96b7f2043e85322a99fa6908b36e71ecd54df3db5c20b5840c06e4f9cd08d2cf2d9c773fc1262b93670bf168837ebeda3d09e9d44b8"], &(0x7f0000000100)=0xdd) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000000)=0x3) unlink(&(0x7f0000001e00)='./bus\x00') r4 = getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(0x0, 0x1) ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f0000000480)={0x13, "af6cb6ffefe81e5a4c2bb6b5841a3596e034ebd653079783b2fcd09298c7aa5060b5b725441800333512a10243acaa556971c2864d9da46b7ca8fbab51420615813e7180e1c79cbbb6c910534f1086a1943486d039127c9e9b3ec7da8c6d2747595ce9d2f4428aba70895aae22ead214371c9efe17b546b37bcaaa3c8578591e"}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) write$FUSE_LK(r2, &(0x7f0000000180)={0x28, 0xfffffffffffffff5, 0x8, {{0xffff, 0x0, 0x2, r4}}}, 0x28) 16:22:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x55040000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:22:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) write$P9_RMKNOD(r1, &(0x7f00000001c0)={0x14, 0x13, 0x1, {0x3, 0x1, 0x6}}, 0x14) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r2) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000b38000000aa44e17c7a5189d4"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) getpid() ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, 0xfffffffffffffffd) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000240)='tls\x00', 0x4) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) 16:22:13 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast=0xe0000001}, @icmp}}}}, 0x0) socket(0x2, 0x0, 0x5) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e00c1d) [ 3054.548342] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 3054.579589] FAT-fs (loop3): bogus number of reserved sectors [ 3054.611784] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3054.722124] FAT-fs (loop3): bogus number of reserved sectors [ 3054.728664] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3056.239393] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:22:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5451, &(0x7f00000001c0)) 16:22:15 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 16:22:15 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x2) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f00000001c0)='./file1\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) 16:22:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x56040000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:22:15 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x5c64, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='coredump_filter\x00') pread64(r0, 0x0, 0x0, 0x0) 16:22:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="002e000200f1dcc05db87460d6e998f10000000000000000007cdf91a232daa554c10e0e654e752baf6256dcce53097b699628aa2518dfad55"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) add_key(&(0x7f0000000180)='pkcs7_test\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000240)="eaadc524ce9dcdcfa3987de8e0cd83ef7c5874bfa43bb80cecc1971aa534954a4a1ae3d457c90a56b31fb54ba53e0a4c05ddee11e79531cf9fd664a52ba8ba40778d7e7f2eb2aed0006c07186e", 0x4d, 0xfffffffffffffffd) getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) [ 3056.402117] FAT-fs (loop3): bogus number of reserved sectors [ 3056.422222] FAT-fs (loop3): Can't find a valid FAT filesystem 16:22:15 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000000)='./bus\x00', 0x2, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) [ 3056.487494] FAT-fs (loop3): bogus number of reserved sectors [ 3056.495554] Bluetooth: hci0: Frame reassembly failed (-84) [ 3056.500024] FAT-fs (loop3): Can't find a valid FAT filesystem 16:22:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x57040000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:22:15 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x2) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db874601e7d0001003e74187a00000000aa44e17c"], 0x1d) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000240)={'filter\x00'}, &(0x7f00000001c0)=0x44) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) 16:22:15 executing program 5: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) r0 = socket$kcm(0x10, 0x802, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e0000001c00810ee00f80ecdb4cb9f207c804a00d000000430006fb0a0002000e0ada1b40d805000600c50083b8", 0x2e}], 0x1}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0xfffffffffffffffd}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000380)=ANY=[@ANYRES32=r3, @ANYBLOB="d5000000a305f629c1b5270c518a113354c7f6478645333cfa71ac60009b7313df0590edbaa685b6d896727d05273c4031e899387c8c0806f27bf2cfd9b9cbca162266805f8493a14579ae4ee476ed80defe22453ba0c5a5087826cfc43d03636c8ec3b285407691da056a98cafee7ebbc2d8a84f2c8de62532f619100c6bde2fdbc65a829414be344aa87f96b7f2043e85322a99fa6908b36e71ecd54df3db5c20b5840c06e4f9cd08d2cf2d9c773fc1262b93670bf168837ebeda3d09e9d44b8"], &(0x7f0000000100)=0xdd) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000000)=0x3) unlink(&(0x7f0000001e00)='./bus\x00') r4 = getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(0x0, 0x1) ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f0000000480)={0x13, "af6cb6ffefe81e5a4c2bb6b5841a3596e034ebd653079783b2fcd09298c7aa5060b5b725441800333512a10243acaa556971c2864d9da46b7ca8fbab51420615813e7180e1c79cbbb6c910534f1086a1943486d039127c9e9b3ec7da8c6d2747595ce9d2f4428aba70895aae22ead214371c9efe17b546b37bcaaa3c8578591e"}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) write$FUSE_LK(r2, &(0x7f0000000180)={0x28, 0xfffffffffffffff5, 0x8, {{0xffff, 0x0, 0x2, r4}}}, 0x28) 16:22:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/validatetrans\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) accept4$unix(r3, 0x0, &(0x7f00000001c0), 0x80000) getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) [ 3056.710050] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 3056.722161] FAT-fs (loop2): bogus number of reserved sectors [ 3056.728367] FAT-fs (loop2): Can't find a valid FAT filesystem [ 3056.729136] FAT-fs (loop3): bogus number of reserved sectors [ 3056.753545] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3056.863332] FAT-fs (loop3): bogus number of reserved sectors [ 3056.885829] FAT-fs (loop3): Can't find a valid FAT filesystem 16:22:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5437, &(0x7f00000001c0)) 16:22:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5452, &(0x7f00000001c0)) 16:22:17 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, @name="053793f21f45b9250108c324e17103d4fe1a8747f4cffdb1fad27874170e1187"}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000100)={0x0, 0x8, 0x2c, &(0x7f00000000c0)=0x5}) creat(0x0, 0x1) getsockopt$inet6_dccp_buf(r1, 0x21, 0xf, &(0x7f0000000380)=""/245, &(0x7f0000000080)=0x9aea60ce9a556f96) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 16:22:17 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x2) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db87460447dbfe200f0d6085b0f000061000000"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r2 = creat(&(0x7f0000000100)='./file1\x00', 0x0) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000001c0), &(0x7f0000000240)=0x8) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) 16:22:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x58040000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:22:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$VIDIOC_DBG_G_REGISTER(r1, 0xc0385650, &(0x7f0000000080)={{0x4, @addr=0x1}, 0x8, 0x3, 0x7}) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) [ 3058.559628] Bluetooth: hci0: command 0xfc11 tx timeout [ 3058.565496] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 3058.627782] FAT-fs (loop3): bogus number of reserved sectors [ 3058.644972] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3058.667053] Bluetooth: hci0: sending frame failed (-49) [ 3058.723627] FAT-fs (loop3): bogus number of reserved sectors 16:22:17 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x4800, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) lgetxattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)=@known='trusted.overlay.redirect\x00', &(0x7f0000000380)=""/236, 0xec) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getflags(r1, 0x409) unlink(&(0x7f0000001e00)='./bus\x00') getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) [ 3058.772355] FAT-fs (loop3): Can't find a valid FAT filesystem 16:22:17 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000180)) r1 = gettid() perf_event_open(0x0, r1, 0xe, r0, 0x3) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x120) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @empty, @multicast1}, &(0x7f00000002c0)=0xc) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {0x80}}) prctl$PR_GET_FP_MODE(0x2e) r3 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0x12) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x6, 0x6e0, [0x20000740, 0x0, 0x0, 0x20000994, 0x20000c20], 0x0, &(0x7f0000000440), &(0x7f0000000740)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff020000000b00000001000000888f7465616d3000000000000000000000006970365f76746930000000000000000069726c616e30000000000000000000006272696467653000000000000000000000000000000000ffffffffff916ec27e905900ffffffa2009e0000000e01000046010000766c616e00000000000000000000000000000000000000000000000000000000080000000000000000000700e8ff02016172707265706c7900000000000000000000000000000000000000000000000010000000000000000000000000000000ffffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000feffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa290000ffffffff000000000500000002000000000c73797a6b616c6c6572300000000000006c6170623000000000000000000000007665746830000000000000000000000076657468305f746f5f626f6e64000000aaaaaaaaaaaaff00ffffff00ffffffffffffffffff0000ff6e000000a6000000de0000006172707265706c79000000000000000000000000000000000000000000000000100000000000000073f20392f0270000fcffffff000000006172707265706c790000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff020000000300000001000000fbff65727370616e30000000000000000000697036677265746170300000000000006970365f76746930000000000000000069606464703000000000000000000000aaaaaaaaaabbffff0000ff0000000000000000ffffff00ffa6000000160100004e010000636c7573746572000000000000000000000000000000000000000000000000001000000000000000020000009841000006000000000000006172707265706c790000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000fcffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaaaa000000000000000000006172707265706c790000000000000000000000000000000000000000000000001000000000000000ffffffffffff000000000000000000000500000020000000655873797a5f74756e0000000000000000006272696467655f736c6176655f310000726f736530000000000000000000000067726574617030000000000000000000aaaaaaaaaabb00ffffff0000aaaaaaaaaa2a0000ff0000ff6e000000d60000000e010000736e6174000000000000000000538ea6a044881941000000000000000000000000000000000000001000000000000000907daa33bd240000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000800000000000000ffffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb000010000000000000000000007c1e130bf3b63606e26cf6a29c00000000000000000000000000000000000000000000000000000000000000000004242f916c8c956788b23e696aa2000000ffffffff0200000003000000270000000017626373683000000000000000000000006e657464657673696d3000000000000069703665727370616e30000000000000766c616e300000000000000000000000ffffffffffffff00ff000000294ac8eea9c400ffffffffff9e0000009e00000016010000636f6e6e6c6162656c0000000000000000000000000000000000000000000000080000000000000000020200000000006e666c6f6700000000000000000000000000000000000000000000000000000050000000000000000200000005000500000000000272a6aa692c4322731424ccaa91d990a730a238e00d4a0c8da79096e7c37a2b54d6adf60430daccec097352452f17040544362bf81c9213554097188594372b00000000110000000000000088be76657468315f746f5f627269646765006970365f7674693000000000000000000000000000000000000000000000000073797a5f74756e000000000000000000aba8b04f8ee7ffffffff0000aaaaaaaaaa27ffffff0000ffd6020000560300008e0300006270660000000000000000000000000000000000000000000000000000000000100200000000000004004dd4"]}, 0x75a) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000380)) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) msgget(0x3, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) creat(&(0x7f0000000280)='./bus\x00', 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, 0x0) 16:22:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x59040000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:22:17 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xfff, 0x40) recvfrom(r0, &(0x7f0000000240)=""/103, 0x67, 0x2, &(0x7f0000000480)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x80) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r0, &(0x7f00000001c0)="9b722fb6989d95a3982628", &(0x7f0000000500)}, 0x20) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x2) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1d) r3 = perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x6, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r3, &(0x7f0000000000), 0x8080fffffffe) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000500)='/dev/snd/pcmC#D#p\x00', 0x101, 0x20000) creat(&(0x7f0000000100)='./file1\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$unix(0x1, 0x5, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f00000005c0)={0x0, 0x7, 0xffffffffffff0c42, 0x554}, 0x10) 16:22:17 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)={0x13, 0x65, 0xffff, 0x7580, 0x6, '9P2000'}, 0x13) unlink(&(0x7f0000001e00)='./bus\x00') getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 16:22:17 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800003}) [ 3059.108579] FAT-fs (loop3): bogus number of reserved sectors [ 3059.119679] Bluetooth: hci1: command 0xfc11 tx timeout [ 3059.125186] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 3059.142875] FAT-fs (loop3): Can't find a valid FAT filesystem 16:22:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x5a040000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) [ 3059.513927] FAT-fs (loop3): bogus number of reserved sectors [ 3059.529272] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3060.719538] Bluetooth: hci0: command 0xfc11 tx timeout [ 3060.725006] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:22:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x545d, &(0x7f00000001c0)) 16:22:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x800000000e004, 0x0, &(0x7f0000000140), 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) accept$unix(r1, &(0x7f0000000240)=@abs, &(0x7f0000000140)=0x6e) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e13c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) 16:22:19 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x2) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000150000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) 16:22:19 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000000)={0x10001, 0x7fff00000, 0x1, 0xfa32, 0x7, 0xfffffffffffffffc}) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 16:22:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x5b040000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:22:19 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x3) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800003}) [ 3060.879855] FAT-fs (loop3): bogus number of reserved sectors [ 3060.899803] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3060.949272] Bluetooth: hci0: Frame reassembly failed (-84) [ 3060.978699] FAT-fs (loop3): bogus number of reserved sectors 16:22:19 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000300)='syz0\x00') fchdir(r0) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000380)="9b53cd468be83c3652ec0ece25066095583d8e1b49a1b6a5fe8546e5ede758dff1cdeaa76aef813eb637ab84c597bd136bf34bbd2c05b8d7f51416362eecf2840f92d5daf81d1fd42425ed56c411c19d147144544a9b18c7def698c1bd85bbbff57409cb7e4e7a3dff191316b22e078a151a52bd310ec6c1dbe4a67cd56acb272bb323f33617ec676a2bf04c20db8d3c267245c5898001bedb897df2d5fa34658cdc8b5f1df0ecb6254f738fabcb82dbdff1872ae4b6720d43eb030342216e7980cfd4512d8bea6f4f0a", 0xca, 0xfffffffffffffff8) stat(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r1, r2, r3) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) creat(0x0, 0x1) ioctl$sock_bt_cmtp_CMTPCONNDEL(r4, 0x400443c9, &(0x7f0000000500)={{0x7fff, 0x4, 0x1ff, 0x0, 0xffff, 0xcc}, 0x1cc}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 16:22:19 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x2) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x2, 0x3}, 0x8) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f00000001c0)='./file1\x00', 0x200000) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) [ 3061.135388] FAT-fs (loop3): Can't find a valid FAT filesystem 16:22:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, &(0x7f0000000080)="41a97cdb7ed00449b3f6db867d6c6d8a5252217b550c4319b0e7bf7a863eb0405c0f", &(0x7f0000000880)=""/4096}, 0x18) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) 16:22:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x5c040000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:22:20 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0xb49c, 0x401, {0x0, @in={{0x2, 0x4e23, @remote}}, 0x6, 0x1, 0x100000001, 0x8, 0x8001}}, &(0x7f0000000000)=0xb0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000180)={0x5000, 0x1, 0x101, 0x100000001, r2}, &(0x7f00000001c0)=0x10) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000300)) creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) [ 3061.426686] FAT-fs (loop3): bogus number of reserved sectors 16:22:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000240)=0x1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e500010000006b3638ac56da9b2ae17c4f962b66e6ce774cb8de96bbad8b32cfe8b971769e7d055aaf79fb1b4f32174321b5831fa2b11786feba8126534e2f7e7b642555d145b566a5ca70f3e1088241e3b7b365c2d03d73c0d635b709a3bb76fe68f90e78cb0a0c87c669621096b6f8519468b6dbf8ad"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) [ 3061.473579] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3061.545876] FAT-fs (loop3): bogus number of reserved sectors [ 3061.559551] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3062.959453] Bluetooth: hci0: command 0xfc11 tx timeout [ 3062.965019] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:22:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5460, &(0x7f00000001c0)) 16:22:21 executing program 5 (fault-call:2 fault-nth:0): perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800003}) 16:22:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="002e000200f1dcc05d2b1e6061e5000100edeeebecdd016b3baa44027cd7fcd686e6fc902854ada83c05295edcd66c34e6ce7f174b334d5c3cea"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) 16:22:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x60000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:22:21 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, 0x0) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000000)={0x800, 0x400000000000, 0x1}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 16:22:21 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x2) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0xa0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) [ 3063.104136] FAULT_INJECTION: forcing a failure. [ 3063.104136] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3063.126370] FAT-fs (loop3): bogus number of reserved sectors [ 3063.149675] CPU: 1 PID: 16369 Comm: syz-executor.5 Not tainted 4.19.56 #28 [ 3063.156943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3063.156949] Call Trace: [ 3063.156980] dump_stack+0x172/0x1f0 [ 3063.157004] should_fail.cold+0xa/0x1b [ 3063.178400] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 3063.184007] ? ___might_sleep+0x163/0x280 [ 3063.188361] ? __might_sleep+0x95/0x190 [ 3063.192546] __alloc_pages_nodemask+0x1ee/0x760 [ 3063.197353] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3063.202574] ? __alloc_pages_slowpath+0x2870/0x2870 [ 3063.207711] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 3063.209458] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3063.213355] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 3063.213377] alloc_pages_vma+0xdd/0x5a0 [ 3063.213397] shmem_alloc_page+0xc0/0x180 [ 3063.233935] ? shmem_swapin+0x1a0/0x1a0 [ 3063.238099] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3063.243856] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 3063.248974] ? __vm_enough_memory+0x324/0x5a0 [ 3063.253675] shmem_alloc_and_acct_page+0x165/0x970 [ 3063.253698] shmem_getpage_gfp+0x44a/0x3960 [ 3063.253724] ? shmem_add_to_page_cache+0xd30/0xd30 [ 3063.253740] ? lock_downgrade+0x810/0x810 [ 3063.253758] ? kasan_check_read+0x11/0x20 [ 3063.253773] shmem_fallocate+0x60f/0xc60 [ 3063.253789] ? find_held_lock+0x35/0x130 [ 3063.253809] ? shmem_setattr+0xc80/0xc80 [ 3063.253823] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3063.253839] ? lockdep_hardirqs_on+0x415/0x5d0 [ 3063.253853] ? retint_kernel+0x2d/0x2d [ 3063.253873] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3063.273340] ? retint_kernel+0x2d/0x2d [ 3063.273356] ? shmem_setattr+0xc80/0xc80 [ 3063.273383] ? __sb_start_write+0x267/0x360 [ 3063.273403] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3063.303987] ? shmem_setattr+0xc80/0xc80 [ 3063.304006] vfs_fallocate+0x4aa/0x9d0 [ 3063.304030] ioctl_preallocate+0x197/0x210 [ 3063.304049] ? ioctl_file_clone+0x120/0x120 [ 3063.327287] ? __fget+0x340/0x540 [ 3063.327313] ? __might_sleep+0x95/0x190 [ 3063.327336] do_vfs_ioctl+0x1170/0x1380 [ 3063.327350] ? selinux_file_ioctl+0x46f/0x5e0 [ 3063.327367] ? selinux_file_ioctl+0x125/0x5e0 [ 3063.366357] ? ioctl_preallocate+0x210/0x210 [ 3063.371060] ? selinux_file_mprotect+0x620/0x620 [ 3063.376125] ? iterate_fd+0x360/0x360 [ 3063.380325] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3063.386169] ? fput+0x128/0x1a0 [ 3063.389679] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3063.395391] ? security_file_ioctl+0x8d/0xc0 [ 3063.395411] ksys_ioctl+0xab/0xd0 [ 3063.395429] __x64_sys_ioctl+0x73/0xb0 [ 3063.395446] do_syscall_64+0xfd/0x620 [ 3063.395465] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3063.395476] RIP: 0033:0x4597c9 [ 3063.420061] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3063.439541] RSP: 002b:00007f3737d2dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3063.447403] RAX: ffffffffffffffda RBX: 00007f3737d2dc90 RCX: 00000000004597c9 [ 3063.454916] RDX: 00000000200002c0 RSI: 0000000040305828 RDI: 0000000000000004 [ 3063.454925] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3063.454933] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3737d2e6d4 [ 3063.454942] R13: 00000000004c1f6e R14: 00000000004d5090 R15: 0000000000000005 16:22:22 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x7, 0x52101) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000080)={0x0, "1c771d1a8fde02fbd3ca542aee3e30f03dbce665c1a79248d22ef9fb6af46f66", 0x1, 0x7, 0x101, 0xc170c, 0x2}) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:ping_exec_t:s0\x00', 0x21, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 16:22:22 executing program 5 (fault-call:2 fault-nth:1): perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800003}) [ 3063.522009] FAT-fs (loop3): bogus number of reserved sectors [ 3063.535082] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3063.548273] Bluetooth: hci0: sending frame failed (-49) 16:22:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x68000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:22:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x2) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) [ 3063.673180] FAULT_INJECTION: forcing a failure. [ 3063.673180] name fail_page_alloc, interval 1, probability 0, space 0, times 0 16:22:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) r2 = perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="002e000280f1d8c05db800aa44e17c00000000000000e900000000000000"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r2, &(0x7f0000000000)=0x2000000000000, 0x8080fffffffe) getpid() r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x11c, r4, 0x208, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x40}]}, @TIPC_NLA_BEARER={0x78, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x150a2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x5, @remote, 0xa53d}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1f}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA={0x38, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x42}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4844}, 0x40000) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) [ 3063.773459] CPU: 0 PID: 16770 Comm: syz-executor.5 Not tainted 4.19.56 #28 [ 3063.780797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3063.790378] Call Trace: [ 3063.792990] dump_stack+0x172/0x1f0 [ 3063.796644] should_fail.cold+0xa/0x1b [ 3063.800735] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 3063.805943] ? ___might_sleep+0x163/0x280 [ 3063.810294] ? __might_sleep+0x95/0x190 [ 3063.814372] __alloc_pages_nodemask+0x1ee/0x760 [ 3063.819145] ? lock_downgrade+0x810/0x810 [ 3063.823484] ? __alloc_pages_slowpath+0x2870/0x2870 [ 3063.828517] ? mark_held_locks+0xb1/0x100 [ 3063.832762] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 3063.838595] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 3063.844237] alloc_pages_vma+0xdd/0x5a0 [ 3063.848339] shmem_alloc_page+0xc0/0x180 [ 3063.852507] ? shmem_swapin+0x1a0/0x1a0 [ 3063.857018] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 3063.862226] ? __vm_enough_memory+0x324/0x5a0 [ 3063.867356] shmem_alloc_and_acct_page+0x165/0x970 [ 3063.872417] shmem_getpage_gfp+0x44a/0x3960 [ 3063.877210] ? shmem_add_to_page_cache+0xd30/0xd30 [ 3063.882375] shmem_fallocate+0x60f/0xc60 [ 3063.886579] ? shmem_setattr+0xc80/0xc80 [ 3063.890739] ? inode_has_perm.isra.0+0x17e/0x210 [ 3063.895747] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3063.900632] ? retint_kernel+0x2d/0x2d [ 3063.904526] ? trace_hardirqs_on_caller+0x6a/0x220 [ 3063.909800] ? __lock_is_held+0xb6/0x140 [ 3063.914068] ? shmem_setattr+0xc80/0xc80 [ 3063.918415] ? rcu_read_lock_sched_held+0x110/0x130 [ 3063.923573] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 3063.928521] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3063.934351] ? shmem_setattr+0xc80/0xc80 [ 3063.938515] vfs_fallocate+0x4aa/0x9d0 [ 3063.942514] ioctl_preallocate+0x197/0x210 [ 3063.946847] ? ioctl_file_clone+0x120/0x120 [ 3063.951274] ? __fget+0x340/0x540 [ 3063.954919] ? __might_sleep+0x95/0x190 [ 3063.959083] do_vfs_ioctl+0x1170/0x1380 [ 3063.963266] ? selinux_file_ioctl+0x46f/0x5e0 [ 3063.968310] ? selinux_file_ioctl+0x125/0x5e0 [ 3063.973213] ? ioctl_preallocate+0x210/0x210 [ 3063.977862] ? selinux_file_mprotect+0x620/0x620 [ 3063.983272] ? iterate_fd+0x360/0x360 [ 3063.987474] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3063.993191] ? security_file_ioctl+0x8d/0xc0 [ 3063.997827] ksys_ioctl+0xab/0xd0 [ 3064.001384] __x64_sys_ioctl+0x73/0xb0 [ 3064.005440] do_syscall_64+0xfd/0x620 [ 3064.009516] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3064.014817] RIP: 0033:0x4597c9 [ 3064.018200] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3064.038004] RSP: 002b:00007f3737d2dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3064.046115] RAX: ffffffffffffffda RBX: 00007f3737d2dc90 RCX: 00000000004597c9 [ 3064.053574] RDX: 00000000200002c0 RSI: 0000000040305828 RDI: 0000000000000004 [ 3064.061022] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3064.068575] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3737d2e6d4 [ 3064.076497] R13: 00000000004c1f6e R14: 00000000004d5090 R15: 0000000000000005 [ 3064.095356] FAT-fs (loop3): bogus number of reserved sectors [ 3064.113307] FAT-fs (loop3): Can't find a valid FAT filesystem 16:22:22 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) [ 3064.183087] FAT-fs (loop3): bogus number of reserved sectors [ 3064.189119] FAT-fs (loop3): Can't find a valid FAT filesystem 16:22:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x40049409, &(0x7f00000001c0)) 16:22:24 executing program 5 (fault-call:2 fault-nth:2): perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800003}) 16:22:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x6b6b6b00, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:22:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) getpid() ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000280)={0x8, 0x3, 0x1, {0x0, 0x8, 0x6, 0x8}}) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000001c0), &(0x7f0000000240)=0x4) ioctl$DRM_IOCTL_AGP_INFO(r3, 0x80386433, &(0x7f0000000080)=""/55) sync_file_range(r2, 0x2, 0x9, 0x1) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) 16:22:24 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x2) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) bind(r0, &(0x7f0000000240)=@x25={0x9, @null=' \x00'}, 0x80) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) openat$smack_task_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/current\x00', 0x2, 0x0) 16:22:24 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(0x0, 0x1) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000000)={0x8, 0x9, 0x556, 0x1ff, 0x10, 0x9}) getsockopt$inet6_int(r1, 0x29, 0x49, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) [ 3065.599427] Bluetooth: hci0: command 0xfc11 tx timeout [ 3065.605115] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 3065.670336] FAULT_INJECTION: forcing a failure. [ 3065.670336] name failslab, interval 1, probability 0, space 0, times 0 [ 3065.681916] CPU: 0 PID: 17213 Comm: syz-executor.5 Not tainted 4.19.56 #28 [ 3065.681926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3065.681930] Call Trace: [ 3065.681961] dump_stack+0x172/0x1f0 [ 3065.681981] should_fail.cold+0xa/0x1b [ 3065.682000] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 3065.682027] __should_failslab+0x121/0x190 [ 3065.682043] should_failslab+0x9/0x14 [ 3065.682060] kmem_cache_alloc+0x47/0x700 [ 3065.699156] ? __lock_acquire+0x6eb/0x48f0 [ 3065.699185] radix_tree_node_alloc.constprop.0+0x1eb/0x340 [ 3065.738208] radix_tree_extend+0x1b4/0x4f0 [ 3065.742770] __radix_tree_create+0x459/0x550 [ 3065.747303] __radix_tree_insert+0xce/0x6b0 [ 3065.752059] ? __radix_tree_create+0x550/0x550 [ 3065.757196] ? lock_acquire+0x16f/0x3f0 [ 3065.761201] ? kasan_check_write+0x14/0x20 [ 3065.765743] ? do_raw_spin_lock+0xc8/0x240 [ 3065.770007] shmem_add_to_page_cache+0x6c7/0xd30 [ 3065.774890] ? shmem_writepage+0xe70/0xe70 [ 3065.779159] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 3065.784470] ? __radix_tree_preload+0x215/0x290 [ 3065.789278] shmem_getpage_gfp+0x1f6f/0x3960 [ 3065.794089] ? shmem_add_to_page_cache+0xd30/0xd30 [ 3065.799050] shmem_fallocate+0x60f/0xc60 [ 3065.803259] ? shmem_setattr+0xc80/0xc80 [ 3065.807808] ? retint_kernel+0x2d/0x2d [ 3065.811903] ? __lock_is_held+0xb6/0x140 [ 3065.816077] ? shmem_setattr+0xc80/0xc80 [ 3065.820206] ? rcu_read_lock_sched_held+0x110/0x130 [ 3065.825556] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 3065.830335] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3065.835990] ? shmem_setattr+0xc80/0xc80 [ 3065.840151] vfs_fallocate+0x4aa/0x9d0 [ 3065.840178] ioctl_preallocate+0x197/0x210 [ 3065.840194] ? ioctl_file_clone+0x120/0x120 [ 3065.840211] ? retint_kernel+0x2d/0x2d [ 3065.840230] ? do_vfs_ioctl+0xca/0x1380 [ 3065.840248] do_vfs_ioctl+0x1170/0x1380 [ 3065.840262] ? selinux_file_ioctl+0x46f/0x5e0 [ 3065.840274] ? selinux_file_ioctl+0x125/0x5e0 [ 3065.840291] ? ioctl_preallocate+0x210/0x210 [ 3065.840304] ? selinux_file_mprotect+0x620/0x620 [ 3065.840323] ? iterate_fd+0x360/0x360 [ 3065.840340] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3065.840355] ? fput+0x128/0x1a0 [ 3065.848848] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3065.870116] ? security_file_ioctl+0x8d/0xc0 [ 3065.870136] ksys_ioctl+0xab/0xd0 [ 3065.870154] __x64_sys_ioctl+0x73/0xb0 [ 3065.870173] do_syscall_64+0xfd/0x620 [ 3065.870190] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3065.870201] RIP: 0033:0x4597c9 [ 3065.870214] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3065.870222] RSP: 002b:00007f3737d2dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 16:22:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x40086602, &(0x7f00000001c0)) 16:22:24 