t$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x111041, 0x0) ioctl$CAPI_SET_FLAGS(r0, 0x80044324, &(0x7f0000000040)=0x1) semget$private(0x0, 0x4049, 0x181) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) [ 2451.719748][T16274] FAT-fs (loop3): bogus logical sector size 18302 [ 2451.726224][T16274] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:14 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x1400, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:32:15 executing program 5: unshare(0xdff57ae935a5554b) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) r4 = syz_open_procfs(r3, &(0x7f00000002c0)='timers\x00') sendfile(r0, r4, 0x0, 0x1) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x3, 0x0, 0x3, 0x3b}) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) semget$private(0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r5 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r5, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) listen(r5, 0x0) listen(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$CAPI_GET_FLAGS(r0, 0x80044323, &(0x7f0000000240)) r7 = dup2(r6, 0xffffffffffffffff) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000040)={0x8000, 0x9, 0x8c, 0x9, 0xfffffff8, 0xd, 0x48c}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r9 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r8, r9, 0x0, 0x1) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) r11 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x484402, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r11, 0x10f, 0x80, &(0x7f0000000200)=0x5, 0x4) r12 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r10, r12, 0x0, 0x1) ioctl$VIDIOC_G_DV_TIMINGS(r10, 0xc0845658, &(0x7f0000000140)={0x0, @reserved}) ioctl$EVIOCGMTSLOTS(r9, 0x8040450a, &(0x7f0000000080)=""/50) unshare(0x8000400) 22:32:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002738}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:32:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x4504, 0x1ca22705}], 0x0, 0x0) 22:32:15 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x1