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) 16:22:24 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x2) r1 = open(&(0x7f0000000040)='./bus\x00', 0x202, 0x8000000000) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000900aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f00000001c0)) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) mount$bpf(0x0, &(0x7f0000000240)='./file2\x00', &(0x7f0000000280)='bpf\x00', 0x0, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x9}}, {@mode={'mode', 0x3d, 0x8}}, {@mode={'mode', 0x3d, 0xf0}}, {@mode={'mode', 0x3d, 0x2}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '\\]'}}, {@subj_type={'subj_type', 0x3d, 'syz'}}, {@subj_user={'subj_user', 0x3d, 'vfat\x00'}}]}) creat(&(0x7f0000000100)='./file1\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) 16:22:24 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') getpid() utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)={0x100, 0x4}) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) [ 3065.870236] RAX: ffffffffffffffda RBX: 00007f3737d2dc90 RCX: 00000000004597c9 [ 3065.870244] RDX: 00000000200002c0 RSI: 0000000040305828 RDI: 0000000000000004 [ 3065.870252] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3065.870260] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3737d2e6d4 [ 3065.870271] R13: 00000000004c1f6e R14: 00000000004d5090 R15: 0000000000000005 [ 3066.099401] FAT-fs (loop3): bogus number of reserved sectors [ 3066.105359] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3066.136869] Bluetooth: hci0: Frame reassembly failed (-84) [ 3066.153942] FAT-fs (loop3): bogus number of reserved sectors [ 3066.181567] FAT-fs (loop3): Can't find a valid FAT filesystem 16:22:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x6c000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:22:25 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 16:22:25 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x2) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r2 = creat(&(0x7f0000000100)='./file1\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340)="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", 0xfe, r0}, 0x68) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x1000800, 0x4) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) [ 3066.420183] FAT-fs (loop3): bogus number of reserved sectors [ 3066.450569] FAT-fs (loop3): Can't find a valid FAT filesystem 16:22:25 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800003}) 16:22:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="0001010200f1dcc05db8746061e50001000000200000000000aa445a6e9e481b72fd84c9b4f0dc5a965dd3e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000340)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r3, 0x411, 0x70bd2a, 0x25dfdbfe, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x9, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r4 = creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) accept4$netrom(r4, &(0x7f0000000380)={{0x3, @netrom}, [@null, @null, @remote, @remote, @remote, @remote, @null, @default]}, &(0x7f0000000400)=0x48, 0x800) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) [ 3066.582068] FAT-fs (loop3): bogus number of reserved sectors [ 3066.610102] FAT-fs (loop3): Can't find a valid FAT filesystem 16:22:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x74000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:22:25 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x2) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0000ea00f1dcc05db8740100000001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r0, 0xc0385650, &(0x7f00000001c0)={{0x4, @name="ec18829d3f94124fa2cfb9dcf79b658bdb36a8ab7e39d14cd4ade42970cc7c12"}, 0x8, 0x8001, 0x4}) creat(&(0x7f0000000100)='./file1\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) 16:22:25 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) [ 3066.964433] FAT-fs (loop3): bogus number of reserved sectors [ 3066.990360] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3067.060816] FAT-fs (loop3): bogus number of reserved sectors [ 3067.071176] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3068.159421] Bluetooth: hci0: command 0xfc11 tx timeout [ 3068.164853] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:22:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x40087602, &(0x7f00000001c0)) 16:22:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r3 = creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000080)={0x4, r3}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) 16:22:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7a000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:22:27 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f00000001c0)) fchdir(r0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x2) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000140)={0x2, 0x50313134, 0x9, 0x7, 0x2, @discrete={0x4f7e, 0x80}}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) 16:22:27 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16, 0x3}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r1 = creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getegid() r4 = getuid() mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x48040, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f748f6f64653d3030303030303030301b303030303030363130305a401e83e2163030302c757365725fdc643d", @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r3, @ANYBLOB=',max_read=0x007fff8000000000,blksize=0x0000000000000a00,max_read=0x0000000000010000,blksize=0x0000000000001200,blksize=0x0000000000000e00,allow_other,allow_other,blksize=0x0000000000000000,max_read=0x0000000000000001,uid<', @ANYRESDEC=r4, @ANYBLOB=',subj_user=vfat\x00,pcr=00000000000000000001,\x00']) 16:22:27 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800003}) [ 3068.299608] FAT-fs (loop3): bogus number of reserved sectors [ 3068.299716] FAT-fs (loop2): invalid media value (0x02) [ 3068.311844] FAT-fs (loop3): Can't find a valid FAT filesystem 16:22:27 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x4b47, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800003}) [ 3068.375487] FAT-fs (loop2): Can't find a valid FAT filesystem [ 3068.394859] FAT-fs (loop3): bogus number of reserved sectors [ 3068.417902] Bluetooth: hci0: Frame reassembly failed (-84) [ 3068.468903] FAT-fs (loop3): Can't find a valid FAT filesystem 16:22:27 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r1 = getpid() sched_setattr(r1, 0x0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 16:22:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x2) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000380)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r3 = creat(&(0x7f0000000100)='./file1\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) accept4$tipc(r3, &(0x7f00000001c0)=@id, &(0x7f0000000240)=0x10, 0x80000) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) 16:22:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7f260000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:22:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xe, r1, 0x3) r2 = open(&(0x7f0000000040)='./bus\x00', 0x400, 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e500010000000000000000000044e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) [ 3068.794580] FAT-fs (loop3): bogus number of reserved sectors 16:22:27 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x4b49, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800003}) [ 3068.836858] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3068.953406] FAT-fs (loop3): bogus number of reserved sectors [ 3068.959526] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3070.479393] Bluetooth: hci0: command 0xfc11 tx timeout [ 3070.479400] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:22:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f00000001c0)) 16:22:29 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') openat$mixer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/mixer\x00', 0x100, 0x0) r2 = getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r3 = creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) clock_getres(0x1, &(0x7f0000000000)) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000080)={0x0, @bt={0x8, 0x6, 0x0, 0x2, 0x8, 0xfc66, 0x0, 0xad, 0x9b, 0x5f, 0x10001, 0xff, 0xfffffffffffffffa, 0x6, 0x11, 0x36}}) move_pages(r2, 0x5, &(0x7f0000000180)=[&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil], &(0x7f00000001c0)=[0x5, 0x9, 0xffffffffffff717e, 0x1, 0x3ff], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) 16:22:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 16:22:29 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x541b, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800003}) 16:22:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x8b260000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:22:29 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000240)=0x2) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) [ 3070.671526] FAT-fs (loop3): bogus number of reserved sectors [ 3070.688747] Bluetooth: hci0: Frame reassembly failed (-84) [ 3070.708486] FAT-fs (loop3): Can't find a valid FAT filesystem 16:22:29 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x5421, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800003}) [ 3070.775291] FAT-fs (loop3): bogus number of reserved sectors 16:22:29 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x70, 0x0, &(0x7f0000000180)=[@exit_looper, @request_death, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0x6, 0x0, 0x9}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x9, 0x2, 0x30}}, &(0x7f0000000000)={0x0, 0x20, 0x40}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x1}], 0x8a, 0x0, &(0x7f0000000380)="70f946f66bdb154aaad69343bd8e00b661fd61e07bc87cacd7dc9f4ded7a4a18471709712f865b0d5f06d5c8bc45669972de0c891ba617328d6dcd47b0066742ec9525018ec359d28795f46a3d94f2778d7dab875432c37d5e6b1ca3ae3b2b12602d2616ad5c7bb49eaeedda2c66e0359410c9b20b0d0d0e2b5c2c4d766266708611828cd23244544488"}) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000e00)='./file1\x00') r3 = getuid() r4 = geteuid() getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000580)={{{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f0000000480)=0xe8) lstat(&(0x7f00000004c0)='./bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000700)={{{@in6=@remote, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000500)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000800)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@empty}}, &(0x7f0000000900)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000940)={{{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f0000000a40)=0xe8) r10 = getuid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000a80)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast2}}, &(0x7f0000000b80)=0xe8) stat(&(0x7f0000000bc0)='./bus\x00', &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = getegid() stat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000300)='./bus\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="02000000010000000000000002000400", @ANYRES32=r3, @ANYBLOB="02000100", @ANYRES32=r4, @ANYBLOB="02000400", @ANYRES32=r5, @ANYBLOB="02000400", @ANYRES32=r6, @ANYBLOB="02000300", @ANYRES32=r7, @ANYBLOB="02000400", @ANYRES32=r8, @ANYBLOB="02000100", @ANYRES32=r9, @ANYBLOB="02000400", @ANYRES32=r10, @ANYBLOB="02000400", @ANYRES32=r11, @ANYBLOB="040001000000000008000100", @ANYRES32=r12, @ANYBLOB="08000400", @ANYRES32=r13, @ANYBLOB="080000005a7af151ecdc6032ea8cfa722197aef86d00ad58266aa1fca8437212193debe28c8c72e10ac6c0937d97250c3b477a95d0dc8e946504000000e79a027bdc62ccdec7c6e4ea986e87afdbbf5be5e10099b9a4e2b9f1d1975f7038f3b641460508a93f1e755c567143642651ffff10eb8db8e4ef0899d1f27cff6a42ffd2c7b0c53c64a559b8dc9ad2b7e22aca3a0d76a06d82a812ee4725a24f56b8ae2cf8d5e6c877338cc9f8e8a02fa9eb4b9f8ea2b003c1d0b8e7c4d250cb61a15611b524b3472dab0b25c103764bda230eee515bd75edf24cf6b9fdca5ca960d447f0a020b6d18ef30512f12de8e47f355508284b177b0", @ANYRES32=r14, @ANYBLOB="10000100000000002000000000000000"], 0x84, 0x3) getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(0x0, 0x4) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) syz_open_dev$vcsa(&(0x7f0000000e40)='/dev/vcsa#\x00', 0x0, 0x0) [ 3070.838923] FAT-fs (loop3): Can't find a valid FAT filesystem 16:22:29 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x2) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={&(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x4, 0x8, 0x6}) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="002e000200f1dcbd5db8746061e50001000000000000000000aa44e17cd1cd656d5f37a13ab0181b44ec79351915fb1d9908d448a720750843a6a6ce75d06b26aaa0bf789e1318f61749a4daf2ced5d7076ef2d98f2ca636b7089cb71680a18b116104c99eb3fe74511985388552b9d759a71f3df71c878831f617cac3fc9354a076fc4db66cc5f3d5721f64e783370f1901bdd1ff3d5dd6e7da27"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) 16:22:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x8cffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:22:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r3 = creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000001c0)={0x10000, &(0x7f0000000080), 0x0, r1, 0x1}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) 16:22:29 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x5450, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800003}) [ 3071.183454] FAT-fs (loop3): bogus number of reserved sectors [ 3071.260729] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3071.331227] FAT-fs (loop3): bogus number of reserved sectors [ 3071.390845] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3072.719409] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 3072.719440] Bluetooth: hci0: command 0xfc11 tx timeout 16:22:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x80045432, &(0x7f00000001c0)) 16:22:31 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$RTC_VL_CLR(r0, 0x7014) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') getpid() ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000000)) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 16:22:31 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x5451, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800003}) 16:22:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0xc0ed0000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:22:31 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x2) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f103000000000000e3ff01000000000000000000aa01e17c"], 0x1d) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x100, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sched_setattr(0x0, 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f00000001c0)={0x1000, &(0x7f0000000880)="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"}) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@local}}, {{@in=@local}}}, &(0x7f0000000280)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) 16:22:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000340)={0x6, 0x18, [0xd, 0x7, 0x6, 0x1, 0x19, 0x2]}) fchdir(r1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000280)={0x8, 0x4, 0x5, 0x2}) getpid() sched_setattr(0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000380)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e23, @remote}], 0x30) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x6}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000240)={r3, 0x4, 0x7}, 0x8) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) [ 3072.863030] FAT-fs (loop3): bogus number of reserved sectors [ 3072.893067] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3072.956573] Bluetooth: hci0: Frame reassembly failed (-84) [ 3072.965753] FAT-fs (loop3): bogus number of reserved sectors 16:22:31 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000240)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16, 0x4}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x2) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) 16:22:31 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x5452, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800003}) 16:22:31 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000000)={0x70d, 0x4, 0x9, 0x2, 0x2c1}) setsockopt$sock_void(r1, 0x1, 0x1b, 0x0, 0x0) creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) [ 3073.025675] FAT-fs (loop3): Can't find a valid FAT filesystem 16:22:31 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000040)='./bus\x00', 0x101000, 0x4) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r2 = creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) 16:22:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0xe8010000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:22:32 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x5460, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800003}) [ 3073.309575] FAT-fs (loop4): invalid media value (0x00) [ 3073.317419] FAT-fs (loop4): Can't find a valid FAT filesystem [ 3073.357574] FAT-fs (loop3): bogus number of reserved sectors [ 3073.382889] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3073.473657] FAT-fs (loop3): bogus number of reserved sectors [ 3073.504636] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3074.959361] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 3074.959383] Bluetooth: hci0: command 0xfc11 tx timeout [ 3074.997741] Bluetooth: hci0: Frame reassembly failed (-84) 16:22:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x80045440, &(0x7f00000001c0)) 16:22:35 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) sendto$isdn(r0, &(0x7f0000000080)={0x1, 0x4, "c48afdb826debde2da954c3b59d773ad01775e8169c04fa4da8ceb0116293a1947625d81def14a6ab995b2fd2de15aac4d"}, 0x39, 0x4040800, &(0x7f00000000c0)={0x22, 0x5, 0x9, 0x3f, 0xc7}, 0x6) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) r2 = gettid() syz_open_procfs(r2, &(0x7f0000000100)='fdinfo/3\x00') open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, 0x0) creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 16:22:35 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40049409, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800003}) 16:22:35 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x2) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0001000000000000000000aa44e17c00"/29], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) 16:22:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="00ffff0000f1dc8c0f00a6a31b6235716c8abd2850bb4e8b7c8e746061"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) r3 = getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000080)={0x5, 0x3}) creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) capget(&(0x7f00000001c0)={0x0, r3}, &(0x7f0000000240)={0x9, 0x8c77, 0x1, 0x7, 0x6}) 16:22:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0xf4ffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) [ 3077.039447] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 3077.046347] Bluetooth: hci0: command tx timeout [ 3077.117172] FAT-fs (loop3): bogus number of reserved sectors [ 3077.130085] FAT-fs (loop3): Can't find a valid FAT filesystem 16:22:36 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40086602, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800003}) [ 3077.221663] FAT-fs (loop3): bogus number of reserved sectors [ 3077.227688] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3077.234621] Bluetooth: hci0: Frame reassembly failed (-84) 16:22:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0xf5ffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:22:36 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYBLOB="c90000008ae0c2068ae9e8b994476215a01899bcef00124f09ee9e21801e3cbd2a981c8905f12b81d7c7985145aa1b454728f0c3d64db3ba0a3222e992e87e08678a8be5ab5b2243211ff2a500819e37d36191faec2ea52fb7fec3eb4c99725690f5d6b25585e4af4f8088ad6832436fc5d30bfc0c41a964022a95c271613ad79fd3076691a5af0c59ef905394c35e946da8f77096a2b924f829da1ccc19cf0d83e6e29a26787687bc4e3e0df037e3e6f42ea0c76ec9f9e3f9014758786d9e3f98403091c97e034fa99d4bcf205d591690db1ee09f02ee"], &(0x7f00000000c0)=0xd1) r3 = dup(r1) ioctl$KVM_GET_DEVICE_ATTR(r3, 0x4018aee2, &(0x7f00000001c0)={0x0, 0x965, 0x7fffffff, &(0x7f0000000080)=0x7}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r2, 0xebb, 0x9, 0x3}, &(0x7f0000000180)=0x10) unlink(&(0x7f0000001e00)='./bus\x00') getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x4e21, @multicast2}], 0x10) creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) [ 3077.404304] FAT-fs (loop3): bogus number of reserved sectors [ 3077.429645] FAT-fs (loop3): Can't find a valid FAT filesystem 16:22:36 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x2) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff, 0x2}) 16:22:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) r3 = perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f00000004c0)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000340)={{{@in=@broadcast, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f0000000280)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x1000000, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r4}}, {@uname={'uname', 0x3d, 'selinuxem0\xa2self'}}, {@dfltgid={'dfltgid', 0x3d, r5}}, {@fscache='fscache'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@debug={'debug', 0x3d, 0x80000001}}, {@cachetag={'cachetag', 0x3d, '3+eth1'}}, {@mmap='mmap'}], [{@smackfstransmute={'smackfstransmute', 0x3d, ':/,cgroup'}}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x34, 0x7d, 0x7b, 0x0, 0x7f, 0x66, 0x73], 0x2d, [0x62, 0x31, 0x61], 0x2d, [0x33, 0x34, 0x35, 0x71902227cd5dc098], 0x2d, [0x3a, 0x77, 0x65, 0x7f], 0x2d, [0x65, 0x37, 0x39, 0x38, 0x31, 0x7f, 0x71, 0x35]}}}, {@appraise_type='appraise_type=imasig'}, {@subj_type={'subj_type'}}]}}) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) [ 3077.493920] FAT-fs (loop3): bogus number of reserved sectors [ 3077.500110] FAT-fs (loop3): Can't find a valid FAT filesystem 16:22:36 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40087602, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800003}) [ 3079.279402] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 3079.279409] Bluetooth: hci0: command 0xfc11 tx timeout 16:22:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x80086601, &(0x7f00000001c0)) 16:22:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0xf6ffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:22:38 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') dup(r0) bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000080)) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) readlinkat(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=""/222, 0xde) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') getpid() sched_setattr(0x0, 0x0, 0xfffffffffffffffc) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 16:22:38 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x4020940d, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800003}) 16:22:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000080)={0x10, 0x7, 0x1, {{0x3, 'syz'}, 0x10001}}, 0x10) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) 16:22:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x2) bind$bt_rfcomm(r1, &(0x7f00000001c0)={0x1f, {0x3, 0x7fffffff, 0x925, 0x2, 0x3, 0xfffffffffffffffd}, 0x2}, 0xa) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000340)={0x4000000000000000, 0x6}) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r3 = creat(&(0x7f0000000100)='./file1\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8802}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB='\f\x00L\x00', @ANYRES16=r4, @ANYBLOB="040d2abd7000fedbdf250400000008000400030000000800060d0600000082dfd0c6597d3af9e1b81c0ab216e382c70440daa81e71a9f6722b03484999be7d43f26479cffb01"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000400)=[0x2, 0x4], 0x2) [ 3079.435384] FAT-fs (loop3): bogus number of reserved sectors [ 3079.485252] FAT-fs (loop3): Can't find a valid FAT filesystem 16:22:38 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x4030582a, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800003}) 16:22:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x2) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r0, r2, &(0x7f0000000000), 0x44c) sched_setattr(0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) [ 3079.587454] FAT-fs (loop3): bogus number of reserved sectors 16:22:38 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$VT_ACTIVATE(r0, 0x5606, 0xff) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') getpid() setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0x13, 0xfffffffffffffffe) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 16:22:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) r3 = perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) fcntl$setlease(r3, 0x400, 0x3) getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) [ 3079.645064] FAT-fs (loop3): Can't find a valid FAT filesystem 16:22:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0xfbffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:22:38 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x2) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f101000000000000000001000000000000000000aa446ac8"], 0x1d) r2 = perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r0, &(0x7f0000000000), 0x8080fffffffe) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) [ 3079.935881] FAT-fs (loop3): bogus number of reserved sectors [ 3079.935894] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3080.093619] FAT-fs (loop3): bogus number of reserved sectors [ 3080.110895] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3081.519503] Bluetooth: hci0: command 0xfc11 tx timeout [ 3081.519521] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:22:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x80087601, &(0x7f00000001c0)) 16:22:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r3 = creat(&(0x7f0000000240)='./file1\x00', 0x12c) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x1ff, 0x5, 0x100, 0x5, 0x1a, 0x1, 0x0, 0x5eb7, 0x0, 0x3}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) 16:22:40 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080)={0x0, 0x9}, 0x2) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') getpid() getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x6, 0x5, [0x7fff, 0x1, 0xe5, 0x8, 0x5]}, &(0x7f0000000100)=0x12) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180)={r3, 0x2, 0x30}, 0xc) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 16:22:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0xfcfdffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:22:40 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x2) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f00000001c0), 0x4) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) mknod$loop(&(0x7f0000000240)='./file1\x00', 0x604a, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) socket$can_bcm(0x1d, 0x2, 0x2) 16:22:40 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x80086601, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800003}) [ 3081.657156] FAT-fs (loop3): bogus number of reserved sectors [ 3081.680608] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3081.742830] Bluetooth: hci0: Frame reassembly failed (-84) [ 3081.749067] FAT-fs (loop3): bogus number of reserved sectors 16:22:40 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x80087601, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800003}) [ 3081.791967] FAT-fs (loop3): Can't find a valid FAT filesystem 16:22:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0xfdfdffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:22:40 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f00000003c0)) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) getpgid(0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000380)=0x0) r3 = perf_event_open(0x0, r2, 0x2, 0xffffffffffffff9c, 0x3) connect$unix(r0, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e24}, 0x6e) unlink(&(0x7f0000001e00)='./bus\x00') getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) signalfd4(r3, &(0x7f00000000c0)={0x3f}, 0x8, 0x80000) 16:22:40 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0045878, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800003}) 16:22:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x0, 0xfffffffffffffffd) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) fcntl$dupfd(r2, 0x406, r1) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) [ 3081.986738] FAT-fs (loop3): bogus number of reserved sectors [ 3082.007496] FAT-fs (loop3): Can't find a valid FAT filesystem 16:22:40 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x20) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x2) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$P9_RRENAME(r1, &(0x7f00000003c0)={0x7, 0x15, 0x2}, 0x7) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) r2 = perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(r2, &(0x7f0000000200)='security.ima\x00', &(0x7f0000000880)=@v2={0x7, 0x2, 0xd, 0x9, 0x1000, "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"}, 0x100a, 0x2) unlink(&(0x7f0000001e00)='./bus\x00') getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000001c0), &(0x7f0000000240)=0xc) getsockopt$packet_int(r1, 0x107, 0x0, &(0x7f0000000340), &(0x7f0000000380)=0x4) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r0}) [ 3082.133083] FAT-fs (loop3): bogus number of reserved sectors [ 3082.159746] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3083.759373] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 3083.759436] Bluetooth: hci0: command 0xfc11 tx timeout 16:22:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0xc0045878, &(0x7f00000001c0)) 16:22:42 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0045878, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800003}) 16:22:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0xff0f0000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:22:42 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x80, 0x0) syz_open_pts(r0, 0x101000) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fchdir(r1) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 16:22:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e520b1ea4e00000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) mount$9p_fd(0x0, &(0x7f00000001c0)='./file2\x00', &(0x7f0000000200)='9p\x00', 0x40000, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e733d8eaec32cc9d97ea35a66642c7266646e6f3dbfd63adf791b9445c835d34e", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c7063723d30303030303030303030303030303030303033382c6673757569643d38770066637763762d347f36372d003534752d373f73662d6576393066623f392c736d61636b66736465663d6c6f6d643573756d2c2c6f626a5f757365723d2c6673636f6e746578743d757365725f752c00"]) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) 16:22:42 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x4030582a, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800003}) [ 3083.908621] FAT-fs (loop3): bogus number of reserved sectors [ 3083.929593] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3083.981595] FAT-fs (loop3): bogus number of reserved sectors [ 3084.006759] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3084.028009] Bluetooth: hci0: Frame reassembly failed (-84) 16:22:42 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800003}) 16:22:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0xffff1f00, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:22:42 executing program 2: io_setup(0x1, &(0x7f0000000000)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x80000, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x608400, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x2b091d3a, 0x40c000) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cpuset.memory_pressure\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0xa, 0xfffffffffffffc00, 0x9, 0x9, 0x100, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x3c) r6 = accept$packet(0xffffffffffffff9c, &(0x7f00000005c0), &(0x7f0000000600)=0x14) r7 = openat(0xffffffffffffffff, &(0x7f0000000680)='./bus\x00', 0x9fe68176f5328744, 0x8a) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r8, 0x410, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffffffffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40080) r9 = openat$cgroup_procs(0xffffffffffffff9c, &(0x7f0000000700)='tasks\x00', 0x2, 0x0) r10 = syz_open_dev$radio(&(0x7f00000007c0)='/dev/radio#\x00', 0x1, 0x2) io_submit(r0, 0x5, &(0x7f0000000840)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x3, r1, &(0x7f00000000c0)="de7f84a5afe30746869937e98f3b6c06caa819c12b9906fadf434e85244b32dca5718a67bce71d2290ca08364b0da301dc715bce3e1dcd1389a8a77d4e8d69adb9d06e85352e7c9e6e41c3", 0x4b, 0xffff, 0x0, 0x2, r2}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x7, 0x0, r3, &(0x7f0000000380)="8e659cdd340a14fecadbae30531b0b1630b7982e429d0a085546b3552e8e5265713499bb844dd340a0bc4b7bd762a8f212e9f8f39b39a6c0b320a78dda6e1940da365a", 0x43, 0xb9, 0x0, 0x0, r4}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x9, 0x8, r5, &(0x7f00000004c0)="7d98a30d3051e348bf943311d1a2832e7391cbf2a5182208cedec9d08fd1df39850d2731fb92475e6adde55e2b71fe9274ffbc92ced9f19d02c06ccdf1a2b76fdf677766f0b6e1198d4f9a1075883edcce4952d575ce18e6ad66692a2a0972ad718a79035be1", 0x66, 0x10000, 0x0, 0x1, 0xffffffffffffff9c}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x7, 0x100000001, r6, &(0x7f0000000640)="40bbb1da9594f0760abb436fcc3374b8b1a5b913098b64c6ad73f90ef2672abea25b6d596a6daf70ce3710e8ad798c0849672d1c513c05b237607c9eb9", 0x3d, 0x3f, 0x0, 0x0, r7}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x8, 0x9, r9, &(0x7f0000000740)="1079ee4c886056b5b6ebe08aef6894f1848b84410a324df9cd06b44555ee9ab8aeab94052ab265ec7a1dc0d0a8f99868a01b218bd3ed7dd912cb0319c1eca5b10b357b043b289999810b5f2d5972c8d1e605f504b3a94296286c814937b732055346121a56f5d6514074b4eb83373eb3b11a2bbf17e2b115b2bad86bd2", 0x7d, 0x0, 0x0, 0x2, r10}]) bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r11 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r11) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f00000009c0)='./bus/file0\x00') getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 16:22:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8747061e500010044e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) syz_mount_image$nfs(&(0x7f0000000240)='nfs\x00', &(0x7f0000000280)='./file0\x00', 0x94db, 0x9, &(0x7f0000001980)=[{&(0x7f0000000340)="acab", 0x2, 0x628b7656}, {&(0x7f0000000380)="9ef58dd4f6c76545af9c3068512f3f509ec484449865274a735f8ef9462e5232acdad507a5fea166cc2f8420b0908cd5e8ed5020055d681504754c6c5beda514cb2715f1093a019ca205b75107d0f465c6448e753243023d38b1ce64928aaf10a0b11a7160025867d56c779a51b63c69f22581c1c0bc7b8789c934b3263b08531b6287966a05ff62328af59740524acb6282a51d5b6b59b86091a93709cbff0e48488d9731a16b32b466f11badcd61e61b9f3c88ee210c0325265dd3c2a605edbd76f532c1079a9eaa1ec1bc16969017d7ef133ad85fb373920542dfc205d623650667ad372f5a7f1e8495c509", 0xed, 0x3f}, {&(0x7f0000000480), 0x0, 0xb87}, {&(0x7f00000004c0)="1267f3ec464276c15df3cfce23f6ff01a0c9b981c80a3a1cbd4dd64346d412ff9c5e79ec6611dc07604f826d53148d137d", 0x31, 0x6}, {&(0x7f0000000580)="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", 0xfa, 0x1000}, {&(0x7f0000000880)="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", 0x1000, 0x80000000}, {&(0x7f0000000500)="7566536fa13665cb9ac33e75cded0bf082499e", 0x13, 0x8}, {&(0x7f0000000680)="df97ea24bcdba08ee69f24ae680176ccd78b49f19a2e031a04a925525616122d6a9c14d5373531867b411072922f1ceeda77f1bb0f7f2126f31fe4299f0e553ae9b88db0a4068ff947ba61c28662accaf944629110a1513bab407e5c480fa4fd51ffd84502796641bd2710b2d0122f176e357ea49171c813d4253dea9ba2f537dae3d4857d3640bb97d1e14482e4930b802bc40eaa48a86074d656e098229a706ef72a31f59335fbbb8103e7fb3de92c43fba5d53cabd33addc5c99c7464464b15001b5b5f9629936e8c5ac22d3f725f6390e1f360278064b3ec47", 0xdb, 0x5}, {&(0x7f0000001880)="9ec2a6eaf2d4bc300ce25faa78b7446a8b1305a69be23057fdc5c7a6e2e412331f806957cd3993e5c64a39510860e61e23b204386972b0cb4293b1fda59faf44540344bc03c7b845e1c754c324b568eef51ab62009ed704eaf09d5432e366d02ea92ddef4c6020bb12745ca93f132fe995c1c4dbb5ea7203e1fc7675381bf3cadffca9e4db0d47ce81594c20b843271a93fb818c63fb17bfa4bd4868780fc7559540f5b74f3e97e797c1c6cba3106c9d6621b22e57b582ae06785102975315b5c361065d967172462e6d19dce728b621c815ee905890616b89ed8ecdf802ab1a54a479d730879f", 0xe7, 0x20}], 0x12000c0, &(0x7f0000000780)=']em0eth1$\x00') creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x40, 0x0) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f00000001c0)) [ 3084.228322] FAT-fs (loop3): bogus number of reserved sectors 16:22:43 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc020660b, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800003}) [ 3084.301478] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3084.384568] FAT-fs (loop3): bogus number of reserved sectors [ 3084.409532] FAT-fs (loop3): Can't find a valid FAT filesystem 16:22:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0xfffffdfc, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) [ 3084.669446] FAT-fs (loop3): bogus number of reserved sectors [ 3084.691739] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3084.755077] FAT-fs (loop3): bogus number of reserved sectors [ 3084.761250] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3086.079373] Bluetooth: hci0: command 0xfc11 tx timeout [ 3086.079380] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:22:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0xc0045878, &(0x7f00000001c0)) 16:22:44 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x200000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000380)={0x15, 0x110, 0xfa00, {r1, 0x4, 0x0, 0x0, 0x0, @ib={0x1b, 0x1, 0x7b9, {"3809b7224cbf982ad97c69c95138639d"}, 0x0, 0x5, 0xfff}, @ib={0x1b, 0x6, 0xc38, {"372853f11275f8731c98becafd84296a"}, 0x4, 0xffffffffffffffff, 0x9}}}, 0x118) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x401, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 16:22:44 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x2, 0x0, 0x0, 0x800003}) 16:22:44 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) pipe(&(0x7f0000000080)) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 16:22:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r3 = creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f0000000080)={0x5431f57f2b74bd97, 0x0, 0x0, r3}) 16:22:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0xfffffdfd, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) [ 3086.252903] FAT-fs (loop3): bogus number of reserved sectors [ 3086.258851] FAT-fs (loop3): Can't find a valid FAT filesystem 16:22:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)="f50e2ee87c3bc2601ea1273c5fe2c566b00bcd29e5379ef37afd318871e68e6f24b58c7b9cc8477d12c79020f57cf3520f3f5617ed1fafa8f88bffcda2443ac112f5d8c6a119c936fbc3f549cc9b0f83d5d38d69940296fd932c9dec7cb9ac28cbf173f72c868b13800c81eedb43587ebe85ba1047cd43c78dacba5cf742936f530c9579b5cb6ccf0f") ptrace$cont(0x20, r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000180)={'mangle\x00'}, &(0x7f0000000200)=0x54) [ 3086.374893] FAT-fs (loop3): bogus number of reserved sectors 16:22:45 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x1, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="03000000001c08c08600"], 0xa) bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) fchdir(r1) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') getsockopt(r2, 0x10001, 0x9, &(0x7f0000000380)=""/166, &(0x7f0000000000)=0xa6) getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f00000001c0)={'syz_tun\x00', {0x2, 0x4e24, @rand_addr=0x7fff}}) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f0000000080)={@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, 0x100, 0x5, [@bcast, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) [ 3086.432156] FAT-fs (loop3): Can't find a valid FAT filesystem 16:22:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0xffffff7f, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:22:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) getpid() lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./bus\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000340)={0x0, 0xfb, 0x98, 0x0, 0x6833, "d52d2c875c5d118514d46f066dac3bef", "6039eaa4b55dbe21f3851eaa1a0d519d65699b8996b14afeed4110a63dbb792aacffdfb66c20d7705f4d22e03befcb31b313de3d273136ec65565287b811a4bf17de425e7c1136d01c058cc9f94d0a2741279e6fe4718cdafdcc90987847d303579842b2f1a3767cbed938278f66ca8f55d216b8711d59ffbee4673829bee51642ea04"}, 0x98, 0x2) sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) 16:22:45 executing program 4: r0 = semget(0x0, 0x0, 0x0) semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x800}], 0x1) 16:22:45 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) poll(&(0x7f0000000040)=[{}, {r0, 0x1}], 0x2, 0x40000000000004e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xffffff07, 0x0, 0x0, 0x800e004c1) poll(&(0x7f0000000080)=[{r1}], 0x1, 0x1fb) shutdown(r1, 0x0) [ 3086.661036] FAT-fs (loop3): bogus number of reserved sectors [ 3086.687956] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3086.784398] FAT-fs (loop3): bogus number of reserved sectors [ 3086.809643] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3088.319385] Bluetooth: hci0: command 0xfc11 tx timeout [ 3088.319414] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:22:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0xc0189436, &(0x7f00000001c0)) 16:22:47 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f00000000c0)='./bus/file0\x00') getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 16:22:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0xffffff8c, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:22:47 executing program 4: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x3) 16:22:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) r2 = perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x4) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x2000000000000, 0xffffffffffffffff, 0x100000003}) 16:22:47 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x800003}) [ 3088.446427] FAT-fs (loop3): bogus number of reserved sectors [ 3088.483891] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3088.568793] FAT-fs (loop3): bogus number of reserved sectors [ 3088.589637] FAT-fs (loop3): Can't find a valid FAT filesystem 16:22:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0xfffffff4, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:22:47 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000001700)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x1c, {0x2, 0x0, @loopback}, 'ip_vti0\x00'}) 16:22:47 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 16:22:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000040)='./bus\x00', 0x400002, 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) 16:22:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/19, 0x13}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e00546) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000001c40)=[{&(0x7f0000000000)=""/207, 0xcf}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r3, 0x0) r5 = socket$inet6_sctp(0x1c, 0x3, 0x84) readv(r5, &(0x7f00000007c0)=[{&(0x7f0000000280)=""/5, 0x5}], 0x1) shutdown(r4, 0x0) shutdown(r1, 0x0) [ 3088.889945] FAT-fs (loop3): bogus number of reserved sectors [ 3088.903737] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3088.984993] FAT-fs (loop3): bogus number of reserved sectors [ 3089.006938] FAT-fs (loop3): Can't find a valid FAT filesystem 16:22:47 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(0x0, 0x1) write$binfmt_elf64(r1, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x100000001, 0xebbc, 0xb60, 0xb756, 0x3, 0x6, 0x8, 0x3d5, 0x40, 0x79, 0x1000000000000000, 0xfffffffffffffe01, 0x38, 0x1, 0x9, 0x9}, [{0x60000000, 0x26, 0x1, 0x5, 0x5, 0x0, 0x1f, 0x2}, {0x6, 0x0, 0x7f, 0xa54c, 0x4, 0x0, 0x53, 0x7}], "78408451296912189ad4d4da316606ba66bf970745bc4ec640dcb234ff4d26f70c9a7fa37f4399893cec7a16d55c17e4dad98b1e13a482b4afabc151b5426956215bc5dd", [[], [], [], [], []]}, 0x5f4) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) [ 3090.559405] Bluetooth: hci0: command 0xfc11 tx timeout [ 3090.559489] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:22:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0xc020660b, &(0x7f00000001c0)) 16:22:49 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0xc0c00, 0x101) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r2) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e5000100000000ff3690ad1d00000000"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) 16:22:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0xfffffff5, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:22:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x800}, {0x8}, 0x5, 0x0, 0x4}) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000600)) r4 = syz_open_pts(r3, 0x0) write$binfmt_aout(r3, &(0x7f0000000240)=ANY=[], 0x5e0) restart_syscall() socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000200)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000001c0)=0x40000) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x6f, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) fcntl$setstatus(r5, 0x4, 0x800) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000001c0)=0x2, 0x4) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000000c0)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x7fffffff, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7cbc0486}]}}) 16:22:49 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x4, 0x0, 0x0, 0x800003}) 16:22:49 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x0, {0x0, 0x2, 0x1, 0x9}, 0x0, 0xfffffffffffffffb}, 0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@ipv4={[], [], @initdev}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000100)=0xe8) stat(&(0x7f0000000180)='./bus\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getuid() mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='fuseblk\x00', 0x1080001, &(0x7f0000000740)=ANY=[@ANYBLOB="661f36680b5b04449b0202000000643d", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r3, @ANYBLOB=',default_permissions,default_permissions,max_read=0x0000000000000007,allow_other,blksize=0x0000000000000000,blksize=0x0000000000000800,smackfsfloor=proccpuset!,fsmagic=0x0000000000000003,subj_user=security\',euid<', @ANYRESDEC=r4, @ANYBLOB=',subj_type=,smackfsfloor=procppp1selinuxnodevkeyring,dont_measure,\x00']) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) [ 3090.714828] FAT-fs (loop3): bogus number of reserved sectors [ 3090.742902] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3090.836762] FAT-fs (loop3): bogus number of reserved sectors 16:22:49 executing program 2: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = accept$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x0, 0x0, &(0x7f0000000200)) [ 3090.879761] FAT-fs (loop3): Can't find a valid FAT filesystem 16:22:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0xfffffff6, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:22:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x2) [ 3091.205934] FAT-fs (loop3): bogus number of reserved sectors [ 3091.299701] FAT-fs (loop3): Can't find a valid FAT filesystem 16:22:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) getpid() sched_setattr(0x0, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) 16:22:50 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) [ 3091.395340] Bluetooth: hci0: Frame reassembly failed (-84) [ 3091.428676] FAT-fs (loop3): bogus number of reserved sectors [ 3091.496605] FAT-fs (loop3): Can't find a valid FAT filesystem 16:22:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0xfffffffb, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:22:50 executing program 2: clone(0x200, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) mknod(&(0x7f0000000500)='./file0\x00', 0x2001001, 0x0) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000001700)='./file0\x00', 0x0) 16:22:50 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x5, 0x0, 0x0, 0x800003}) [ 3091.783855] FAT-fs (loop3): bogus number of reserved sectors [ 3091.818478] FAT-fs (loop3): Can't find a valid FAT filesystem 16:22:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0xd3a, &(0x7f0000000580), 0xfffffffffffffffc, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) fchdir(r1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) r2 = perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000080)=0xdaf5) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) fchdir(r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="002e000200f1dcc05db8746061e50001000000000000000000aa44e17c"], 0x1d) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000001c0)={0x1}) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) getpid() sched_setattr(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) write(r2, &(0x7f0000000140)="2cddd353bbbcf18a155e620e61c65123d5bcfe29127e01192603eda7788322d47b6f8faf", 0x24) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) [ 3091.912948] FAT-fs (loop3): bogus number of reserved sectors [ 3091.922017] FAT-fs (loop3): Can't find a valid FAT filesystem 16:22:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x1000000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:22:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfeb7be070") r1 = open(&(0x7f0000001a80)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') [ 3092.096977] FAT-fs (loop3): bogus number of reserved sectors [ 3092.124062] FAT-fs (loop3): Can't find a valid FAT filesystem 16:22:50 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x15}}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) [ 3092.192305] FAT-fs (loop3): bogus number of reserved sectors [ 3092.214869] FAT-fs (loop3): Can't find a valid FAT filesystem 16:22:51 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'ip6gre0\x00', 0x80f}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f00000002c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000140)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1840050000000000000100c40000000000080000000000000000000000169c04ed94b5a80e97e9460871251044660025a6575a475fa8a908292be16a7c"], 0x3d}}], 0x1, 0x0) sigaltstack(&(0x7f0000001000/0x3000)=nil, 0xfffffffffffffffd) sigaltstack(&(0x7f0000001000/0x1000)=nil, 0x0) r3 = ioctl$TIOCGPTPEER(0xffffffffffffff9c, 0x5441, 0x100) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000000)={0x49, 0x7, 0x400000000000000, 0x1, 0x7722, 0x4ba}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() syz_open_procfs$namespace(0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x38) ptrace$cont(0x18, r4, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x10}) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r4, 0x0, 0x0) 16:22:51 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) [ 3093.439375] Bluetooth: hci0: command 0xfc11 tx timeout [ 3093.439591] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:22:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x3) 16:22:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0xedc000000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:22:52 executing program 1: clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="000000f1b811c706"], 0x8) 16:22:52 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000)=0x30, 0x4) 16:22:52 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x6, 0x0, 0x0, 0x800003}) 16:22:52 executing program 4: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x111) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) unlink(&(0x7f0000000000)='./file0\x00') clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lseek(r0, 0xfffffbfffefffffe, 0x1) close(r0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) [ 3093.605561] SELinux: policydb magic number 0xf1000000 does not match expected magic number 0xf97cff8c [ 3093.622014] FAT-fs (loop3): bogus number of reserved sectors [ 3093.645579] FAT-fs (loop3): Can't find a valid FAT filesystem 16:22:52 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000280)='./file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f0000000580), 0x1000) read$FUSE(r0, &(0x7f00000060c0), 0xc7) stat(&(0x7f0000000180)='./file0/file1\x00', 0x0) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e6}}}, 0x90) mount$overlay(0x0, &(0x7f00000001c0)='./file0/file1\x00', 0x0, 0x0, 0x0) [ 3093.663832] SELinux: failed to load policy [ 3093.723113] FAT-fs (loop3): bogus number of reserved sectors [ 3093.759988] FAT-fs (loop3): Can't find a valid FAT filesystem 16:22:52 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="8500000008000000870000000000000085c4321800000000059ca158658c8ae07811fa731e06609bd5d40bb9162af026e8eba5b2978acd7004878be5b2a0dd178878e8407b8d6adbad3fd70596d82c78b20b33a857ebda7bb138273812c7e5833ed583e2e37d3f833c4278c957080000000000"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 16:22:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x1000000000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:22:52 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000001580)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}]}}) read$FUSE(r1, &(0x7f00000040c0), 0x1000) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) stat(&(0x7f0000000180)='./file0/file1\x00', 0x0) 16:22:52 executing program 1: 16:22:52 executing program 2: [ 3094.036632] FAT-fs (loop3): bogus number of reserved sectors [ 3094.069673] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3094.169453] FAT-fs (loop3): bogus number of reserved sectors [ 3094.219082] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3095.759375] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 3095.759512] Bluetooth: hci0: command 0xfc11 tx timeout 16:22:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x4) 16:22:54 executing program 1: 16:22:54 executing program 2: 16:22:54 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x7, 0x0, 0x0, 0x800003}) 16:22:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x2000000000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:22:54 executing program 4: 16:22:54 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:22:54 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x4008000) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) link(0x0, &(0x7f0000000200)='./file0\x00') getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) perf_event_open(&(0x7f000001d000)={0x8000000000001, 0x118, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000300)=0x1c) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f0000000340)=0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000440)='veth1\x00\x06\x00\x00)\x86cJ\x0f\xef\x00', 0x10) r4 = dup2(r2, r2) sendmsg$alg(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000000)="a7ce", 0x2}], 0x1}, 0x8005) write$P9_RATTACH(r4, 0x0, 0xfffffffffffffef4) socket(0x9, 0x800, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xffffff45, 0x0, 0x0, 0xfffffffffffffdb9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000480)=0xc) gettid() syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 16:22:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") socketpair$unix(0x1, 0x80000000000005, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) fgetxattr(r3, &(0x7f00000003c0)=@known='system.sockprotoname\x00', 0x0, 0x0) [ 3095.927843] FAT-fs (loop3): bogus number of reserved sectors [ 3096.013516] FAT-fs (loop3): Can't find a valid FAT filesystem 16:22:54 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:22:54 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000080)={0xfffffffffffffffd, 0x6}) [ 3096.099708] FAT-fs (loop3): bogus number of reserved sectors [ 3096.106337] FAT-fs (loop3): Can't find a valid FAT filesystem 16:22:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x4000000000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) [ 3096.425909] FAT-fs (loop3): bogus number of reserved sectors [ 3096.455635] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3096.600815] FAT-fs (loop3): bogus number of reserved sectors [ 3096.607371] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3097.999460] Bluetooth: hci0: command 0xfc11 tx timeout [ 3098.005200] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:22:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x5) 16:22:56 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:22:56 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r0, 0x11, &(0x7f0000000000)) 16:22:56 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x40) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:22:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:22:56 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x8, 0x0, 0x0, 0x800003}) 16:22:57 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) [ 3098.191059] FAT-fs (loop3): bogus number of reserved sectors [ 3098.197694] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3098.214649] Bluetooth: hci0: Frame reassembly failed (-84) [ 3098.221814] Bluetooth: hci0: Frame reassembly failed (-84) [ 3098.308649] FAT-fs (loop3): bogus number of reserved sectors 16:22:57 executing program 2: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:22:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") syz_open_procfs(0xffffffffffffffff, 0xfffffffffffffffe) [ 3098.351763] FAT-fs (loop3): Can't find a valid FAT filesystem 16:22:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0xe000000000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:22:57 executing program 2: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:22:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) shutdown(0xffffffffffffffff, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000080)={0x5}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) recvfrom$inet(r0, 0x0, 0xd012, 0x0, 0x0, 0x800e0050e) shutdown(r0, 0x0) [ 3098.556723] FAT-fs (loop3): bogus number of reserved sectors [ 3098.599592] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3098.666864] FAT-fs (loop3): bogus number of reserved sectors [ 3098.693290] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3100.239499] Bluetooth: hci0: command 0xfc11 tx timeout [ 3100.243261] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:22:59 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, 0x0) 16:22:59 executing program 2: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:22:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/19, 0x13}], 0x1}, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e00546) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000001c40)=[{&(0x7f0000000000)=""/207, 0xcf}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r3, 0x0) r5 = socket$inet6_sctp(0x1c, 0x3, 0x84) readv(r5, &(0x7f00000007c0)=[{&(0x7f0000000280)=""/5, 0x5}], 0x1) shutdown(r4, 0x0) shutdown(r1, 0x0) 16:22:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x40000000000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:22:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x6) 16:22:59 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x9, 0x0, 0x0, 0x800003}) 16:22:59 executing program 2: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) [ 3100.430039] FAT-fs (loop3): bogus number of reserved sectors [ 3100.455958] Bluetooth: hci0: Frame reassembly failed (-84) [ 3100.466340] Bluetooth: hci0: Frame reassembly failed (-84) 16:22:59 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) write$P9_RREMOVE(r0, 0x0, 0xfffffffffffffe95) [ 3100.476837] FAT-fs (loop3): Can't find a valid FAT filesystem 16:22:59 executing program 2: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) [ 3100.585698] FAT-fs (loop3): bogus number of reserved sectors [ 3100.612493] FAT-fs (loop3): Can't find a valid FAT filesystem 16:22:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x40000000000004e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xffffff07, 0x0, 0x0, 0x800e004c1) poll(0x0, 0x0, 0x1fb) shutdown(r1, 0x0) 16:22:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x6b6b6b00000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:22:59 executing program 2: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:22:59 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x400000) [ 3100.858503] FAT-fs (loop3): bogus number of reserved sectors [ 3100.897111] FAT-fs (loop3): Can't find a valid FAT filesystem 16:22:59 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = syz_open_procfs(0x0, 0x0) write$P9_RLOPEN(r0, 0x0, 0x0) 16:22:59 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) [ 3100.981142] FAT-fs (loop3): bogus number of reserved sectors [ 3101.013626] FAT-fs (loop3): Can't find a valid FAT filesystem 16:22:59 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, 0x0) [ 3102.479420] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 3102.479426] Bluetooth: hci0: command 0xfc11 tx timeout 16:23:01 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x7) 16:23:01 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0xa, 0x0, 0x0, 0x800003}) 16:23:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x100000000000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:23:01 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:23:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) poll(&(0x7f0000000040)=[{r0, 0x1}], 0x1, 0x40000000000004e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xffffff07, 0x0, 0x0, 0x800e004c1) poll(0x0, 0x0, 0x1fb) shutdown(r1, 0x0) 16:23:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_timeval(r0, 0xffff, 0x400001006, &(0x7f0000000080)={0x0, 0x10004}, 0x1d4) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000300)=""/227, 0xe3}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x2a8, 0x0, 0x0, 0x800e00436) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/232, 0xe8}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) shutdown(r1, 0x0) 16:23:01 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) [ 3102.636635] FAT-fs (loop3): bogus number of reserved sectors [ 3102.663627] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3102.706300] Bluetooth: hci0: Frame reassembly failed (-84) [ 3102.716820] Bluetooth: hci0: Frame reassembly failed (-84) 16:23:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001900)=""/4096, 0x1000}, {0x0}, {0x0}], 0x3}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfffffe9c, 0x0, 0x0, 0x800e00547) shutdown(r0, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r1, 0x0) 16:23:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) fcntl$getown(r0, 0x9) [ 3102.755774] FAT-fs (loop3): bogus number of reserved sectors [ 3102.786827] FAT-fs (loop3): Can't find a valid FAT filesystem 16:23:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x200000000000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:23:01 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x0, 0x0, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:23:01 executing program 4: [ 3103.036834] FAT-fs (loop3): bogus number of reserved sectors [ 3103.079460] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3103.134230] FAT-fs (loop3): bogus number of reserved sectors [ 3103.161575] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3104.719396] Bluetooth: hci0: command 0xfc11 tx timeout [ 3104.719403] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:23:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x48) 16:23:03 executing program 1: 16:23:03 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x0, 0x0, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:23:03 executing program 4: 16:23:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x300000000000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:23:03 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0xb, 0x0, 0x0, 0x800003}) 16:23:03 executing program 4: 16:23:03 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x0, 0x0, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:23:03 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = socket$unix(0x1, 0x0, 0x0) setsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) [ 3104.855136] FAT-fs (loop3): bogus number of reserved sectors 16:23:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001900)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfffffe9c, 0x0, 0x0, 0x800e00547) shutdown(r0, 0x0) dup(0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r1, 0x0) [ 3104.897320] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3104.910530] Bluetooth: hci0: Frame reassembly failed (-84) [ 3104.917118] Bluetooth: hci0: Frame reassembly failed (-84) 16:23:03 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) [ 3104.996522] FAT-fs (loop3): bogus number of reserved sectors [ 3105.044047] FAT-fs (loop3): Can't find a valid FAT filesystem 16:23:03 executing program 4: [ 3106.959408] Bluetooth: hci0: command 0xfc11 tx timeout [ 3106.959428] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:23:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x4c) 16:23:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x400000000000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:23:05 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:23:05 executing program 4: 16:23:05 executing program 1: 16:23:05 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0xc, 0x0, 0x0, 0x800003}) 16:23:05 executing program 4: 16:23:05 executing program 1: [ 3107.099628] FAT-fs (loop3): bogus number of reserved sectors 16:23:05 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:23:05 executing program 4: 16:23:06 executing program 1: [ 3107.151699] Bluetooth: hci0: Frame reassembly failed (-84) [ 3107.152305] Bluetooth: hci0: Frame reassembly failed (-84) [ 3107.158711] Bluetooth: hci0: Frame reassembly failed (-84) [ 3107.178317] FAT-fs (loop3): Can't find a valid FAT filesystem 16:23:06 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) [ 3107.280831] FAT-fs (loop3): bogus number of reserved sectors [ 3107.311650] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3109.199682] Bluetooth: hci0: command 0xfc11 tx timeout [ 3109.205443] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:23:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x60) 16:23:08 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:23:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x500000000000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:23:08 executing program 4: 16:23:08 executing program 1: 16:23:08 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0xd, 0x0, 0x0, 0x800003}) 16:23:08 executing program 4: 16:23:08 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000000c0), 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000002c0)=""/148, 0x4a4}], 0x133, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score\x00') semget(0x1, 0x2, 0x10) clock_gettime(0x0, 0x0) preadv(r0, &(0x7f0000000700), 0x31f, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0}, 0x68) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000740)) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000540)='TIPC\x00') ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x7) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) [ 3109.348732] FAT-fs (loop3): bogus number of reserved sectors [ 3109.378553] FAT-fs (loop3): Can't find a valid FAT filesystem 16:23:08 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) [ 3109.407111] Bluetooth: hci0: Frame reassembly failed (-84) [ 3109.407550] Bluetooth: hci0: Frame reassembly failed (-84) [ 3109.421167] Bluetooth: hci0: Frame reassembly failed (-84) [ 3109.480227] FAT-fs (loop3): bogus number of reserved sectors [ 3109.503552] FAT-fs (loop3): Can't find a valid FAT filesystem 16:23:08 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x0, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:23:08 executing program 4: r0 = socket(0x2, 0x400000000002, 0x0) setsockopt(r0, 0x0, 0x19, &(0x7f0000000000)="00f59e15", 0x4) 16:23:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x600000000000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) [ 3109.719727] FAT-fs (loop3): bogus number of reserved sectors [ 3109.756703] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3109.834046] FAT-fs (loop3): bogus number of reserved sectors [ 3109.855268] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3111.439423] Bluetooth: hci0: command 0xfc11 tx timeout [ 3111.439447] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:23:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x68) 16:23:10 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x0, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:23:10 executing program 1: 16:23:10 executing program 4: 16:23:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x700000000000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:23:10 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0xe, 0x0, 0x0, 0x800003}) 16:23:10 executing program 4: 16:23:10 executing program 1: [ 3111.574041] FAT-fs (loop3): bogus number of reserved sectors [ 3111.607077] FAT-fs (loop3): Can't find a valid FAT filesystem 16:23:10 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x0, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) [ 3111.627336] Bluetooth: hci0: Frame reassembly failed (-84) [ 3111.640007] Bluetooth: hci0: Frame reassembly failed (-84) [ 3111.646944] Bluetooth: hci0: Frame reassembly failed (-84) 16:23:10 executing program 4: 16:23:10 executing program 1: 16:23:10 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) [ 3111.712366] FAT-fs (loop3): bogus number of reserved sectors [ 3111.739842] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3113.679366] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 3113.679448] Bluetooth: hci0: command 0xfc11 tx timeout 16:23:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x6c) 16:23:12 executing program 4: 16:23:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x900000000000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:23:12 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:23:12 executing program 1: 16:23:12 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0xf, 0x0, 0x0, 0x800003}) 16:23:12 executing program 4: [ 3113.805406] FAT-fs (loop3): bogus number of reserved sectors [ 3113.840761] Bluetooth: hci0: Frame reassembly failed (-84) [ 3113.841899] Bluetooth: hci0: Frame reassembly failed (-84) 16:23:12 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:23:12 executing program 1: [ 3113.849543] Bluetooth: hci0: Frame reassembly failed (-84) [ 3113.856443] FAT-fs (loop3): Can't find a valid FAT filesystem 16:23:12 executing program 4: 16:23:12 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) [ 3113.939600] FAT-fs (loop3): bogus number of reserved sectors [ 3113.969537] FAT-fs (loop3): Can't find a valid FAT filesystem 16:23:12 executing program 1: [ 3115.919369] Bluetooth: hci0: command 0xfc11 tx timeout [ 3115.919397] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:23:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x74) 16:23:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0xa00000000000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:23:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/19, 0x13}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e00546) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000001c40)=[{&(0x7f0000000000)=""/207, 0xcf}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r3, 0x0) r5 = socket$inet6_sctp(0x1c, 0x3, 0x84) readv(r5, &(0x7f00000007c0)=[{&(0x7f0000000280)=""/5, 0x5}, {0x0}], 0x2) shutdown(r4, 0x0) shutdown(r1, 0x0) 16:23:14 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:23:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/19, 0x13}, {0x0}], 0x2}, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e00546) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000001c40)=[{&(0x7f0000000000)=""/207, 0xcf}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r3, 0x0) r5 = socket$inet6_sctp(0x1c, 0x3, 0x84) readv(r5, &(0x7f00000007c0)=[{&(0x7f0000000280)=""/5, 0x5}], 0x1) shutdown(r4, 0x0) shutdown(r1, 0x0) 16:23:14 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800003}) 16:23:14 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) [ 3116.062952] FAT-fs (loop3): bogus number of reserved sectors 16:23:14 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="97e67d76a25796317db40c564265cc7a"}, 0x1c) [ 3116.108825] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3116.139119] Bluetooth: hci0: Frame reassembly failed (-84) [ 3116.147709] Bluetooth: hci0: Frame reassembly failed (-84) 16:23:15 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) dup2(r0, r1) 16:23:15 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) [ 3116.226712] FAT-fs (loop3): bogus number of reserved sectors [ 3116.243077] FAT-fs (loop3): Can't find a valid FAT filesystem 16:23:15 executing program 1: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 16:23:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0xa0e000000000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) [ 3116.468092] FAT-fs (loop3): bogus number of reserved sectors [ 3116.487045] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3116.557052] FAT-fs (loop3): bogus number of reserved sectors [ 3116.605997] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3118.159636] Bluetooth: hci0: command 0xfc11 tx timeout [ 3118.159926] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:23:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x7a) 16:23:17 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:23:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x4c) 16:23:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0xb00000000000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:23:17 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x800003}) 16:23:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x48) [ 3118.318351] FAT-fs (loop3): bogus number of reserved sectors [ 3118.340517] Bluetooth: hci0: Frame reassembly failed (-84) [ 3118.346351] Bluetooth: hci1: Frame reassembly failed (-84) [ 3118.352566] Bluetooth: hci0: Frame reassembly failed (-84) [ 3118.358542] Bluetooth: hci1: Frame reassembly failed (-84) [ 3118.365010] FAT-fs (loop3): Can't find a valid FAT filesystem 16:23:17 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) [ 3118.391161] Bluetooth: hci2: Frame reassembly failed (-84) [ 3118.397233] Bluetooth: hci2: Frame reassembly failed (-84) 16:23:17 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) [ 3118.436979] FAT-fs (loop3): bogus number of reserved sectors [ 3118.469114] FAT-fs (loop3): Can't find a valid FAT filesystem 16:23:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x1f00000000000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:23:17 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) [ 3118.696673] FAT-fs (loop3): bogus number of reserved sectors [ 3118.735057] FAT-fs (loop3): Can't find a valid FAT filesystem 16:23:17 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 16:23:17 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) [ 3118.837363] FAT-fs (loop3): bogus number of reserved sectors [ 3118.866734] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3120.399389] Bluetooth: hci2: command 0xfc11 tx timeout [ 3120.399425] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 3120.411545] Bluetooth: hci0: command 0xfc11 tx timeout [ 3120.417142] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 3120.423897] Bluetooth: hci1: Entering manufacturer mode failed (-110) 16:23:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0xf0) 16:23:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x2000000000000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:23:19 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:23:19 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x12, 0x0, 0x0, 0x800003}) 16:23:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x2) 16:23:19 executing program 1: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x7fff}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000180)={r2, 0x4, 0x7}, &(0x7f00000001c0)=0x8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f00000008c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r4, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1}, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3120.556586] FAT-fs (loop3): bogus number of reserved sectors 16:23:19 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) [ 3120.610009] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3120.674418] Bluetooth: hci1: Frame reassembly failed (-84) [ 3120.675737] Bluetooth: hci1: Frame reassembly failed (-84) [ 3120.710057] FAT-fs (loop3): bogus number of reserved sectors [ 3120.735410] FAT-fs (loop3): Can't find a valid FAT filesystem 16:23:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x2200000000000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:23:19 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x28) [ 3121.029983] FAT-fs (loop3): bogus number of reserved sectors 16:23:19 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x2001, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0025010000000000000007410000004c001800000003657468000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b00"/90], 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 16:23:19 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x28) [ 3121.070421] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3121.136050] FAT-fs (loop3): bogus number of reserved sectors [ 3121.179758] FAT-fs (loop3): Can't find a valid FAT filesystem 16:23:20 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x28) [ 3122.639405] Bluetooth: hci0: command 0xfc11 tx timeout [ 3122.644891] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 3122.719426] Bluetooth: hci1: command 0xfc11 tx timeout [ 3122.724896] Bluetooth: hci1: Entering manufacturer mode failed (-110) 16:23:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x300) 16:23:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x2300000000000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:23:21 executing program 1: userfaultfd(0x0) syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0) r0 = creat(&(0x7f0000000500)='./file0\x00', 0x7ffffc) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000012c0)='y\x00', 0x2, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) clock_gettime(0x6, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) futex(&(0x7f00000002c0), 0x8d, 0x0, 0x0, 0x0, 0x2) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0) ioctl$KDDISABIO(r0, 0x4b37) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) write$eventfd(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRESETZONE(r0, 0x40101283, 0x0) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000540)={0x8a, 0x7d, 0x2, {0x0, 0x296, 0x0, 0x3, {0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0xfffffffffffffe56, '/mime_typenodev(security^', 0xf, 'nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x1d, 'eth0ppp0GPL!#!selinuxsystem-}', 0xb, 'GPLnodev*lo'}}, 0x1e) 16:23:21 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0}, 0x28) 16:23:21 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x13, 0x0, 0x0, 0x800003}) 16:23:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x2) 16:23:21 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0}, 0x28) [ 3122.870744] FAT-fs (loop3): bogus number of reserved sectors [ 3122.876681] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3122.933141] Bluetooth: hci1: Frame reassembly failed (-84) [ 3122.940519] Bluetooth: hci1: Frame reassembly failed (-84) [ 3122.956971] FAT-fs (loop3): bogus number of reserved sectors [ 3122.988524] FAT-fs (loop3): Can't find a valid FAT filesystem 16:23:21 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0}, 0x28) 16:23:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x2c00000000000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:23:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0xf0) 16:23:21 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x7, 0x0, &(0x7f0000000200)="2f202558d7f5ab", 0x0}, 0x28) [ 3123.176894] FAT-fs (loop3): bogus number of reserved sectors [ 3123.223653] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3123.267468] Bluetooth: hci2: Frame reassembly failed (-84) [ 3123.273776] Bluetooth: hci2: Frame reassembly failed (-84) [ 3123.282838] Bluetooth: hci2: Frame reassembly failed (-84) [ 3123.308263] FAT-fs (loop3): bogus number of reserved sectors [ 3123.326783] FAT-fs (loop3): Can't find a valid FAT filesystem 16:23:22 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x7, 0x0, &(0x7f0000000200)="2f202558d7f5ab", 0x0}, 0x28) [ 3124.879390] Bluetooth: hci0: command 0xfc11 tx timeout [ 3124.884836] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 3124.959507] Bluetooth: hci1: command 0xfc11 tx timeout [ 3124.965155] Bluetooth: hci1: Entering manufacturer mode failed (-110) 16:23:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x500) 16:23:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x3f00000000000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:23:23 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x7, 0x0, &(0x7f0000000200)="2f202558d7f5ab", 0x0}, 0x28) 16:23:23 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x14, 0x0, 0x0, 0x800003}) 16:23:23 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x2) 16:23:23 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xb, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f77", 0x0}, 0x28) [ 3125.138110] Bluetooth: hci0: Frame reassembly failed (-84) [ 3125.157439] FAT-fs (loop3): bogus number of reserved sectors [ 3125.167487] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3125.211412] Bluetooth: hci1: Frame reassembly failed (-84) [ 3125.220212] Bluetooth: hci1: Frame reassembly failed (-84) [ 3125.254435] FAT-fs (loop3): bogus number of reserved sectors [ 3125.276018] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3125.289687] Bluetooth: hci2: command 0xfc11 tx timeout [ 3125.295391] Bluetooth: hci2: Entering manufacturer mode failed (-110) 16:23:24 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='map_files\x00') write$P9_RREAD(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000007501000500004a5c523e5332"], 0x10) getdents(r0, &(0x7f0000000080)=""/25, 0x19) 16:23:24 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xb, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f77", 0x0}, 0x28) 16:23:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x4000000000000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:23:24 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xb, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f77", 0x0}, 0x28) [ 3125.500809] FAT-fs (loop3): bogus number of reserved sectors [ 3125.517178] FAT-fs (loop3): Can't find a valid FAT filesystem 16:23:24 executing program 1: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x20000, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000080), &(0x7f0000000100)=0x4) accept$ax25(r0, &(0x7f0000000180)={{0x3, @rose}, [@netrom, @rose, @null, @remote, @remote, @null, @netrom, @default]}, &(0x7f0000000200)=0x48) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000000)) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x100000000000005, 0x0) ioctl$int_in(r1, 0x800000c0045003, &(0x7f0000000140)) 16:23:24 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xd, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a0", 0x0}, 0x28) [ 3125.595545] FAT-fs (loop3): bogus number of reserved sectors [ 3125.627459] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3127.199465] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 3127.206538] Bluetooth: hci0: command tx timeout [ 3127.279514] Bluetooth: hci1: command 0xfc11 tx timeout [ 3127.285000] Bluetooth: hci1: Entering manufacturer mode failed (-110) 16:23:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x600) 16:23:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x4504000000000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:23:26 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xd, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a0", 0x0}, 0x28) 16:23:26 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x616, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)=[&(0x7f00000000c0)='\x00', &(0x7f0000000100)='vboxnet0:\'\x00', &(0x7f0000000140)='\x00', &(0x7f0000000180)='md5sum\'\x00', &(0x7f00000001c0)='bdev(\x00'], &(0x7f0000000240)) 16:23:26 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x15, 0x0, 0x0, 0x800003}) 16:23:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x2) 16:23:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x2) 16:23:26 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xd, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a0", 0x0}, 0x28) [ 3127.454704] Bluetooth: hci0: Frame reassembly failed (-84) [ 3127.459051] FAT-fs (loop3): bogus number of reserved sectors [ 3127.462146] Bluetooth: hci0: Frame reassembly failed (-84) [ 3127.478484] FAT-fs (loop3): Can't find a valid FAT filesystem 16:23:26 executing program 1: setuid(0xee01) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7ff, 0x20000) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f0000000040)={0x4e, "4e86ed536db2abfe57073aa642bb1a7e42e6035a1d8a969303b7de7b9a89fff51d0ff0766bce5b908008026dfb2b62a40f2f5ffab404ef49ba555d234a9a517e3d98a58d19860b3914513bd512f2"}) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0) 16:23:26 executing program 2 (fault-call:1 fault-nth:0): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) [ 3127.562209] FAT-fs (loop3): bogus number of reserved sectors [ 3127.598852] FAT-fs (loop3): Can't find a valid FAT filesystem 16:23:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x2) 16:23:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x4800000000000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) [ 3127.711519] FAULT_INJECTION: forcing a failure. [ 3127.711519] name failslab, interval 1, probability 0, space 0, times 0 [ 3127.788398] CPU: 1 PID: 2492 Comm: syz-executor.2 Not tainted 4.19.56 #28 [ 3127.795484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3127.805030] Call Trace: [ 3127.807654] dump_stack+0x172/0x1f0 [ 3127.811312] should_fail.cold+0xa/0x1b [ 3127.815493] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 3127.820621] ? lock_downgrade+0x810/0x810 [ 3127.824805] ? ___might_sleep+0x163/0x280 [ 3127.828981] __should_failslab+0x121/0x190 [ 3127.833329] should_failslab+0x9/0x14 [ 3127.837151] __kmalloc+0x2e2/0x750 [ 3127.840699] ? kasan_check_read+0x11/0x20 [ 3127.845038] ? bpf_test_init.isra.0+0x95/0x100 [ 3127.849638] bpf_test_init.isra.0+0x95/0x100 [ 3127.854222] bpf_prog_test_run_skb+0x11e/0xb20 [ 3127.858825] ? bpf_test_finish.isra.0+0x1d0/0x1d0 [ 3127.863826] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3127.869375] ? fput+0x128/0x1a0 [ 3127.872757] ? __bpf_prog_get+0x97/0x290 [ 3127.876928] ? bpf_test_finish.isra.0+0x1d0/0x1d0 [ 3127.881968] bpf_prog_test_run+0x129/0x1a0 [ 3127.886220] __x64_sys_bpf+0x397/0x4c0 [ 3127.890207] ? bpf_prog_get+0x20/0x20 [ 3127.894028] ? do_syscall_64+0x26/0x620 [ 3127.898014] ? lockdep_hardirqs_on+0x415/0x5d0 [ 3127.902697] ? trace_hardirqs_on+0x67/0x220 [ 3127.907469] do_syscall_64+0xfd/0x620 [ 3127.911375] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3127.916735] RIP: 0033:0x4597c9 [ 3127.919939] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3127.939289] RSP: 002b:00007f2b3be69c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3127.947099] RAX: ffffffffffffffda RBX: 00007f2b3be69c90 RCX: 00000000004597c9 [ 3127.954571] RDX: 0000000000000028 RSI: 0000000020000180 RDI: 000000000000000a [ 3127.961861] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3127.969314] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2b3be6a6d4 [ 3127.976689] R13: 00000000004bfb28 R14: 00000000004d14d8 R15: 0000000000000004 [ 3128.046293] FAT-fs (loop3): bogus number of reserved sectors [ 3128.059423] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3128.159834] FAT-fs (loop3): bogus number of reserved sectors [ 3128.176911] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3129.519446] Bluetooth: hci0: command 0xfc11 tx timeout [ 3129.525090] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:23:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x700) 16:23:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e00b4ec7be070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000040), 0x80000) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x20011, r2, 0x0) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) 16:23:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x2) 16:23:28 executing program 2 (fault-call:1 fault-nth:1): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:23:28 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x16, 0x0, 0x0, 0x800003}) 16:23:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x4c00000000000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) [ 3129.650457] FAULT_INJECTION: forcing a failure. [ 3129.650457] name failslab, interval 1, probability 0, space 0, times 0 [ 3129.655581] FAT-fs (loop3): bogus number of reserved sectors [ 3129.679937] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3129.726643] CPU: 1 PID: 2759 Comm: syz-executor.2 Not tainted 4.19.56 #28 [ 3129.733630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3129.743334] Call Trace: [ 3129.745952] dump_stack+0x172/0x1f0 [ 3129.749793] should_fail.cold+0xa/0x1b [ 3129.753887] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 3129.759185] ? __might_fault+0x12b/0x1e0 [ 3129.763535] __should_failslab+0x121/0x190 [ 3129.768253] should_failslab+0x9/0x14 [ 3129.772161] kmem_cache_alloc+0x47/0x700 [ 3129.776414] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3129.782039] ? __phys_addr+0xa4/0x120 [ 3129.785942] ? kasan_unpoison_shadow+0x35/0x50 [ 3129.790662] __build_skb+0x3e/0x310 [ 3129.794310] build_skb+0x21/0x1a0 [ 3129.797878] bpf_prog_test_run_skb+0x1b7/0xb20 [ 3129.802836] ? bpf_test_finish.isra.0+0x1d0/0x1d0 [ 3129.807874] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3129.813518] ? fput+0x128/0x1a0 [ 3129.816909] ? __bpf_prog_get+0x97/0x290 [ 3129.821019] ? bpf_test_finish.isra.0+0x1d0/0x1d0 [ 3129.825983] bpf_prog_test_run+0x129/0x1a0 [ 3129.830725] __x64_sys_bpf+0x397/0x4c0 [ 3129.834724] ? bpf_prog_get+0x20/0x20 [ 3129.838550] ? do_syscall_64+0x26/0x620 [ 3129.842591] ? lockdep_hardirqs_on+0x415/0x5d0 [ 3129.847186] ? trace_hardirqs_on+0x67/0x220 [ 3129.851621] do_syscall_64+0xfd/0x620 [ 3129.855620] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3129.861076] RIP: 0033:0x4597c9 [ 3129.864362] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3129.884083] RSP: 002b:00007f2b3be69c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3129.891896] RAX: ffffffffffffffda RBX: 00007f2b3be69c90 RCX: 00000000004597c9 [ 3129.899314] RDX: 0000000000000028 RSI: 0000000020000180 RDI: 000000000000000a [ 3129.906859] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3129.914164] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2b3be6a6d4 16:23:28 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000000)) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000000040)) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000080)) 16:23:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x2) [ 3129.921899] R13: 00000000004bfb28 R14: 00000000004d14d8 R15: 0000000000000004 16:23:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x2000) 16:23:28 executing program 2 (fault-call:1 fault-nth:2): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) [ 3129.977150] FAT-fs (loop3): bogus number of reserved sectors [ 3129.999446] FAT-fs (loop3): Can't find a valid FAT filesystem 16:23:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x2) 16:23:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x5104000000000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) [ 3130.140367] Bluetooth: hci0: Frame reassembly failed (-84) [ 3130.147100] Bluetooth: hci0: Frame reassembly failed (-84) 16:23:28 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:23:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setreuid(0x0, 0xee00) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x3fc00, 0x84600) syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x88800) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)=ANY=[], &(0x7f0000000240)) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e20, 0x17, @mcast2, 0xffffffffffff41ef}}, 0x1, 0x6, 0x4, 0x2, 0x8}, 0x98) r2 = fcntl$dupfd(r0, 0x0, r0) fchmod(r2, 0xfffffffffffffffc) time(&(0x7f0000000200)) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f0000000280)=0x5) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0xb4) 16:23:29 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)=0x2) [ 3130.259069] FAT-fs (loop3): bogus number of reserved sectors [ 3130.289499] FAT-fs (loop3): Can't find a valid FAT filesystem 16:23:29 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0x2, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) [ 3130.365846] FAT-fs (loop3): bogus number of reserved sectors [ 3130.404786] FAT-fs (loop3): Can't find a valid FAT filesystem 16:23:29 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x17, 0x0, 0x0, 0x800003}) 16:23:29 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)=0x2) 16:23:29 executing program 1: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x10) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000200)={0x3, r0, 0x1}) r2 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x638, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x300, 0x70bd26, 0x25dfdbfe, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0xa63}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x800) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0x810c5701, &(0x7f0000000180)={0x0, 0x0, 0x10000001002, 0x0, [0xfffffffe]}) 16:23:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x5204000000000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) [ 3130.626141] FAT-fs (loop3): bogus number of reserved sectors [ 3130.658533] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3130.739162] FAT-fs (loop3): bogus number of reserved sectors [ 3130.747501] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3132.159450] Bluetooth: hci0: command 0xfc11 tx timeout [ 3132.165092] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:23:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x4800) 16:23:31 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0x3, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:23:31 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)=0x2) 16:23:31 executing program 1: r0 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x3, 0x2) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000000)={0x9c9, "7c7a835814065deb5457207cf98b5e58eb3e58e17c546e81246e7059034e163f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000}) 16:23:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x5304000000000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:23:31 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x18, 0x0, 0x0, 0x800003}) [ 3132.294632] FAT-fs (loop3): bogus number of reserved sectors 16:23:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x2) 16:23:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setresuid(0x0, 0xee01, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x200) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x10, 0x9, 0x4}) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000080)={0xffffffff, 0x5, 0xfd9f, 0x9}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x8936, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x1) write$P9_RREADDIR(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="c50000002901005000000008010000000600000000000000fdfffffffffffffffb07002e2f66696c6530050200000004000000000000000500ffffffffffffdff6002e2f6669eb49e66380dea529991bee403df7e3d76c65300801000000080000000000000005000000000000000107002ec266696c653064000000000300000000000000000000000010fc02ff07002e2f66696c65305001000000020000000000000018000000000000000007002e2f66696c453008020000000200000000f8ffffff000000000000f8a707002e2f66696c6530"], 0xc5) [ 3132.339415] FAT-fs (loop3): Can't find a valid FAT filesystem 16:23:31 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0x4, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) [ 3132.384945] Bluetooth: hci0: Frame reassembly failed (-84) [ 3132.390845] Bluetooth: hci0: Frame reassembly failed (-84) [ 3132.396959] Bluetooth: hci0: Frame reassembly failed (-84) [ 3132.432999] FAT-fs (loop3): bogus number of reserved sectors [ 3132.448437] FAT-fs (loop3): Can't find a valid FAT filesystem 16:23:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x2) 16:23:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x5404000000000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:23:31 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0x5, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) [ 3132.630292] FAT-fs (loop3): bogus number of reserved sectors [ 3132.648764] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3132.736887] FAT-fs (loop3): bogus number of reserved sectors [ 3132.742871] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3134.399392] Bluetooth: hci0: command 0xfc11 tx timeout [ 3134.399426] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:23:33 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x4c00) 16:23:33 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x802, 0x0) r1 = semget$private(0x0, 0x0, 0x528) semctl$GETZCNT(r1, 0x0, 0xf, &(0x7f0000000080)=""/138) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000000)={0xa, 0x7, 0x0, 0x1}, 0xfe92) 16:23:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x2) 16:23:33 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0x6, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:23:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x5504000000000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:23:33 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x19, 0x0, 0x0, 0x800003}) [ 3134.524051] FAT-fs (loop3): bogus number of reserved sectors [ 3134.542054] FAT-fs (loop3): Can't find a valid FAT filesystem 16:23:33 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0x7, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:23:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x2) 16:23:33 executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x1, 0x0, 0x0, 0x0) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, 0x0) getpgid(0x0) read$alg(r0, &(0x7f0000000180), 0x0) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x10, &(0x7f00000005c0)=[{0x0, 0x0, 0x855ad000, 0x3e0000}], 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000140)={0x170b52c4, 0x7, 0x8000, 0xd264, 0xff, 0x5, 0xd7d2, 0x80, 0x1, 0x1}, 0xb) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = semget$private(0x0, 0x3, 0x210) semtimedop(r1, &(0x7f0000000000)=[{0x3, 0x9, 0x1000}, {0x0, 0x81, 0x1800}, {0x6, 0x2, 0x1800}, {0x4, 0x9, 0x1800}, {0x2, 0x9, 0x1800}, {0x4, 0x5, 0x1000}], 0x6, &(0x7f0000000100)={0x77359400}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, &(0x7f0000000080)) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 3134.584593] Bluetooth: hci0: Frame reassembly failed (-84) [ 3134.584781] Bluetooth: hci0: Frame reassembly failed (-84) [ 3134.622891] FAT-fs (loop3): bogus number of reserved sectors [ 3134.628836] FAT-fs (loop3): Can't find a valid FAT filesystem 16:23:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x2) 16:23:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x5604000000000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:23:33 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0x8, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) [ 3134.812921] FAT-fs (loop3): bogus number of reserved sectors [ 3134.848202] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3134.929995] FAT-fs (loop3): bogus number of reserved sectors [ 3134.935936] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3136.639384] Bluetooth: hci0: command 0xfc11 tx timeout [ 3136.639413] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:23:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x6000) 16:23:35 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0x9, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:23:35 executing program 1: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20000000) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x0, &(0x7f0000000040)="ca52772a8554a3ce04834ca72852d8e3cb0c38c295dbf2ba762fa0b95c9a6dbd670ba6ea8585043ebb", 0x29) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x20}, 0x2000}, 0x19) accept4(r1, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:23:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x2) 16:23:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x5704000000000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:23:35 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x800003}) [ 3136.775046] FAT-fs (loop3): bogus number of reserved sectors [ 3136.794685] audit: type=1400 audit(1562084615.561:138): avc: denied { name_bind } for pid=4253 comm="syz-executor.1" src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 16:23:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x2) 16:23:35 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xb, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) [ 3136.853127] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3136.882537] Bluetooth: hci0: Frame reassembly failed (-84) [ 3136.885179] Bluetooth: hci0: Frame reassembly failed (-84) [ 3136.908179] audit: type=1400 audit(1562084615.591:139): avc: denied { node_bind } for pid=4253 comm="syz-executor.1" src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1 [ 3136.940227] FAT-fs (loop3): bogus number of reserved sectors [ 3136.952887] FAT-fs (loop3): Can't find a valid FAT filesystem 16:23:35 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x19, 0x0, 0x0, 0x800003}) 16:23:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x2) 16:23:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x5804000000000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:23:35 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xc, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) [ 3137.187003] FAT-fs (loop3): bogus number of reserved sectors [ 3137.226295] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3137.317362] FAT-fs (loop3): bogus number of reserved sectors [ 3137.351223] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3138.959451] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 3138.959615] Bluetooth: hci0: command 0xfc11 tx timeout 16:23:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x6800) 16:23:37 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x2) 16:23:37 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xd, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:23:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x5904000000000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:23:37 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpeername(0xffffffffffffff9c, &(0x7f0000004980)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000004a00)=0x80) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000004a40)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x80000001}}}, &(0x7f0000004b00)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000004b40)={0xe0a7, 0x6, 0x820a, 0x9, 0x5, 0x47, 0x5, 0x0, r2}, &(0x7f0000004b80)=0x20) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x0, 0x4}, 0x20) setsockopt(r3, 0x0, 0x40, &(0x7f0000000000), 0x1c8) 16:23:37 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x800003}) 16:23:37 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x2) [ 3139.117508] FAT-fs (loop3): bogus number of reserved sectors [ 3139.146981] FAT-fs (loop3): Can't find a valid FAT filesystem 16:23:37 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xe, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) [ 3139.194381] Bluetooth: hci0: Frame reassembly failed (-84) [ 3139.200760] Bluetooth: hci0: Frame reassembly failed (-84) [ 3139.212012] Bluetooth: hci0: Frame reassembly failed (-84) 16:23:38 executing program 1: creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='\x00\xaeC\xae\xc4\x05\xa9\xbd~\xfb\x96\xf7,k\x1a+@\xe54\x01\x01\x01\x00w\xa7\x04~\\\xd4Y\x04\xaf^\xc6\xf2\x98\"\xa0\xa1\x04\xaf\x81\x00ov0x0, &(0x7f0000000480), &(0x7f00000004c0)) r2 = geteuid() syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x3, 0x4, &(0x7f00000003c0)=[{&(0x7f0000000100)="0c98d0a4f48936749ba4bd285a0c2c49297e91cf2d90bdd5c4fbbe609eb6275a95d20a181cf9f8871d9514d4f9fbdcc1813bbe50b910ede9d368b1fd345d53deb7f6b267955a779e667859d2e78565ca17284057cb805ddeea84c5ef6590a5a6b61d097a84d4e0a2e48318257c870351f7", 0x71, 0x569}, {&(0x7f0000000180)="5ac510470c1f7a191837132085ccdf0cdb216ed17c5a2f1b2512a874c1577475c249fbf4969721e521b483b348eabf95022c98f5519a202db0058838e1793944f62b8ea82338a16fd91b5ff9d609ce9d443e33379dedf4db5c494af83b7ff424876e1ed222253710ebc47e", 0x6b, 0x2}, {&(0x7f0000000200)="5ae816fa764350e2b31e028ef9c6cb4ceeec7bfcfaedadae86e77dc28ebb0f8680de4c78886b78e42c39718f5251fa1314ddbca32f7511ab4cbdad4f5dab52904500d2144c323aaf95a720b56466e79115b62e72e90aa96e554e34e2791bc76dd756280ac2778620d1942f80d56c2e85fa72b9bed1175a3e92a747b881151149e30f13a1394d3ed326", 0x89, 0x80000000}, {&(0x7f00000002c0)="47dec59d9eac78c6fdb9df9ef558dca8165d933a183a9625b9e005e781f3213e8c802c788d5a2eb6da26eb015fd222049a6c9ae8891911cd8511ce08c7704a2a4f2c4aca11f52e399e029b505124020f33a4c7b392548cf52885a97180cd150e0fdeba20a434f884d5fb40ac1bd1206b9ea5dcaf54a641870cb44df7b3898bee77b38b9f7f4fca40e6caebfd9ccefd1d3f767e3cae7f9fe00a750813532afdbe8a0721bb07c65b8252e8ad23f26b6a4b7ab910a4a96d05a4d2c3309202d43c8bfc2c0d977db32c70d6954ad4d1d53d71af7806290737ea06936c63b93665d34962c0da666c10564530d33efec73bb1439c384fa144ebfc686c", 0xf9, 0x32}], 0x1800000, &(0x7f0000000500)={[{@mtpt='mtpt'}, {@inode64='inode64'}, {@gquota='gquota'}, {@noalign='noalign'}], [{@obj_role={'obj_role', 0x3d, '/dev/btrfs-control\x00'}}, {@fowner_lt={'fowner<', r1}}, {@fsname={'fsname', 0x3d, '/dev/btrfs-control\x00'}}, {@dont_appraise='dont_appraise'}, {@uid_lt={'uid<', r2}}, {@measure='measure'}, {@audit='audit'}, {@context={'context', 0x3d, 'system_u'}}]}) 16:23:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x5b04000000000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:23:40 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x1c, 0x0, 0x0, 0x800003}) 16:23:40 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x2) 16:23:40 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0x11, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) [ 3141.336193] FAT-fs (loop3): bogus number of reserved sectors [ 3141.370837] FAT-fs (loop3): Can't find a valid FAT filesystem 16:23:40 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x800003}) 16:23:40 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0x12, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) [ 3141.410570] Bluetooth: hci0: Frame reassembly failed (-84) [ 3141.417159] Bluetooth: hci0: Frame reassembly failed (-84) [ 3141.440761] FAT-fs (loop3): bogus number of reserved sectors [ 3141.447072] FAT-fs (loop3): Can't find a valid FAT filesystem 16:23:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x5c04000000000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:23:40 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x2) [ 3141.640307] FAT-fs (loop3): bogus number of reserved sectors [ 3141.654211] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3141.734792] FAT-fs (loop3): bogus number of reserved sectors [ 3141.763571] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3143.439395] Bluetooth: hci0: command 0xfc11 tx timeout [ 3143.445096] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:23:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x7400) 16:23:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x2) 16:23:42 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0x13, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:23:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x6000000000000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:23:42 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x1d, 0x0, 0x0, 0x800003}) 16:23:42 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000140)='id_resolver\x00', &(0x7f0000000180)={'syz'}, 0x0, 0xfffffffffffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={0xffffffffffffff9c}) ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f00000001c0)={0x1}) migrate_pages(0x0, 0x2a, &(0x7f00000004c0)=0xfffffffffffffffe, &(0x7f0000000000)=0x2) 16:23:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x2) [ 3143.588532] FAT-fs (loop3): bogus number of reserved sectors [ 3143.618459] FAT-fs (loop3): Can't find a valid FAT filesystem 16:23:42 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0x14, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) [ 3143.656983] Bluetooth: hci0: Frame reassembly failed (-84) [ 3143.664621] Bluetooth: hci0: Frame reassembly failed (-84) [ 3143.677786] Bluetooth: hci0: Frame reassembly failed (-84) [ 3143.708573] FAT-fs (loop3): bogus number of reserved sectors [ 3143.727701] FAT-fs (loop3): Can't find a valid FAT filesystem 16:23:42 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) [ 3143.789148] Bluetooth: hci1: Frame reassembly failed (-84) 16:23:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x6800000000000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:23:42 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0xf0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) [ 3143.967783] FAT-fs (loop3): bogus number of reserved sectors [ 3144.044010] FAT-fs (loop3): Can't find a valid FAT filesystem 16:23:42 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0xf000, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) [ 3144.139710] FAT-fs (loop3): bogus number of reserved sectors [ 3144.166480] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3145.689452] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 3145.696305] Bluetooth: hci0: command tx timeout 16:23:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x7a00) 16:23:44 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x8000a0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:23:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x6c00000000000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:23:44 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x1e, 0x0, 0x0, 0x800003}) 16:23:44 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000140)='id_resolver\x00', &(0x7f0000000180)={'syz'}, 0x0, 0xfffffffffffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={0xffffffffffffff9c}) ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f00000001c0)={0x1}) migrate_pages(0x0, 0x2a, &(0x7f00000004c0)=0xfffffffffffffffe, &(0x7f0000000000)=0x2) 16:23:44 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0xf0ffff, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) [ 3145.835340] FAT-fs (loop3): bogus number of reserved sectors [ 3145.849521] Bluetooth: hci1: command 0x1003 tx timeout [ 3145.859443] Bluetooth: hci1: sending frame failed (-49) [ 3145.870669] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3145.921633] Bluetooth: hci0: Frame reassembly failed (-84) [ 3145.921687] Bluetooth: hci0: Frame reassembly failed (-84) [ 3145.964602] FAT-fs (loop3): bogus number of reserved sectors [ 3146.017016] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3147.919376] Bluetooth: hci1: command 0x1001 tx timeout [ 3147.924982] Bluetooth: hci1: sending frame failed (-49) [ 3147.999501] Bluetooth: hci0: command 0xfc11 tx timeout [ 3148.004964] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 3149.999450] Bluetooth: hci1: command 0x1009 tx timeout 16:23:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7400000000000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:23:52 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x1000000, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:23:52 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x21, 0x0, 0x0, 0x800003}) 16:23:52 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000800)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3:U\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xdbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xf3W\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#') write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x17c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000001080)="c0dca5055e0bcfec7be070") setgroups(0x3e3, &(0x7f0000000000)) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000000)=r0) pread64(r0, 0x0, 0x0, 0x0) 16:23:52 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x2) 16:23:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0xf000) [ 3154.068619] FAT-fs (loop3): bogus number of reserved sectors [ 3154.091851] Bluetooth: hci0: Frame reassembly failed (-84) [ 3154.095350] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3154.107083] Bluetooth: hci0: Frame reassembly failed (-84) [ 3154.113217] Bluetooth: hci0: Frame reassembly failed (-84) 16:23:52 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) [ 3154.132516] Bluetooth: hci1: Frame reassembly failed (-84) 16:23:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x20001000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x801, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x40) writev(r1, &(0x7f0000001540)=[{&(0x7f0000000000)="fa", 0x1}], 0x1) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) 16:23:52 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0xa0008000, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) [ 3154.187318] FAT-fs (loop3): bogus number of reserved sectors [ 3154.241330] FAT-fs (loop3): Can't find a valid FAT filesystem 16:23:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7a00000000000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:23:53 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0xfffff000, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:23:53 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x8000a0ffffffff, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) [ 3154.431284] FAT-fs (loop3): bogus number of reserved sectors [ 3154.451056] FAT-fs (loop3): Can't find a valid FAT filesystem 16:23:53 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0xfffff000, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) [ 3154.528833] FAT-fs (loop3): bogus number of reserved sectors [ 3154.544696] FAT-fs (loop3): Can't find a valid FAT filesystem 16:23:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7f26000000000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:23:53 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x22, 0x0, 0x0, 0x800003}) 16:23:53 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0xf0ffffffffffff, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) [ 3154.727185] FAT-fs (loop3): bogus number of reserved sectors [ 3154.746472] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3154.849407] FAT-fs (loop3): bogus number of reserved sectors [ 3154.855364] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3156.159403] Bluetooth: hci1: command 0x1003 tx timeout [ 3156.160243] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 3156.164903] Bluetooth: hci1: sending frame failed (-49) [ 3158.239398] Bluetooth: hci1: command 0x1001 tx timeout [ 3158.245310] Bluetooth: hci1: sending frame failed (-49) [ 3160.319483] Bluetooth: hci1: command 0x1009 tx timeout 16:24:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x2) 16:24:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca5055e0bcfec7be070") r1 = socket(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x2000000000000002, 0x0) close(r2) close(r1) pipe(&(0x7f0000000680)={0xffffffffffffffff}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r4) close(r5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ASHMEM_GET_PROT_MASK(r3, 0x7706, &(0x7f0000000000)) splice(r1, 0x0, r1, 0x0, 0xc0, 0x0) close(r5) write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[@ANYPTR], 0x8) 16:24:03 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x100000000000000, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:24:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7fffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:24:03 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x23, 0x0, 0x0, 0x800003}) 16:24:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0xf0ffff) 16:24:03 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x200000000000000, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) [ 3164.313669] Bluetooth: hci0: Frame reassembly failed (-84) [ 3164.322835] Bluetooth: hci0: Frame reassembly failed (-84) [ 3164.344458] FAT-fs (loop3): bogus number of reserved sectors [ 3164.373139] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3164.396900] Bluetooth: hci1: Frame reassembly failed (-84) 16:24:03 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x480, 0x0) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0x3, 0x100000000000001}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x800, 0x2, 0x0, 0x0, 0x59cd548a}, 0x20) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x105000, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000100)={0xfd, 0x0, [0x1ff, 0x3, 0x0, 0x10001]}) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)={0x3, 0x0, [{}, {}, {}]}) [ 3164.451338] FAT-fs (loop3): bogus number of reserved sectors [ 3164.457209] FAT-fs (loop3): Can't find a valid FAT filesystem 16:24:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x8000000000000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:24:03 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0xffffffffa0008000, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:24:03 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0xfffffffffffff000, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) [ 3164.652430] FAT-fs (loop3): bogus number of reserved sectors [ 3164.672498] FAT-fs (loop3): Can't find a valid FAT filesystem 16:24:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/108, 0x6c}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xcdbb, 0x0, 0x0, 0x800e0075d) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000004fc0)=[{&(0x7f0000003b40)=""/206, 0xce}, {0x0}], 0x2}, 0x0) r3 = dup(r2) shutdown(r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xffffff2e, 0x0, 0x0, 0x800e0075f) shutdown(r3, 0x0) shutdown(r4, 0x0) [ 3164.739153] FAT-fs (loop3): bogus number of reserved sectors [ 3164.792794] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3166.319372] Bluetooth: hci0: command 0xfc11 tx timeout [ 3166.319427] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 3166.399504] Bluetooth: hci1: command 0x1003 tx timeout [ 3166.404897] Bluetooth: hci1: sending frame failed (-49) [ 3168.479407] Bluetooth: hci1: command 0x1001 tx timeout [ 3168.484808] Bluetooth: hci1: sending frame failed (-49) [ 3170.559394] Bluetooth: hci1: command 0x1009 tx timeout 16:24:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)=0x2) 16:24:13 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xd, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:24:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x8b26000000000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:24:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") clone(0x3102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) 16:24:13 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x24, 0x0, 0x0, 0x800003}) 16:24:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x1000000) 16:24:13 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe80, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) [ 3174.549831] FAT-fs (loop3): bogus number of reserved sectors [ 3174.562124] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3174.585571] Bluetooth: hci0: Frame reassembly failed (-84) [ 3174.598215] Bluetooth: hci0: Frame reassembly failed (-84) [ 3174.604160] Bluetooth: hci0: Frame reassembly failed (-84) [ 3174.627678] FAT-fs (loop3): bogus number of reserved sectors [ 3174.640318] FAT-fs (loop3): Can't find a valid FAT filesystem 16:24:13 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x2000020e, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:24:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x8cffffff00000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:24:13 executing program 1: open(&(0x7f0000000100)='./file0\x00', 0x20080, 0x50) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) open$dir(&(0x7f0000000240)='./file0/file0\x00', 0x40000, 0x100) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x404101, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x40) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x0) [ 3174.789576] FAT-fs (loop3): bogus number of reserved sectors 16:24:13 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x2, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:24:13 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)=0x0) syz_open_procfs(r1, &(0x7f0000000200)='attr/prev\x00') openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r4, &(0x7f0000000380)=[{&(0x7f0000000680)="649ded", 0x3}], 0x1, 0x4081806) sendfile(r2, r4, 0x0, 0x20020102000007) pipe(0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) clone(0x2502001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="e5826d421d84c78c3bcd3a57508b25"], 0xf) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r3, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930212) [ 3174.864386] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3174.929701] FAT-fs (loop3): bogus number of reserved sectors [ 3174.977843] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3176.639469] Bluetooth: hci0: command 0xfc11 tx timeout [ 3176.645044] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:24:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)=0x2) 16:24:15 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0xf0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:24:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0xe801000000000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:24:15 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$TIOCSPGRP(r0, 0x5410, 0x0) 16:24:15 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x25, 0x0, 0x0, 0x800003}) 16:24:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x2000000) [ 3176.719494] Bluetooth: hci1: command 0xfc11 tx timeout [ 3176.724959] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 3176.810451] FAT-fs (loop3): bogus number of reserved sectors [ 3176.827678] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3176.866272] Bluetooth: hci0: Frame reassembly failed (-84) [ 3176.879670] Bluetooth: hci1: Frame reassembly failed (-84) [ 3176.885509] Bluetooth: hci0: Frame reassembly failed (-84) [ 3176.901791] FAT-fs (loop3): bogus number of reserved sectors 16:24:15 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0xf000, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) [ 3176.916641] FAT-fs (loop3): Can't find a valid FAT filesystem 16:24:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0xf4ffffff00000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:24:15 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x8000a0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:24:15 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3106001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x1, 0x1ac, [0x0, 0x200000c0, 0x200000f0, 0x2000023c], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x224) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) [ 3177.105782] FAT-fs (loop3): bogus number of reserved sectors [ 3177.134843] FAT-fs (loop3): Can't find a valid FAT filesystem 16:24:15 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0xf0ffff, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) [ 3177.201992] FAT-fs (loop3): bogus number of reserved sectors [ 3177.208122] FAT-fs (loop3): Can't find a valid FAT filesystem 16:24:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0xf5ffffff00000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) [ 3177.293818] xt_cluster: cannot load conntrack support for proto=7 [ 3177.353440] FAT-fs (loop3): bogus number of reserved sectors [ 3177.399572] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3177.455833] FAT-fs (loop3): bogus number of reserved sectors [ 3177.466652] FAT-fs (loop3): Can't find a valid FAT filesystem 16:24:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)=0x2) 16:24:17 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x1000000, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:24:17 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) sendto$inet6(0xffffffffffffffff, &(0x7f0000004580), 0x0, 0x4004094, 0x0, 0x0) 16:24:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0xf6ffffff00000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:24:17 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x26, 0x0, 0x0, 0x800003}) [ 3178.879413] Bluetooth: hci1: command 0xfc11 tx timeout [ 3178.879420] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 3178.884903] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:24:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x3000000) 16:24:17 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x2000000, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) [ 3178.979947] FAT-fs (loop3): bogus number of reserved sectors [ 3179.014451] Bluetooth: hci0: Frame reassembly failed (-84) [ 3179.020760] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3179.085975] FAT-fs (loop3): bogus number of reserved sectors [ 3179.118242] Bluetooth: hci1: Frame reassembly failed (-84) [ 3179.120424] Bluetooth: hci1: Frame reassembly failed (-84) [ 3179.126525] Bluetooth: hci1: Frame reassembly failed (-84) 16:24:17 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$9p(r0, 0x0, 0x0) r1 = gettid() write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0xffffffffffffff9e) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) read$eventfd(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x3e6) tkill(r1, 0x1000000000016) [ 3179.142199] FAT-fs (loop3): Can't find a valid FAT filesystem 16:24:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0xfbffffff00000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:24:18 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0xa0008000, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:24:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f00000002c0)=""/223, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="ad", 0x1) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x0, &(0x7f0000000e40)}], 0x500, 0x0) 16:24:18 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0xfffff000, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) [ 3179.386387] FAT-fs (loop3): bogus number of reserved sectors [ 3179.416794] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3179.498132] FAT-fs (loop3): bogus number of reserved sectors [ 3179.509540] FAT-fs (loop3): Can't find a valid FAT filesystem 16:24:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, 0x0) 16:24:19 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x8000a0ffffffff, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:24:19 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x27, 0x0, 0x0, 0x800003}) 16:24:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0xfcfdffff00000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:24:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x30000) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) [ 3181.039452] Bluetooth: hci0: command 0xfc11 tx timeout [ 3181.044920] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 3181.119475] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 3181.119695] Bluetooth: hci1: command 0xfc11 tx timeout [ 3181.129695] FAT-fs (loop3): bogus number of reserved sectors [ 3181.140716] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3181.160758] Bluetooth: hci0: Frame reassembly failed (-84) 16:24:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x4000000) 16:24:20 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0xf0ffffffffffff, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) [ 3181.205983] FAT-fs (loop3): bogus number of reserved sectors 16:24:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1a) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x6, 0xfa}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 3181.270227] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3181.298829] Bluetooth: hci1: Frame reassembly failed (-84) [ 3181.306472] Bluetooth: hci1: Frame reassembly failed (-84) 16:24:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0xfdfdffff00000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:24:20 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x100000000000000, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:24:20 executing program 1: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x300000c, 0x80000032, 0xffffffffffffffff, 0x5) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) flistxattr(r0, &(0x7f00000000c0)=""/9, 0x9) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) shmget(0x3, 0x3000, 0x0, &(0x7f0000572000/0x3000)=nil) futex(&(0x7f000000cffc)=0x1, 0x0, 0x0, 0x0, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, 0x0) prctl$PR_GET_FPEXC(0xb, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0xfffffe38) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x660c, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0xed353f12b323e4aa, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) syz_open_procfs(0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x4002091, r2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) lsetxattr$security_ima(0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="030012000000000000de422d335e7020828bdb9e294218f7cca6d1f64fecf9cc1c755ed9ffdb6f54f980883c929973fd187738e9cf1f0412703602c2a15324e85bc68d22f66d5d847ca8c44258049b6d37b75bf5923f46056432a8aa8bbcc62bbf88c37aee8590ec8497f77388745276758a526f5b4e819d4877d0fe861792885ecbbfcd8e39ab030e4ac9830a55fd955d1a673652152befe38c0a03a5d8f2bca36f32146acf43cddea7571193c613e0e54bbd41dfeddcded60ba1a24a2b9c1d822c50fc9ebdaf71a34d3fc857dff657c0ea666d76d468ba6b9afaee"], 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000100)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000280)=""/246) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r4 = syz_open_procfs(0x0, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000180)=0x30) sendfile(0xffffffffffffffff, r4, 0x0, 0x0) [ 3181.511198] FAT-fs (loop3): bogus number of reserved sectors 16:24:20 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x200000000000000, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) [ 3181.650131] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3181.789167] FAT-fs (loop3): bogus number of reserved sectors [ 3181.813421] FAT-fs (loop3): Can't find a valid FAT filesystem 16:24:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, 0x0) 16:24:22 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x2, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:24:22 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0xffffffffa0008000, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:24:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0xff0f000000000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:24:22 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x28, 0x0, 0x0, 0x800003}) [ 3183.209472] Bluetooth: hci0: command 0xfc11 tx timeout [ 3183.214864] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 3183.319608] FAT-fs (loop3): bogus number of reserved sectors [ 3183.343586] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3183.366715] Bluetooth: hci1: command 0xfc11 tx timeout [ 3183.372250] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 3183.394353] Bluetooth: hci0: Frame reassembly failed (-84) [ 3183.425687] FAT-fs (loop3): bogus number of reserved sectors [ 3183.439074] FAT-fs (loop3): Can't find a valid FAT filesystem 16:24:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x5000000) 16:24:22 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0xfffffffffffff000, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:24:22 executing program 1: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = request_key(&(0x7f0000000200)='.request_key_auth\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)='cpuset\x00', 0xfffffffffffffffa) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)="1295b7873a610383dfc84bd1d5181a60239da8131775a5df9b40d512c06f76cd08d362f231d44126ae5570", 0x2b, 0xfffffffffffffffc) r3 = request_key(&(0x7f0000000380)='.dead\x00', &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000400)='\x00', 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000440)={r1, r2, r3}, &(0x7f0000000480)=""/103, 0x67, &(0x7f0000000540)={&(0x7f0000000500)={'crct10dif-pclmul\x00'}}) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x2ab, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000080)=0x4, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x80000, 0x0) ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f00000001c0)=&(0x7f0000000180)) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, &(0x7f0000000140)={0x0, 0x400}) listen(r0, 0x5) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000040)={0x0, 0x47fffffffffffffe}) 16:24:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0xffff1f0000000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:24:22 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab0d248f7764a02a", 0x0}, 0x28) [ 3183.614515] Bluetooth: hci1: Frame reassembly failed (-84) [ 3183.627738] Bluetooth: hci1: Frame reassembly failed (-84) [ 3183.633804] Bluetooth: hci1: Frame reassembly failed (-84) [ 3183.672300] FAT-fs (loop3): bogus number of reserved sectors [ 3183.678752] FAT-fs (loop3): Can't find a valid FAT filesystem 16:24:22 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764052a", 0x0}, 0x28) [ 3183.737366] FAT-fs (loop3): bogus number of reserved sectors 16:24:22 executing program 1: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000080)='system_u:object_r:hald_sonypic_exec_t:s0\x00', 0x29) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e22, 0x4, @remote, 0x2}}}, &(0x7f0000000240)=0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000280)={r2, 0x1a2f}, &(0x7f00000002c0)=0x8) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000340)={0x57, 0xcb, 0xffffffffffffff01, {0x1000, 0x80000000}, {0x80000001, 0x9}, @period={0x59, 0x0, 0x8001, 0x8, 0x8000, {0x4, 0x81, 0xfffffffffffffff9, 0xca}, 0x5, &(0x7f0000000300)=[0x4152, 0x7, 0x7d, 0x200, 0x0]}}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f00000000c0)) read$rfkill(r1, &(0x7f0000000100), 0x8) [ 3183.802711] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3183.902997] audit: type=1401 audit(1562084662.671:142): op=security_bounded_transition seresult=denied oldcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 newcontext=system_u:object_r:hald_sonypic_exec_t:s0 [ 3183.952440] audit: type=1401 audit(1562084662.691:143): op=security_bounded_transition seresult=denied oldcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 newcontext=system_u:object_r:hald_sonypic_exec_t:s0 16:24:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, 0x0) 16:24:24 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x29, 0x0, 0x0, 0x800003}) 16:24:24 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0, 0x2}, 0x28) 16:24:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0xffffff7f00000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:24:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff9000/0x3000)=nil, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/150, 0x96}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp6\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00'}, 0x0) [ 3185.439504] Bluetooth: hci0: command 0xfc11 tx timeout [ 3185.444898] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 3185.543178] FAT-fs (loop3): bogus number of reserved sectors [ 3185.603792] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3185.678948] FAT-fs (loop3): bogus number of reserved sectors [ 3185.689591] Bluetooth: hci1: command 0xfc11 tx timeout [ 3185.693161] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3185.695660] Bluetooth: hci1: Entering manufacturer mode failed (-110) 16:24:24 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0, 0xf0}, 0x28) 16:24:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffff00000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:24:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x6000000) 16:24:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff9000/0x3000)=nil, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/150, 0x96}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp6\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00'}, 0x0) 16:24:24 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0, 0xf000}, 0x28) [ 3186.002197] Bluetooth: hci1: Frame reassembly failed (-84) [ 3186.004885] Bluetooth: hci1: Frame reassembly failed (-84) [ 3186.008244] Bluetooth: hci1: Frame reassembly failed (-84) [ 3186.019423] FAT-fs (loop3): bogus number of reserved sectors [ 3186.044492] FAT-fs (loop3): Can't find a valid FAT filesystem 16:24:25 executing program 1: lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000280)=0xe8) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x200, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="0200d8224e0b60ab84d93d1de2bdb93828e30a9944f2f4d87f1478e1018394784f5c020b38e0bc02c46d5d6f86dfc485fcb8e5e5501e4065229dd57cb2621b0c6edd3fb5f8c0f2d389ef39bcbbda2d7242bc7ef3e1f85c15a2b069f5eb300775228ddad99588fe496fcaa1a42bda3486f3a1796f29cb5d8119389583fdb38db2df60ce718c1311", 0x87) setresuid(0x0, 0xfffe, r0) socket$caif_stream(0x25, 0x1, 0x0) [ 3186.176238] FAT-fs (loop3): bogus number of reserved sectors [ 3186.199447] FAT-fs (loop3): Can't find a valid FAT filesystem 16:24:25 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0, 0x8000a0}, 0x28) 16:24:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)) 16:24:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffff0700, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:24:26 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socket$kcm(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x522000000003, 0x11) socket$kcm(0x11, 0x3, 0x300) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x20000, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:24:26 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x2a, 0x0, 0x0, 0x800003}) 16:24:26 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0, 0xf0ffff}, 0x28) [ 3187.599546] Bluetooth: hci0: command 0xfc11 tx timeout [ 3187.605136] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 3187.720473] FAT-fs (loop3): bogus number of reserved sectors [ 3187.742129] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3187.781813] Bluetooth: hci0: Frame reassembly failed (-84) [ 3187.781865] Bluetooth: hci0: Frame reassembly failed (-84) [ 3187.842041] FAT-fs (loop3): bogus number of reserved sectors 16:24:26 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socket$kcm(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x522000000003, 0x11) socket$kcm(0x11, 0x3, 0x300) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x20000, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) [ 3187.895217] FAT-fs (loop3): Can't find a valid FAT filesystem 16:24:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff7f, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) [ 3188.079564] Bluetooth: hci1: command 0xfc11 tx timeout [ 3188.085039] Bluetooth: hci1: Entering manufacturer mode failed (-110) 16:24:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x7000000) [ 3188.139129] FAT-fs (loop3): bogus number of reserved sectors [ 3188.172834] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3188.241215] FAT-fs (loop3): bogus number of reserved sectors [ 3188.259479] FAT-fs (loop3): Can't find a valid FAT filesystem 16:24:27 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socket$kcm(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x522000000003, 0x11) socket$kcm(0x11, 0x3, 0x300) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x20000, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:24:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) [ 3188.313088] Bluetooth: hci1: Frame reassembly failed (-84) [ 3188.313477] Bluetooth: hci1: Frame reassembly failed (-84) [ 3188.319083] Bluetooth: hci1: Frame reassembly failed (-84) [ 3188.449070] FAT-fs (loop3): bogus number of reserved sectors 16:24:27 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x2c, 0x0, 0x0, 0x800003}) [ 3188.506244] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3188.591667] FAT-fs (loop3): bogus number of reserved sectors [ 3188.597798] FAT-fs (loop3): Can't find a valid FAT filesystem 16:24:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:24:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)) 16:24:28 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socket$kcm(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x522000000003, 0x11) socket$kcm(0x11, 0x3, 0x300) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x20000, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:24:28 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0, 0x1000000}, 0x28) 16:24:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:24:28 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x2d, 0x0, 0x0, 0x800003}) [ 3189.839438] Bluetooth: hci0: command 0xfc11 tx timeout [ 3189.844938] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:24:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x4, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) [ 3189.980484] Bluetooth: hci0: Frame reassembly failed (-84) [ 3189.980548] Bluetooth: hci0: Frame reassembly failed (-84) 16:24:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x5, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) [ 3190.319505] Bluetooth: hci1: command 0xfc11 tx timeout [ 3190.325151] Bluetooth: hci1: Entering manufacturer mode failed (-110) 16:24:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x20000000) 16:24:29 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socket$kcm(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x522000000003, 0x11) socket$kcm(0x11, 0x3, 0x300) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x20000, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:24:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x6, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:24:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x7, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:24:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x9, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) [ 3190.582973] Bluetooth: hci1: Frame reassembly failed (-84) [ 3190.583499] Bluetooth: hci1: Frame reassembly failed (-84) [ 3190.590026] Bluetooth: hci1: Frame reassembly failed (-84) 16:24:30 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)) 16:24:30 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socket$kcm(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x522000000003, 0x11) socket$kcm(0x11, 0x3, 0x300) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x20000, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:24:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xa, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:24:30 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0x800003}) 16:24:30 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0, 0x2000000}, 0x28) [ 3192.009485] Bluetooth: hci0: command 0xfc11 tx timeout [ 3192.015078] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:24:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xb, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) [ 3192.128378] Bluetooth: hci0: Frame reassembly failed (-84) [ 3192.140359] Bluetooth: hci0: Frame reassembly failed (-84) [ 3192.153097] Bluetooth: hci0: Frame reassembly failed (-84) 16:24:31 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socket$kcm(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x522000000003, 0x11) socket$kcm(0x11, 0x3, 0x300) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x20000, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) [ 3192.399409] protocol 88fb is buggy, dev hsr_slave_0 [ 3192.405473] protocol 88fb is buggy, dev hsr_slave_1 [ 3192.639475] Bluetooth: hci1: command 0xfc11 tx timeout [ 3192.644942] Bluetooth: hci1: Entering manufacturer mode failed (-110) 16:24:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x48000000) 16:24:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xe, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:24:31 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socket$kcm(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x522000000003, 0x11) socket$kcm(0x11, 0x3, 0x300) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:24:31 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x2f, 0x0, 0x0, 0x800003}) 16:24:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x10, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) [ 3192.887055] Bluetooth: hci1: Frame reassembly failed (-84) [ 3192.893279] Bluetooth: hci1: Frame reassembly failed (-84) 16:24:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x22, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:24:32 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socket$kcm(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x522000000003, 0x11) socket$kcm(0x11, 0x3, 0x300) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:24:32 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x30, 0x0, 0x0, 0x800003}) 16:24:32 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0, 0xa0008000}, 0x28) 16:24:32 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socket$kcm(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x522000000003, 0x11) socket$kcm(0x11, 0x3, 0x300) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) [ 3194.159433] Bluetooth: hci0: command 0xfc11 tx timeout [ 3194.164914] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:24:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x23, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:24:33 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socket$kcm(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x522000000003, 0x11) socket$kcm(0x11, 0x3, 0x300) socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) [ 3194.510303] syz-executor.4 (9889) used greatest stack depth: 22560 bytes left [ 3194.959424] Bluetooth: hci1: command 0xfc11 tx timeout [ 3194.965073] Bluetooth: hci1: Entering manufacturer mode failed (-110) 16:24:33 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x4c000000) 16:24:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2c, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:24:33 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socket$kcm(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x522000000003, 0x11) socket$kcm(0x11, 0x3, 0x300) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:24:33 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socket$kcm(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x522000000003, 0x11) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:24:33 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x31, 0x0, 0x0, 0x800003}) 16:24:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x48, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) [ 3195.119399] protocol 88fb is buggy, dev hsr_slave_0 [ 3195.124965] protocol 88fb is buggy, dev hsr_slave_1 [ 3195.130470] protocol 88fb is buggy, dev hsr_slave_0 [ 3195.141072] protocol 88fb is buggy, dev hsr_slave_1 [ 3195.221300] Bluetooth: hci0: Frame reassembly failed (-84) [ 3195.221604] Bluetooth: hci0: Frame reassembly failed (-84) 16:24:34 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socket$kcm(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x522000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:24:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x4c, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:24:34 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0, 0xfffff000}, 0x28) 16:24:34 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socket$kcm(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x522000000003, 0x11) socket$kcm(0x11, 0x3, 0x300) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:24:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x60, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:24:34 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socket$kcm(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) [ 3197.279400] Bluetooth: hci0: command 0xfc11 tx timeout [ 3197.284900] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:24:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x60000000) 16:24:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x68, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:24:36 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:24:36 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x32, 0x0, 0x0, 0x800003}) 16:24:36 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socket$kcm(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x522000000003, 0x11) socket$kcm(0x11, 0x3, 0x300) socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:24:36 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0, 0x8000a0ffffffff}, 0x28) 16:24:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x6c, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:24:36 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) [ 3197.484577] Bluetooth: hci0: Frame reassembly failed (-84) [ 3197.485525] Bluetooth: hci0: Frame reassembly failed (-84) 16:24:36 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socket$kcm(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x522000000003, 0x11) socket$kcm(0x11, 0x3, 0x300) socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:24:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x74, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:24:36 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:24:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x7a, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) [ 3199.519451] Bluetooth: hci0: command 0xfc11 tx timeout [ 3199.525361] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:24:38 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socket$kcm(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x522000000003, 0x11) socket$kcm(0x11, 0x3, 0x300) socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:24:38 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:24:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1e8, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:24:38 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x33, 0x0, 0x0, 0x800003}) 16:24:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x68000000) 16:24:38 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0, 0xf0ffffffffffff}, 0x28) 16:24:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x300, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:24:38 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) [ 3199.764195] Bluetooth: hci0: Frame reassembly failed (-84) [ 3199.771367] Bluetooth: hci0: Frame reassembly failed (-84) 16:24:38 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socket$kcm(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x522000000003, 0x11) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:24:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x445, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:24:38 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:24:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x451, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:24:38 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socket$kcm(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x522000000003, 0x11) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:24:38 executing program 1: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:24:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x452, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:24:39 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x34, 0x0, 0x0, 0x800003}) [ 3201.839400] Bluetooth: hci0: command 0xfc11 tx timeout [ 3201.839418] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:24:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x6c000000) 16:24:40 executing program 1: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:24:40 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socket$kcm(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x522000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:24:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x453, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:24:40 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0, 0x100000000000000}, 0x28) 16:24:40 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x35, 0x0, 0x0, 0x800003}) 16:24:40 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0, 0x200000000000000}, 0x28) 16:24:40 executing program 1: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:24:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x454, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) [ 3202.051979] Bluetooth: hci0: Frame reassembly failed (-84) [ 3202.059715] Bluetooth: hci0: Frame reassembly failed (-84) 16:24:40 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socket$kcm(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x522000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:24:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x455, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:24:40 executing program 1: r0 = socket$kcm(0x10, 0x0, 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) [ 3204.079386] Bluetooth: hci0: command 0xfc11 tx timeout [ 3204.080088] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:24:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x74000000) 16:24:42 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0, 0xffffffffa0008000}, 0x28) 16:24:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x456, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:24:42 executing program 1: r0 = socket$kcm(0x10, 0x0, 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:24:42 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socket$kcm(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x522000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:24:42 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x36, 0x0, 0x0, 0x800003}) 16:24:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x457, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:24:43 executing program 1: r0 = socket$kcm(0x10, 0x0, 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) [ 3204.271903] Bluetooth: hci0: Frame reassembly failed (-84) [ 3204.280357] Bluetooth: hci0: Frame reassembly failed (-84) 16:24:43 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socket$kcm(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:24:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x458, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:24:43 executing program 1: socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:24:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x459, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) [ 3206.319490] Bluetooth: hci0: command 0xfc11 tx timeout [ 3206.319543] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:24:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x7a000000) 16:24:45 executing program 1: socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:24:45 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socket$kcm(0x10, 0x3, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:24:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x45a, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:24:45 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x37, 0x0, 0x0, 0x800003}) 16:24:45 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0, 0xfffffffffffff000}, 0x28) 16:24:45 executing program 1: socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:24:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x45b, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:24:45 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socket$kcm(0x10, 0x3, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) [ 3206.560972] Bluetooth: hci0: Frame reassembly failed (-84) [ 3206.566947] Bluetooth: hci0: Frame reassembly failed (-84) [ 3206.578361] Bluetooth: hci0: Frame reassembly failed (-84) 16:24:45 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, 0x0, 0x0) 16:24:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x45c, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:24:45 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socket$kcm(0x10, 0x3, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) [ 3208.639473] Bluetooth: hci0: command 0xfc11 tx timeout [ 3208.644513] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:24:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0xfdfdffff) 16:24:47 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, 0x0, 0x0) 16:24:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x500, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:24:47 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:24:47 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x38, 0x0, 0x0, 0x800003}) 16:24:47 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0, 0x0, 0x2}, 0x28) 16:24:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x600, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:24:47 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, 0x0, 0x0) 16:24:47 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0, 0x0, 0xf0}, 0x28) [ 3208.832666] Bluetooth: hci0: Frame reassembly failed (-84) [ 3208.838685] Bluetooth: hci0: Frame reassembly failed (-84) 16:24:47 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:24:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x700, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:24:47 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0, 0x0, 0xf000}, 0x28) [ 3210.879370] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 3210.879377] Bluetooth: hci0: command 0xfc11 tx timeout 16:24:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0xfffff000) 16:24:49 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 16:24:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x900, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:24:49 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0, 0x0, 0x8000a0}, 0x28) 16:24:49 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:24:49 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x39, 0x0, 0x0, 0x800003}) 16:24:49 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0, 0x0, 0xf0ffff}, 0x28) 16:24:49 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 16:24:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xa00, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) [ 3211.096935] Bluetooth: hci0: Frame reassembly failed (-84) [ 3211.103492] Bluetooth: hci0: Frame reassembly failed (-84) 16:24:49 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:24:50 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0, 0x0, 0x1000000}, 0x28) 16:24:50 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) [ 3213.119377] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 3213.119394] Bluetooth: hci0: command 0xfc11 tx timeout 16:24:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0xfffffdfd) 16:24:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xa0e, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:24:51 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:24:51 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)}, 0x0) 16:24:51 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0, 0x0, 0x2000000}, 0x28) 16:24:51 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x3a, 0x0, 0x0, 0x800003}) 16:24:52 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)}, 0x0) 16:24:52 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0, 0x0, 0xa0008000}, 0x28) 16:24:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xb00, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:24:52 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) [ 3213.357611] Bluetooth: hci0: Frame reassembly failed (-84) [ 3213.364012] Bluetooth: hci0: Frame reassembly failed (-84) [ 3213.388434] Bluetooth: hci0: Frame reassembly failed (-84) 16:24:52 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0, 0x0, 0xfffff000}, 0x28) 16:24:52 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)}, 0x0) [ 3215.359376] Bluetooth: hci0: command 0xfc11 tx timeout [ 3215.359383] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:24:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0xffffff7f) 16:24:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xe00, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:24:54 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:24:54 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) 16:24:54 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0, 0x0, 0x8000a0ffffffff}, 0x28) 16:24:54 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x3b, 0x0, 0x0, 0x800003}) 16:24:54 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) 16:24:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xe0a, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:24:54 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0, 0x0, 0xf0ffffffffffff}, 0x28) [ 3215.552713] Bluetooth: hci0: Frame reassembly failed (-84) [ 3215.559880] Bluetooth: hci0: Frame reassembly failed (-84) 16:24:54 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:24:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1f00, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:24:54 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) [ 3217.599398] Bluetooth: hci0: command 0xfc11 tx timeout [ 3217.599421] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:24:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0xf0ffffffffffff) 16:24:56 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0, 0x0, 0x100000000000000}, 0x28) 16:24:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2000, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:24:56 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)}], 0x1}, 0x0) 16:24:56 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:24:56 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x3c, 0x0, 0x0, 0x800003}) 16:24:56 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)}], 0x1}, 0x0) 16:24:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2200, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:24:56 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0, 0x0, 0x200000000000000}, 0x28) [ 3217.821185] Bluetooth: hci0: Frame reassembly failed (-84) [ 3217.827270] Bluetooth: hci0: Frame reassembly failed (-84) 16:24:56 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)}], 0x1}, 0x0) 16:24:56 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:24:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2300, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) [ 3218.009895] protocol 88fb is buggy, dev hsr_slave_0 [ 3218.015561] protocol 88fb is buggy, dev hsr_slave_1 [ 3218.021871] protocol 88fb is buggy, dev hsr_slave_0 [ 3218.027187] protocol 88fb is buggy, dev hsr_slave_1 [ 3219.839447] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 3219.846201] Bluetooth: hci0: command tx timeout 16:24:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x100000000000000) 16:24:58 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872", 0x26}], 0x1}, 0x0) 16:24:58 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0, 0x0, 0xffffffffa0008000}, 0x28) 16:24:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x267f, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:24:58 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:24:58 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x3d, 0x0, 0x0, 0x800003}) 16:24:58 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872", 0x26}], 0x1}, 0x0) 16:24:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x268b, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:24:58 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0, 0x0, 0xfffffffffffff000}, 0x28) 16:24:58 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) [ 3220.041678] Bluetooth: hci0: Frame reassembly failed (-84) [ 3220.051147] Bluetooth: hci0: Frame reassembly failed (-84) 16:24:59 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872", 0x26}], 0x1}, 0x0) 16:24:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2c00, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) [ 3222.079449] Bluetooth: hci0: command 0xfc11 tx timeout [ 3222.084829] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:25:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x200000000000000) 16:25:00 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x48) 16:25:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x3f00, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:00 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:00 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e747", 0x39}], 0x1}, 0x0) 16:25:00 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x3e, 0x0, 0x0, 0x800003}) 16:25:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x4000, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:01 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x200001a8) 16:25:01 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e747", 0x39}], 0x1}, 0x0) [ 3222.301399] Bluetooth: hci0: Frame reassembly failed (-84) [ 3222.309874] Bluetooth: hci0: Frame reassembly failed (-84) 16:25:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x4504, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:01 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000000800400087237589787beecdc3eb2c5986860000000095aeafba29000000"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockname$unix(r1, &(0x7f0000000240)=@abs, &(0x7f0000000140)=0x6e) 16:25:01 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) [ 3224.329456] Bluetooth: hci0: command 0xfc11 tx timeout [ 3224.334918] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:25:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x300000000000000) 16:25:03 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e747", 0x39}], 0x1}, 0x0) 16:25:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x4800, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:03 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0xc3, &(0x7f0000000240)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x4000000}, 0x10}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:25:03 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:03 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x41, 0x0, 0x0, 0x800003}) 16:25:03 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:25:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x4c00, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:03 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a", 0x43}], 0x1}, 0x0) [ 3224.567482] Bluetooth: hci0: Frame reassembly failed (-84) [ 3224.567612] Bluetooth: hci0: Frame reassembly failed (-84) 16:25:03 executing program 4: r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x5104, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:03 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f00000001c0)={0x0, 0x3, 0x7, 0x40, &(0x7f0000ffe000/0x1000)=nil}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="8500a528653b8bf9e823670000870d000000009514d8062a"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)) memfd_create(&(0x7f0000000640)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\xe9\x0e\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xddc\x89\xff\xab\xb0\xea\x17\xb4P\xf9\xc2\xf1\x93E2*f7\xa2\xd9\x14\xd9\xb2i\xe9:\x12\xe09\xb1\xfe\x12\v\xe4\xa7B[\x1d\xf6SW\x8a\x96\x9bw\xfa\xd9\xde\xc9\xc6\xc9H_\x90\xae\xc5\x1d\xfa@@\xd5\xf4\x95\xedaB.\x12U9E\xd3`f\xac\x15&\xdf\x14\xddK\xa6\xe1\x89\x9b\xe1\x8e\xd1A\x8555#\xddz\xb0\xb3\xbdt\xa9\xea1\x80\x84\xeb\xdc\xcd1m6\x8b\x9dHQ\xbb\xfbi\x1a\xc7\xc94\xa2\xc7D\aR\xe7\xb5\xa4\xd0\xf3?\xe8.j\xd0[X\x10>5\xa4\x96\xce\xdei00P\'\xf8c\xeb\xb6\xce%\xf4^{\xf1D\x80', 0x40000000000004) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000380)={0x5, 0x5}) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000340)={0x10001, 0x8001, 0x76faa986, @random="cdc3b44f414a", 'vcan0\x00'}) [ 3226.639407] Bluetooth: hci0: command 0xfc11 tx timeout [ 3226.639414] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:25:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x400000000000000) 16:25:05 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a", 0x43}], 0x1}, 0x0) 16:25:05 executing program 4: r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x5204, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:05 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="85000000080000008700000000000000950000006e2fe84b"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:25:05 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x42, 0x0, 0x0, 0x800003}) 16:25:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x5304, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:05 executing program 2: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000200), &(0x7f0000000240)=0x4) r1 = gettid() ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000280)=r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) socket$bt_hidp(0x1f, 0x3, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0xfffffebc, 0x0, &(0x7f0000000140)="2f1b71e151f753c8aab7aa5edeb64fb391202558d7f5ab4e248f7764a02a", 0x0}, 0x10) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x60800, 0x0) 16:25:05 executing program 4: r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:05 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a", 0x43}], 0x1}, 0x0) [ 3226.831777] Bluetooth: hci0: Frame reassembly failed (-84) [ 3226.839183] Bluetooth: hci0: Frame reassembly failed (-84) 16:25:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x5404, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:05 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5", 0x48}], 0x1}, 0x0) [ 3228.879400] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 3228.879936] Bluetooth: hci0: command 0xfc11 tx timeout 16:25:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x500000000000000) 16:25:07 executing program 4: r0 = socket$kcm(0x10, 0x0, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x5504, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:07 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="85000000020e21fe1d6a1b059a3a00e9c751b06482fab077"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:25:07 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5", 0x48}], 0x1}, 0x0) 16:25:07 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x43, 0x0, 0x0, 0x800003}) 16:25:07 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5", 0x48}], 0x1}, 0x0) 16:25:07 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0xc3, &(0x7f0000000240)=""/195, 0x0, 0x0, [], 0x0, 0x200000000, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:25:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x5604, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:07 executing program 4: r0 = socket$kcm(0x10, 0x0, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) [ 3229.087505] Bluetooth: hci0: Frame reassembly failed (-84) [ 3229.087599] Bluetooth: hci0: Frame reassembly failed (-84) [ 3229.100524] Bluetooth: hci0: Frame reassembly failed (-84) 16:25:07 executing program 2: getpeername$packet(0xffffffffffffff9c, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x4, &(0x7f0000000100)=@raw=[@ldst={0x0, 0x3, 0x3, 0xd, 0x4, 0x58, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x2d}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xffc6, 0x27c, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0, 0x7}, 0xe897feeb8774b29a) 16:25:07 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e", 0x4a}], 0x1}, 0x0) [ 3231.119395] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 3231.119401] Bluetooth: hci0: command 0xfc11 tx timeout 16:25:09 executing program 4: r0 = socket$kcm(0x10, 0x0, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x5704, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:09 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e", 0x4a}], 0x1}, 0x0) 16:25:09 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x20400, 0x0) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000180)={0x0, &(0x7f0000000140)}) 16:25:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x600000000000000) 16:25:09 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x44, 0x0, 0x0, 0x800003}) 16:25:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x5804, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:10 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:10 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e", 0x4a}], 0x1}, 0x0) [ 3231.300054] Bluetooth: hci0: Frame reassembly failed (-84) [ 3231.307825] Bluetooth: hci0: Frame reassembly failed (-84) 16:25:10 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="85000000897a000000000000"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) socket(0xa, 0x80805, 0xe1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x17d, &(0x7f0000000100)="2f202558d7f5ab4e248f7764a02a", 0x0, 0x4000000}, 0x28) 16:25:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x5904, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:10 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8f", 0x4b}], 0x1}, 0x0) 16:25:10 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x5a04, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:10 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8f", 0x4b}], 0x1}, 0x0) 16:25:10 executing program 2: openat$urandom(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/urandom\x00', 0x20040, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) r1 = syz_open_dev$dmmidi(&(0x7f0000000240)='/dev/dmmidi#\x00', 0x1e, 0x2000) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000280)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0x0, 0x237, 0x11, &(0x7f0000000480)="2fe40710dc7c40db5e6706389fc9683f0dd7aa8a5e9b0813a7915ead712a87c4f7e7f04f6e674e7766699a6bb72531e18535bd1f9e3b1ef4fa92c7544f07e0b59d63214a6edf32edeb552e8e8711958908bab4cd0ccff6c5952b2c0e22bbc74da00ceea3f0d66328cb33f7c5873cf05799435f8a9dab7b3d204839d8abd960fe3aa5d5d1d42776d4396dd9fcdb6d5c4056cda98530f86faeaea6a29e97a4e2bb6e3a516e44930aa24e0c2a78cd565286248b4170dc9114aa4aa25f76f7c02739f4cc177bd751f8c2589baf715cb9343382a9a4b79a04d364a4e0fc55c14b5461f41f1e04aae8e558e561e2", 0x0, 0x800}, 0x855ec7064f4b92ca) r2 = accept$inet(r0, &(0x7f0000000100), &(0x7f0000000140)=0x10) r3 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x8005, 0x83fc) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0x3, 0x4) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000180)) [ 3233.359505] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 3233.359511] Bluetooth: hci0: command 0xfc11 tx timeout 16:25:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x700000000000000) 16:25:12 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x5b04, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:12 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8f", 0x4b}], 0x1}, 0x0) 16:25:12 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r1, 0x414, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x639}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7f}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9618}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xf}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:25:12 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x45, 0x0, 0x0, 0x800003}) 16:25:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x5c04, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:12 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) [ 3233.532655] Bluetooth: hci0: Frame reassembly failed (-84) [ 3233.535304] Bluetooth: hci0: Frame reassembly failed (-84) 16:25:12 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snapshot\x00', 0x2000, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000440)={0x3f00000000, 0x7, 0x222}, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) prctl$PR_SET_SECCOMP(0x16, 0x3, &(0x7f00000003c0)={0x4, &(0x7f0000000380)=[{0x1, 0x5, 0x7}, {0x8, 0x1, 0x0, 0x5}, {0x1b, 0x3, 0x4, 0x3}, {0x1ff, 0x64, 0x1, 0x4}]}) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000480)={0x53, 0xfffffffffffffffd, 0xffffffffffffff27, 0x6, @buffer={0x0, 0x5b, &(0x7f0000000240)=""/91}, &(0x7f00000002c0)="6d39f68cb29b1dcb0d38964ad7f5414dca2a46fc386511d18299e312271aee7963abfb896749a1efdcb65f293c96290372e8b25176272d5371536c539de77835cd80c5368c0fd16314a6483b7034e22ea0220e4b233538bc681003de9da952e426e36221ea2d9c35a5319f5c41b8b125adbaa5e6627f70269689ea8878f7f8cfbb63d5ce5fbf872e91d6fb3da6264377bb4c4ed754d87f9d9370bcdc2a1435d6c87906ef6fd919be0f55d3", &(0x7f0000000140)=""/35, 0x8003, 0x2, 0x3, &(0x7f00000001c0)}) 16:25:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x6000, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:12 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:12 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) [ 3235.599408] Bluetooth: hci0: command 0xfc11 tx timeout [ 3235.609474] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:25:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x2000000000000000) 16:25:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x6800, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:14 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x80, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000140)={0x0, 0x1}) 16:25:14 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:14 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:14 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x46, 0x0, 0x0, 0x800003}) 16:25:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x6c00, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:14 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480)='/dev/hwrng\x00', 0x10000, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self\x00', 0x20000, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/audio\x00', 0x40, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000500)={0x3, r1, 0x11d90eb821423fe4}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000680)={0x0, 0xa0, "5cea9d1840751da07637571b6f6904231768d37283967d66475b53c85691129909b7e5fe2000bbd7052fcad7d3a745a8e332e36f62123e4eb9ce4938d1a1e7ae5124acbc4efb41555a7d859e4d2777aa8acc4c28ef08185b09eb83cf19369d9f954c4097d4aee243317a0d0ab0ffd2c9a56bb1c8775f6668411ff62e7f1a17d2dcb5f9b40836895fe76f74dd1da2e2a0c240ede7c5437ee29b54beddd6ee9c86"}, &(0x7f0000000240)=0xa8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000280)={r3}, &(0x7f0000000580)=0x8) fsetxattr$security_ima(r2, &(0x7f0000000400)='security.ima\x00', &(0x7f0000000440)=@md5={0x1, "25502ae3b735ed4f80951a7825d5138c"}, 0x11, 0x1) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740)='/proc/self/net/pfkey\x00', 0x20200, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000640), &(0x7f00000005c0)=0x1ac) r5 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0xc500, 0x80) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000140)={0x20, 0x1}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:25:14 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) [ 3235.859156] Bluetooth: hci0: Frame reassembly failed (-84) [ 3235.874284] Bluetooth: hci0: Frame reassembly failed (-84) 16:25:14 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x7400, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:14 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) [ 3236.079408] protocol 88fb is buggy, dev hsr_slave_0 [ 3236.084547] protocol 88fb is buggy, dev hsr_slave_1 [ 3237.919396] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 3237.919403] Bluetooth: hci0: command 0xfc11 tx timeout 16:25:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x4800000000000000) 16:25:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x7a00, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:16 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x9}, 0x10}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:25:16 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:16 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, 0x0, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:16 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x47, 0x0, 0x0, 0x800003}) 16:25:16 executing program 2: creat(&(0x7f0000000100)='./file0\x00', 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:25:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x7f26, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:16 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, 0x0, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) [ 3238.152323] Bluetooth: hci0: Frame reassembly failed (-84) [ 3238.158168] Bluetooth: hci0: Frame reassembly failed (-84) [ 3238.163955] protocol 88fb is buggy, dev hsr_slave_0 [ 3238.164024] protocol 88fb is buggy, dev hsr_slave_1 [ 3238.185123] Bluetooth: hci0: Frame reassembly failed (-84) 16:25:17 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:17 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="85000000ecff01008600004000000000950000000000000013a6d9b53c6713bc50b8809c47c02d990e584b1474143ab5d6b902e96f73126e0722875cca9af86cf5fb524a370c1d5139427a20d4c4f7a9585934ec5a85f12fc9d00075e8c11c411a41ebcba2b0a130c33ef372d174c74f3ec44eb420125a8c3097464dd8d93bdb79d991baeedf969100ac02186505bc0bb7679cf6cb938a298c68042e5ffacf378f9684102a49d04f684bce70ad55fe7f93837094f39d815ff585b1a5f1c2a6cfaf09e33a4332"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0xc3, &(0x7f0000000240)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0xffffffffffffff3c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x4000, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='bpq0\x00', 0x10) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000140)={'syzkaller0\x00', {0x2, 0x4e24, @broadcast}}) 16:25:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x8b26, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) [ 3240.159375] Bluetooth: hci0: command 0xfc11 tx timeout [ 3240.159400] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 3240.177129] Bluetooth: hci0: Frame reassembly failed (-84) [ 3240.177212] Bluetooth: hci0: Frame reassembly failed (-84) 16:25:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x4c00000000000000) 16:25:21 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, 0x0, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:21 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, 0x0, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xe801, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:21 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="770000000800000087000000000000009500000000000000"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:25:21 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x48, 0x0, 0x0, 0x800003}) [ 3242.239367] Bluetooth: hci0: command 0xfc11 tx timeout [ 3242.239401] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:25:21 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000000240)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) r2 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x2, 0x2) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000140)=""/28) 16:25:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xedc0, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) [ 3242.348344] Bluetooth: hci0: Frame reassembly failed (-84) [ 3242.348387] Bluetooth: hci0: Frame reassembly failed (-84) [ 3242.362216] Bluetooth: hci0: Frame reassembly failed (-84) 16:25:21 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xff0f, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:21 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, 0x0, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:21 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x40080, 0x0) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000240)={0x6, "85773eb01d35517465f5f33dd842bd4584779b2823720d7f678cc6658ea68552", 0x0, 0x5, 0x4000000000000007, 0x30003, 0x40200, 0x2}) [ 3244.399527] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 3244.406465] Bluetooth: hci0: command tx timeout 16:25:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x6000000000000000) 16:25:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:23 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") clone(0x3102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/exec\x00', 0x2, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) exit_group(0x0) 16:25:23 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_mr_cache\x00') ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000140)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0xb) 16:25:23 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x49, 0x0, 0x0, 0x800003}) 16:25:23 executing program 1: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\x11\x91]\x1fC\b5\x97\xd7\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="4400000000000500000000000000"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 16:25:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x40000, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:23 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) [ 3244.631360] Bluetooth: hci0: Frame reassembly failed (-84) [ 3244.649712] Bluetooth: hci0: Frame reassembly failed (-84) 16:25:23 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="8500000008000000870000000000000095000000000000005d83a847335ed9dd4deb6e9d2e9b544314618dbce8f5f480"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:25:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xe0000, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1fffff, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) [ 3246.639398] Bluetooth: hci0: command 0xfc11 tx timeout [ 3246.644845] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:25:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x6800000000000000) 16:25:25 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:25 executing program 2: mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000240)=""/145) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/dev_snmp6\x00') bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={r0, r1, 0xc, 0x2}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:25:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x400000, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:25 executing program 1: r0 = socket$inet6(0xa, 0x1000000003, 0x100000400000003a) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="c0dc00025e0b01047be070") connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="82ca", 0x2}], 0x1}}], 0x1, 0x8000) write$FUSE_OPEN(r0, &(0x7f00000000c0)={0x20}, 0x20) 16:25:25 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x4a, 0x0, 0x0, 0x800003}) 16:25:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x6b6b6b, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) [ 3246.810341] Bluetooth: hci0: Frame reassembly failed (-84) [ 3246.810439] Bluetooth: hci0: Frame reassembly failed (-84) 16:25:25 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x400000, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000240)) arch_prctl$ARCH_SET_GS(0x1001, 0x6) 16:25:25 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:25 executing program 1: open(0x0, 0x20080, 0x50) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x40) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:25:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1000000, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2000000, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) [ 3248.879424] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 3248.879446] Bluetooth: hci0: command 0xfc11 tx timeout 16:25:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x6c00000000000000) 16:25:27 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:27 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x3, 0x40100) ioctl$RTC_UIE_ON(r0, 0x7003) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:25:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000500)='syz0\x00') 16:25:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x3000000, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:27 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x4b, 0x0, 0x0, 0x800003}) 16:25:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x4000000, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:27 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) [ 3249.122905] Bluetooth: hci0: Frame reassembly failed (-84) [ 3249.129107] Bluetooth: hci0: Frame reassembly failed (-84) [ 3249.144651] Bluetooth: hci0: Frame reassembly failed (-84) 16:25:27 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xf2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 16:25:28 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="8500001a08000000870000000000000095000000000000001bf8bebcbc4df47ab7f78f7fd4e13473331756494435aaee8c52a4aecffc2749815373e536fcc43ed3486ab709cd76aa5405ed057c5ef258a16a39ac04288c1f0235f3a5462d8af1e98c98990c8880f45a9ff9fc714a979de313090402b890fbb2e73c5aa1a2bad83d9eebbc4dd718ff1c9c352f338b70b1cd3ab5c5b80fd8de79acb2b689c7e876c0554322aaf28e69ea0d59a61fa775b683dac0df90402fa367bcf0ec5e2301fb68d96d50700ee51373414f4fb52014dad890f769780763e1"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:25:28 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x5000000, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) [ 3251.199382] Bluetooth: hci0: command 0xfc11 tx timeout [ 3251.199427] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:25:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x7400000000000000) 16:25:30 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000300)={{0x2, 0x4e23, @loopback}, {0x306}, 0x2, {0x2, 0x4e22, @empty}, 'veth1_to_bridge\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000240)={{0x34fb, 0x4, 0x3f, 0x40, 0x7, 0x100000000000}, 0x4, 0x7, 0x3, 0xfffffffffffffffe, 0x8, "b6e04a93bddf42ec7647952bd5f8fc8097f8fffea88b1fe8bb787cbc2f03cb0b0ace800f69283db6cf5efde5e94ddcd13e2e8f1b147e3c2c760f37f788794cca01273466fb347a1f249fdf0a790ddede4cd22af17b062c6f4ab58ab10784f9734b7f5e2ad74d457a6a5cd20c8d2187fac563579d6502eb4aa5bcf1a0f7004190"}) 16:25:30 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x6000000, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:30 executing program 1: poll(&(0x7f0000000000), 0xe, 0x40) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xfffffecb, 0x0, 0x0, 0x800e00515) shutdown(r0, 0x0) 16:25:30 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x4c, 0x0, 0x0, 0x800003}) 16:25:30 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x7000000, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:30 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x131100, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000240)={@dev, @dev}, &(0x7f0000000280)=0xc) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x1, 0xf, 0x2}) syz_open_dev$vivid(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 16:25:30 executing program 1: [ 3251.440323] Bluetooth: hci0: Frame reassembly failed (-84) [ 3251.446111] Bluetooth: hci0: Frame reassembly failed (-84) [ 3251.473226] Bluetooth: hci0: Frame reassembly failed (-84) 16:25:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x9000000, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:30 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) [ 3253.519387] Bluetooth: hci0: command 0xfc11 tx timeout [ 3253.524954] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:25:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0x7a00000000000000) 16:25:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xa000000, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:32 executing program 1: 16:25:32 executing program 2: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000240)=0xc) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x1000000, &(0x7f0000000280)={[{@mode={'mode', 0x3d, 0x5}}, {@mode={'mode', 0x3d, 0x80}}, {@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0x6}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/{'}}, {@dont_appraise='dont_appraise'}, {@pcr={'pcr', 0x3d, 0x39}}, {@subj_user={'subj_user', 0x3d, 'PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd'}}, {@obj_type={'obj_type', 0x3d, 'PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd'}}, {@subj_type={'subj_type', 0x3d, 'PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd'}}, {@hash='hash'}, {@obj_user={'obj_user', 0x3d, 'ppp0'}}, {@pcr={'pcr', 0x3d, 0x37}}, {@uid_eq={'uid', 0x3d, r0}}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x3c4, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:25:32 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:32 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x4d, 0x0, 0x0, 0x800003}) 16:25:32 executing program 1: 16:25:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xa0e0000, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:32 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x20003, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000140)={0x4, 0x1, 0x4, 0x3, 0x8, 0x1, 0x401, 0x5, 0x800, 0x1}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000000800000087000000000000009500000000000000"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x0, 0xe, 0x224, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:25:32 executing program 1: [ 3253.757175] Bluetooth: hci0: Frame reassembly failed (-84) [ 3253.764905] Bluetooth: hci0: Frame reassembly failed (-84) 16:25:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xb000000, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) [ 3255.759398] Bluetooth: hci0: command 0xfc11 tx timeout [ 3255.765438] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:25:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0xfdfdffff00000000) 16:25:34 executing program 1: 16:25:34 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:34 executing program 2: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f0000000140)={{0x0, 0x5, 0x5, 0x80, 0xfff, 0x2}, 0x10000}) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0xd000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000080000008700000000000000950000000000dffffe5b0aa7adcae839505573ca83fbed0401391784e4cf7300939c5b159ba63968e0cac913ed5d055bd93b443f1f06cd55bcbb720d7296a80fa766fd8655"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:25:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x10000000, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:34 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x4e, 0x0, 0x0, 0x800003}) 16:25:34 executing program 1: 16:25:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1f000000, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) [ 3255.985697] Bluetooth: hci0: Frame reassembly failed (-84) [ 3256.004353] Bluetooth: hci0: Frame reassembly failed (-84) 16:25:34 executing program 1: poll(&(0x7f0000000100)=[{}, {0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0x20b4}, {0xffffffffffffffff, 0x130}, {}, {}, {}], 0x7, 0x800000000004b) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x58d, 0x0, 0x0, 0x800e004e5) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r0, r1) r2 = getpid() getpgid(r2) recvfrom$inet(r1, 0x0, 0xa2, 0x0, 0x0, 0x800e004e1) shutdown(r0, 0x0) 16:25:34 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:34 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="85000000080000008700000000000095000000000000006159b9ed1a992217"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0x5da, 0x1da8915c, &(0x7f0000000100)="2f202558d7f5ab4e248f7764a02a", 0x0, 0x20800}, 0xfffffffffffffef2) 16:25:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000000, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) [ 3256.239405] protocol 88fb is buggy, dev hsr_slave_0 [ 3256.239411] protocol 88fb is buggy, dev hsr_slave_0 [ 3256.239455] protocol 88fb is buggy, dev hsr_slave_1 [ 3256.244733] protocol 88fb is buggy, dev hsr_slave_1 [ 3257.999454] Bluetooth: hci0: command 0xfc11 tx timeout [ 3258.005130] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:25:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0xffffff7f00000000) 16:25:36 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="f548b60000009500"/24], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x2000000, &(0x7f0000000340)={[{@index_off='index=off'}, {@nfs_export_off='nfs_export=off'}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_off='index=off'}, {@index_off='index=off'}], [{@permit_directio='permit_directio'}]}) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000a80)=ANY=[]) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:25:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x22000000, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x0, 0x400100) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") clone(0x3102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) wait4(0x0, 0x0, 0x80000000, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x0) 16:25:36 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:36 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x4f, 0x0, 0x0, 0x800003}) 16:25:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x23000000, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:37 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:37 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="850000000000000000009500000200000000000000000000172d040a5f129f8711e4e7ffc697ea8bdcf145a5fd2b0662f1c80752b2bedee31f2fdc1863cfcfa9eee2dba8816f817107f335e068da05da28602a240c5cee5708f1b913b0730cdcdd2de922ff570995d149858f06ced2e9f4"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) r1 = syz_open_dev$usbmon(&(0x7f00000002c0)='/dev/usbmon#\x00', 0x6, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000300)={0x0, 0x6}, 0x2) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140), 0x2, 0x5}}, 0x20) [ 3258.255557] Bluetooth: hci0: Frame reassembly failed (-84) [ 3258.268211] Bluetooth: hci0: Frame reassembly failed (-84) [ 3258.277379] Bluetooth: hci0: Frame reassembly failed (-84) 16:25:37 executing program 1: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000003640)='./file0\x00', &(0x7f0000003680)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) 16:25:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2c000000, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:37 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) [ 3260.319460] Bluetooth: hci0: command 0xfc11 tx timeout [ 3260.322016] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 3260.337534] Bluetooth: hci0: Frame reassembly failed (-84) [ 3260.344521] Bluetooth: hci0: Frame reassembly failed (-84) 16:25:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0xfffffffffffff000) 16:25:41 executing program 1: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 16:25:41 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="8500000008000000000000000000000095000000001170c8612651465e4f0a9875e874df8ee4c2947442aa06db45bad2afebc4430398d4fde2d582da3e56142b77945111332d962a40e785f9a3f341d0e72ac04498c416e6ab05e2518317e3f24ce0c5b157473e90aba199d9eeb02ecec26e2fed8c92"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0xffffffffffffff22, 0x1a5, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:25:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x3f000000, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:41 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:41 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x50, 0x0, 0x0, 0x800003}) [ 3262.399480] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:25:41 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="85000000088fee80adbafa25502dbc406d6b9b00000000"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) getpeername(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}}}, &(0x7f00000001c0)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000001840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001880)=0x14) sendmsg$can_raw(r1, &(0x7f00000019c0)={&(0x7f00000018c0)={0x1d, r2}, 0x10, &(0x7f0000001980)={&(0x7f0000001900)=@canfd={{0x4, 0x5, 0x80, 0xff}, 0x39, 0x1, 0x0, 0x0, "fa39d1472b59fb23d586508653c3cc812738f57b474201bc1f35e656d168c4b21c0645aa5169d7ec1c98b26cedce653f6ff05d75719dcf952856e92d0bd3b239"}, 0x48}, 0x1, 0x0, 0x0, 0x880}, 0x40c0) 16:25:41 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x300000001}, 0xc) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000080)="c0dca5055e8bcfec7be070") setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x18, 0x4) close(r1) 16:25:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x40000000, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) [ 3262.516755] Bluetooth: hci0: Frame reassembly failed (-84) [ 3262.530353] Bluetooth: hci0: Frame reassembly failed (-84) 16:25:41 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x45040000, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) [ 3262.631955] audit: type=1400 audit(1562084741.401:144): avc: denied { bind } for pid=19216 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 16:25:41 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="8500000008b43834d3d937365a0000000000"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x4, 0x487, &(0x7f000000cf3d)=""/195}, 0xffffffab) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) [ 3262.712205] audit: type=1400 audit(1562084741.401:145): avc: denied { setopt } for pid=19216 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 3264.559596] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:25:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)=0xfdfdffff00000000) 16:25:43 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x48000000, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:43 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0xfff, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000240)="3b04935315f508e2372e2a8f685a8b4ee6d806f5fced1795b4cf40c23f5d91c8975395c8f6ddf8678f54c1ef5608e7016f39774fa6a63fc41bd2ae26555c6bc1df5b1a7250fd89565a46a58ba4512fae37ee63ce4167f71e8726d8c3cc136dd525c5c8a5a9b0f788003610208ac301236bf72a0ab1eb4146551a63daa04d43e9f8cb3cd8fdb557643c03555f630a6b00ef0978e34470b652659cb39807401a95af99ccbcc8a91c0d68ee9bbb9893e1f0a5ef3fef1c2658f40ec681575416a118bd754b7d7c3ea3f8", 0xc8, 0x9}, {&(0x7f00000001c0)="4f58e161389202f3c844b278b1459f30f429e85c74680ca4eb9dfe0192c949aa147d524c6c44dd7c22e07d09951101", 0x2f, 0x7}, {&(0x7f0000000340)="dff41387de2bd59ae50d7e0966221ec92c6cdddc59d4f76e6bec6c449568cfe9550a76e4bd09623ead0f109eb16a3415c5eb73ea344b42e3b624623d15579e2f8175563f0a6b29721a8d0f4294e8fe964b35f1e9fe242425ad92098826875f1dcfca13a06a821625b8915e9b1e12b7bb3497cada6e1b11145652d2c0b5c3a8ea4be207978c19b753a819ed905f3f5c346aec9fb2be13d5458bb25395eb60ecdd7e41fd7ebe97d6", 0xa7, 0x5}, {&(0x7f0000000400)="4de4009f9854aaef57dbcd7a37c10eb4f20c236b0346789e6d74ecc80e058bda8aed6c9c186ae90dde86df345c5b2b939a0320248ce308bdd6f659748b6bd2848efc24635f59c26b558c33f6f6602b9f8a9a78a7a9df21eb7530466dc9d33b103febdb7bda", 0x65, 0x2}, {&(0x7f0000000480)="002f132963a4638492c31c1dae7ae632179a3d1f439a6fe0565d94b4a0f20ed94554aaa0b656f682e6765e366c320fb909a339fe0e9a8232e22517a948bdebe2c813d6e8fdf49f2d6d1f138d8c7eb0fb79e28e1c844c35647ee2e12cc274b68128b231e7", 0x64, 0x8}, {&(0x7f0000000500)="5e711afc58c10c3805694f2910fdda46b36f13be69f848abd29059bec147e65849b726743ae941f8baa253d59dc923568164e9dc64b666b1170ffddb899fce65cb7a1bdcf0e52fec1965dd4d6ac01eaa523ebbb7d6c1d94264d73f44d1d91cbf4970e8f1e02465d30fd80ab973892896a0c51610ee2324378f4c371831cc4df47d03e96d239ce59f1bbcb1f36db57061783f8cd25e2a3e1fb98c7e", 0x9b, 0x5}], 0x2, &(0x7f0000000680)={[{@nodots='nodots'}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:25:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)) ioctl$VT_ACTIVATE(r0, 0x5606, 0x9) 16:25:43 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x51, 0x0, 0x0, 0x800003}) [ 3264.691431] FAT-fs (loop2): invalid media value (0xb3) [ 3264.696765] FAT-fs (loop2): Can't find a valid FAT filesystem [ 3264.726397] Bluetooth: hci0: Frame reassembly failed (-84) [ 3264.735470] Bluetooth: hci0: Frame reassembly failed (-84) 16:25:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x4c000000, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) [ 3264.739447] Bluetooth: hci0: Frame reassembly failed (-84) 16:25:43 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xf) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000000)) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)) 16:25:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x51040000, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:43 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) r1 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x3, 0x2) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000240)=""/102, 0x66}, &(0x7f00000002c0), 0x4e}, 0x20) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x2, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000140)={0x0, 0xe, 0x0, 0x6, 0x9, 0x3, 0x4, 0xa2, 0xffffffffffffffff}) [ 3264.974473] Bluetooth: hci1: Frame reassembly failed (-84) [ 3264.986107] Bluetooth: hci1: Frame reassembly failed (-84) [ 3264.993548] Bluetooth: hci1: Frame reassembly failed (-84) 16:25:43 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:45 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x52040000, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:45 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:45 executing program 2: restart_syscall() r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) r1 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x48e, 0x200000) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe04, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x2, 0x1, 0x7, 0xf, 0x9, 0xfffffffffffffffe, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x4b}, @exit, @exit, @map={0x18, 0x7, 0x1, 0x0, r1}, @generic={0x6, 0x3, 0x6e9, 0x1f, 0x3}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0xef, &(0x7f00000002c0)=""/239, 0x41000, 0x2, [], 0x0, 0x4, 0xffffffffffffff9c, 0x8, &(0x7f00000001c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0x6, 0x0, 0x100000001}, 0x10}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:25:45 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x52, 0x0, 0x0, 0x800003}) [ 3266.799433] Bluetooth: hci0: command 0xfc11 tx timeout [ 3266.805003] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:25:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x53040000, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:45 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="8500000008000000870000000000000095ca99ff57000000"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:25:45 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) [ 3267.039821] Bluetooth: hci1: command 0xfc11 tx timeout [ 3267.045290] Bluetooth: hci1: Entering manufacturer mode failed (-110) 16:25:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)) 16:25:45 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x54040000, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:45 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0xfffffffffffffffa, 0x90001) 16:25:46 executing program 4: socket$kcm(0x10, 0x2, 0x4) r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x55040000, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) [ 3267.279413] protocol 88fb is buggy, dev hsr_slave_0 [ 3267.284536] protocol 88fb is buggy, dev hsr_slave_1 16:25:46 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) [ 3267.372975] Bluetooth: hci0: sending frame failed (-49) [ 3267.380334] Bluetooth: hci0: Frame reassembly failed (-84) 16:25:46 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) r1 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x7ff, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000140)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'nr0\x00'}}) 16:25:46 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x800003}) 16:25:46 executing program 4: socket$kcm(0x10, 0x2, 0x4) r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x56040000, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:46 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) [ 3269.439387] Bluetooth: hci0: command 0xfc11 tx timeout [ 3269.445152] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:25:48 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x10) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000000c0)={0x400, 0x7, 0x7fff, 0x1797, 0x1}, 0x14) ioctl$KDADDIO(r1, 0x400455c8, 0x9) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000001c0)) 16:25:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x57040000, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:48 executing program 4: socket$kcm(0x10, 0x2, 0x4) r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:48 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xd, 0x14, &(0x7f0000000a40)=ANY=[@ANYBLOB="85009ae2a4273267d94e000000000000950000004000004082fe87dfbcc4ff6d5b91dc282fbbe9a05ce42cc2bd2f4800a7756451ceee11f4a9f9570473cbdce1e7bb043680866ec96913c2014807608d3eb63cb85f1789ad99824ed7767fea41b76835c149d5d2c3ff6f754add155d804d8aa50317b9a71af0e9ebcbf4c4fdfc95247c1f6b55cef84d36094f154da571c629d4abe55c7d6b57f027fc306f8ca73fa1a3"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x0, 0xc3, &(0x7f0000000940)=""/195, 0x1, 0x0, [], 0x0, 0x0, 0xffffffffffffff9c, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xffffffffffffffe}, 0x10}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) syz_read_part_table(0xff, 0x3, &(0x7f0000000580)=[{&(0x7f0000000300)="a4caf0ec5afd8f82f6ed0613a24f2caeda5532800864f733e2334eac2a4c1300314077377bf446f131bd8783af2eb6de38d0370167046e77d39ca061bce15f668f0cb5cc1ed8da451c003cd8f12f7b60004ed667f654f4bbf77a589718782659fe8513c3c4c8cf90673da140aaaf3127fbb81fd8b864ccd86524be7f0998b95280ae66182eddae83d13abe051fc0d647a9ad12c475b825301633fe5b20bb5d858808aeb9d5594f4c7482f9944fc6a1da31ab334981b57141d225b73590f380dd17f43b8568612188d6e473e4c867c6b12fca4c2a4dbf26345f4a6938", 0xdc, 0xfff}, {&(0x7f0000000400)="928b92bfc195801c8de5a582c0405d0d13801ad185837be602311f937664f729f5159400c7ba2712b4c6d4f99b7d1efa29eabcd7d751bc2c4cf525c88293e4a544ef377fd12e3821569df08c554f47388eb803b36804b60833dc6293d68477c11bb71f57661f2399e793bca10b053a1b14fd6820f183d277217cfcca69f836ff13a3884cc21458efb3113b08f1c53aa6664eb1bbeaf51e6e38a8a6e2a8c0fcc9459a46222e3f89fadc54aca4e74c4baa06ee0065193b8cdb91328e6551537a7403e5369c7f1581d04f5a668e84d86c8c6d556faea6e34ac09d6aaeb0cd7754aaea97cfdf7711e9f213f107bdd4b93bf2c3f3fe", 0xf3}, {&(0x7f0000000500)="f373ecfa942bf4358b862d397b2d7c3f0b38899a2c6cdb4e8fc94448034a85a0a89a979b8827326a6bd2319d0d29808480f609f54f39e05d4a55499c8dea12243b1ed6b1db9f47b48fbfee90", 0x4c, 0xffffffff}]) syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00') r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000280)={0x5, 0x10, 0xfa00, {&(0x7f00000006c0), r2, 0x1}}, 0x18) 16:25:48 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:48 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x54, 0x0, 0x0, 0x800003}) 16:25:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x58040000, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:48 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, 0x0, 0x0) 16:25:48 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="850000000800000087000000000000009500000000000000fdf49ef61a81ab6572b624ece719a147c4386f0bbf1e5b6cf5a185b0704c51244cbe858859378a0bc713e7437085bc28c212c2d898c9eb5fd153cde01d3e99733d918a662d00aa5e9c74328f5eb15b68332fc92e64f4b1c353056b00fe9bc57c13da2927633f8a514cb040483a246ccd292ded70438a16140e6880ffb0083a198913"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x10000, 0x400000) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10000, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb5, 0x55, 0x5, [@datasec={0x5, 0x9, 0x0, 0xf, 0x1, [{0x3, 0x1f, 0x7}, {0x3, 0xe2e, 0x100000001}, {0x2, 0x9, 0x3}, {0x5, 0x5, 0x4ff4}, {0x3, 0x1, 0xfffffffffffffeff}, {0x5, 0x8, 0xffff}, {0x5, 0x3, 0x8}, {0x5, 0x0, 0x5}, {0x3, 0x0, 0x5b7}], "fb"}, @const={0xd, 0x0, 0x0, 0xa, 0x1}, @volatile={0x7}, @fwd={0x4}, @const={0x10, 0x0, 0x0, 0xa, 0x4}, @func={0xe, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x2a, 0x0, 0x61, 0x5f, 0x6f, 0x30, 0x0, 0x0]}}, &(0x7f0000000400)=""/1, 0xda, 0xfffffdde, 0x1}, 0x20) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000140)=0x10200) 16:25:48 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0xc00, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x652}, &(0x7f0000000100)=0xc) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000140)={0x1, 0x415a}) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e24, 0x9, @rand_addr="7792c24260f21b42426503142198d351", 0x6}}, 0x9, 0x1}, 0x90) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)) 16:25:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x59040000, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:48 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, 0x0, 0x0) [ 3269.910236] Bluetooth: hci0: Frame reassembly failed (-84) [ 3269.916722] Bluetooth: hci0: Frame reassembly failed (-84) 16:25:48 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr/keycreate\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x113, 0xd}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000280)={0x10, 0x30, 0xfa00, {&(0x7f0000000140), 0x2, {0xa, 0x4e23, 0x7fffffff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}, r2}}, 0x38) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000002c0)={0x0, 0x8555}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000340)={r3, 0xbf, "df45a1f3a7fb9e599c2e97d9237327c2701b143151b3e0eccabb7a1087d1b9587a134a4ce86dc9664a1008b432fbe4a53b3219660aa028daa9ede483dfea75331bacd8b6688c9b131d97de6a4f967b9f9934fdd5e67bf8d4c2f2cd66ecf1f48b1fe601883a0b53259386ff4496a48fe61390601ea9cff9deecb60aa50e26c23af0f090001d9d80b89a3f803faffc03eae30a8303358e0f828b0d38933e7a93a64aa925a3aa29adb66e2dbfb0fe90189bb3cb5cb0bd6bb1f4038ec515470584"}, &(0x7f0000000440)=0xc7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:25:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x5a040000, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:48 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:48 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, 0x0, 0x0) 16:25:49 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x55, 0x0, 0x0, 0x800003}) 16:25:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x5b040000, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:49 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000000800000087f0ffffff0000009500000000000000"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) arch_prctl$ARCH_SET_GS(0x1001, 0x7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:25:49 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:49 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) [ 3271.919441] Bluetooth: hci0: command 0xfc11 tx timeout [ 3271.927171] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:25:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)) 16:25:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x5c040000, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:50 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 16:25:50 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f00000001c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x40000000, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x10}, 0x70) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000140)={0x7, 0x6}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:25:50 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:50 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x56, 0x0, 0x0, 0x800003}) 16:25:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x60000000, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:50 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:50 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000000800000087000000000000009500000049666d0b99e762dce7040000009cd9c3d755bc08cf3e6166ca90eec55a02cb4d380fd057490e3810f88482393bd9f86118148e184b0d33cba576b66e38caa956f6bbfa8f807915e79f0cdf3b8a3083c3a4930c87055eddce8c6420cd7d80"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0xc3, &(0x7f0000000240)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000340)=0x9) socket$l2tp(0x18, 0x1, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) bind$rxrpc(r1, &(0x7f00000003c0)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @local}}, 0x24) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f0000000380)=0x6) 16:25:50 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 16:25:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x68000000, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080)=0x9, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)) 16:25:51 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/rfcomm\x00') ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f00000001c0)={r1, 0x6}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/382], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:25:51 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:51 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)}, 0x0) 16:25:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x6b6b6b00, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) [ 3272.488755] Bluetooth: hci0: Frame reassembly failed (-84) [ 3272.505527] Bluetooth: hci0: Frame reassembly failed (-84) 16:25:51 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:51 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x57, 0x0, 0x0, 0x800003}) 16:25:51 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="850000000800000087000000000000009e000000000000007d9ca6ad2fded8d4e39f5000cf098f6d0397f6b3"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x20000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000240)={0x6, 0xffffffffffffa05e, 0x200, 0x9, 0x4, 0x7fffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:25:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x6c000000, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:51 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)}, 0x0) 16:25:51 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x74000000, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) [ 3274.559466] Bluetooth: hci0: command 0xfc11 tx timeout [ 3274.564963] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:25:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000080)=0x2000000000) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='hybla\x00', 0x6) ioctl$KDADDIO(r0, 0x400455c8, 0x723) fchdir(r1) ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f0000000100)=0x3) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)) 16:25:53 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:53 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)}, 0x0) 16:25:53 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x8000, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x7, &(0x7f0000000140)=@raw=[@alu={0x7, 0xb8da, 0x3, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map={0x18, 0xf, 0x1, 0x0, r0}, @ldst={0x0, 0x0, 0xb043b77833263f35, 0x5, 0x5, 0x0, 0x1}, @generic={0x3, 0x8, 0x8, 0x8, 0x9}, @call={0x85, 0x0, 0x0, 0x3c}, @jmp={0x5, 0x6, 0x7, 0xf, 0x5, 0x0, 0xfffffffffffffff0}], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:25:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x7a000000, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:53 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x58, 0x0, 0x0, 0x800003}) 16:25:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x7f260000, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:53 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) [ 3274.763303] QAT: Invalid ioctl [ 3274.772885] QAT: Invalid ioctl 16:25:53 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) 16:25:53 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) r1 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) 16:25:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x8b260000, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:53 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x24000) setsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000080)=0x6, 0x4) 16:25:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x8cffffff, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:53 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) [ 3275.152307] Bluetooth: hci0: Frame reassembly failed (-84) [ 3275.152397] Bluetooth: hci0: Frame reassembly failed (-84) 16:25:54 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="85000000080000008700"/24], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:25:54 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:54 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x59, 0x0, 0x0, 0x800003}) 16:25:54 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) 16:25:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xc0ed0000, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:54 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000100)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41f00, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x8}, 0x10}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x4f, 0x0, &(0x7f0000000240)="2f202558d7f5ab4e248f7764e2fcf2fabbde63ef21be138af6b4d4df5d2bc487424d73a0c8014a82bd6c95f2348f6708e5f88716a25bd1b59c8e30daccb400dc36dd6bab1bd69451daaca9060123f4", 0x0, 0xfffffffffffffffe}, 0xffffffffffffffde) 16:25:54 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:54 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x40) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000240)={r2, 0x80000001, 0x4}, 0x10) 16:25:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xe8010000, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x8) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0)) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7fff, 0x2080) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f0000000080)={0x0, {0xbec, 0x47}}) 16:25:55 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)}], 0x1}, 0x0) 16:25:55 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) 16:25:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xf4ffffff, 0x0, 0x0, &(0x7f0000000240)={[{@utf8='utf8=1'}]}) 16:25:56 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="850000000800000087000000000000009500000000000006f76d7a11a5f14b30337b28bbdc2916ebd86a7bbd5a2a938fdcc35bd48c9fba73751e1f3e491eb097f1f0726c37344fab01c3df78b5ab4ffdff5ebed78846fd037df5a439e8333b7a9d1cf8abf8a9c03bffb9f5260480a93e4f3d6e74098827db01d70b450a18ba28843bc94fd81c6dfc5790eb49d235fc94ac44d98db25a63a7c7f92a723e03bbe824c8b990c1da57865826febf9392c771658d4fd035033b01915d3ac5a5c47ad3c1905cffd7"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) 16:25:56 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x5a, 0x0, 0x0, 0x800003}) [ 3277.199457] Bluetooth: hci0: command 0xfc11 tx timeout [ 3277.204843] Bluetooth: hci0: Entering manufacturer mode failed (-110) 16:25:56 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="8500000008007da476d5b4f55d179a009500000000000000"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) [ 3277.328152] WARNING: CPU: 1 PID: 7796 at drivers/tty/tty_ioctl.c:319 tty_set_termios+0x7a5/0x8d0 [ 3277.337472] Kernel panic - not syncing: panic_on_warn set ... [ 3277.337472] [ 3277.344900] CPU: 1 PID: 7796 Comm: kworker/u5:2 Not tainted 4.19.56 #28 [ 3277.351661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3277.361199] Workqueue: hci0 hci_power_on [ 3277.365564] Call Trace: [ 3277.368176] dump_stack+0x172/0x1f0 [ 3277.371873] panic+0x263/0x507 [ 3277.375170] ? __warn_printk+0xf3/0xf3 [ 3277.379068] ? tty_set_termios+0x7a5/0x8d0 [ 3277.383409] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3277.389222] ? __warn.cold+0x5/0x4a [ 3277.393270] ? __warn+0xe8/0x1d0 [ 3277.396743] ? tty_set_termios+0x7a5/0x8d0 [ 3277.401340] __warn.cold+0x20/0x4a [ 3277.404980] ? tty_set_termios+0x7a5/0x8d0 [ 3277.409248] report_bug+0x263/0x2b0 [ 3277.409957] Bluetooth: hci0: Frame reassembly failed (-84) [ 3277.412962] do_error_trap+0x204/0x360 [ 3277.412982] ? math_error+0x340/0x340 [ 3277.426664] ? error_entry+0x76/0xd0 [ 3277.430395] ? trace_hardirqs_off_caller+0x65/0x220 [ 3277.435433] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3277.440640] do_invalid_op+0x1b/0x20 [ 3277.444463] invalid_op+0x14/0x20 [ 3277.447922] RIP: 0010:tty_set_termios+0x7a5/0x8d0 [ 3277.453244] Code: 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 a3 00 00 00 45 89 a7 d0 03 00 00 e9 49 fe ff ff e8 9b 36 05 fe <0f> 0b e9 3e f9 ff ff e8 af 9b 3b fe e9 d6 fa ff ff e8 a5 9b 3b fe [ 3277.472602] RSP: 0018:ffff88805b0c7990 EFLAGS: 00010293 [ 3277.478156] RAX: ffff88805b0bc000 RBX: ffff88805b0c7a50 RCX: ffffffff8365d94d [ 3277.485438] RDX: 0000000000000000 RSI: ffffffff8365e015 RDI: 0000000000000005 [ 3277.492720] RBP: ffff88805b0c7a78 R08: ffff88805b0bc000 R09: fffffbfff15dcbc9 [ 3277.500178] R10: fffffbfff15dcbc8 R11: 0000000000000003 R12: ffff88805b0c7ab8 [ 3277.501867] kobject: 'loop2' (00000000fde502f0): kobject_uevent_env [ 3277.507542] R13: 0000000000010004 R14: 1ffff1100b618f51 R15: ffff8880a8c35180 [ 3277.507570] ? tty_set_termios+0xdd/0x8d0 16:25:56 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff87}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="2f202558d7f5ab4e248f7764a02a", 0x0}, 0x28) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x800, 0x0) getsockopt$rose(r1, 0x104, 0x7, &(0x7f0000000140), &(0x7f00000001c0)=0x4) [ 3277.507585] ? tty_set_termios+0x7a5/0x8d0 [ 3277.530330] ? tty_wait_until_sent+0x580/0x580 [ 3277.534952] ? __mutex_lock+0x3cd/0x1300 [ 3277.539218] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3277.544943] ? tty_termios_encode_baud_rate+0x3ca/0x4e0 [ 3277.545102] kobject: 'loop2' (00000000fde502f0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 3277.550648] hci_uart_set_baudrate+0x157/0x1c0 [ 3277.550661] ? hci_uart_set_speeds+0x90/0x90 [ 3277.550683] ? debug_object_deactivate+0x1e4/0x360 [ 3277.550698] ? find_held_lock+0x35/0x130 [ 3277.550714] hci_uart_setup+0xa2/0x490 [ 3277.582336] ? hci_uart_set_baudrate+0x1c0/0x1c0 [ 3277.587175] hci_dev_do_open+0x674/0x14a0 [ 3277.591313] ? hci_rx_work+0xaa0/0xaa0 [ 3277.595206] ? kasan_check_read+0x11/0x20 [ 3277.599434] ? process_one_work+0x890/0x1750 [ 3277.603831] ? find_held_lock+0x35/0x130 [ 3277.608140] ? process_one_work+0x890/0x1750 [ 3277.612633] hci_power_on+0x10d/0x580 [ 3277.616425] ? hci_error_reset+0xf0/0xf0 [ 3277.620487] ? __lock_is_held+0xb6/0x140 [ 3277.624908] process_one_work+0x989/0x1750 [ 3277.629317] ? pwq_dec_nr_in_flight+0x320/0x320 [ 3277.634248] ? lock_acquire+0x16f/0x3f0 [ 3277.638417] ? kasan_check_write+0x14/0x20 [ 3277.642735] ? do_raw_spin_lock+0xc8/0x240 [ 3277.647060] worker_thread+0x98/0xe40 [ 3277.651035] ? trace_hardirqs_on+0x67/0x220 [ 3277.655372] kthread+0x354/0x420 [ 3277.658833] ? process_one_work+0x1750/0x1750 [ 3277.663578] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 3277.669553] ret_from_fork+0x24/0x30 [ 3277.676013] Kernel Offset: disabled [ 3277.680268] Rebooting in 86400 seconds..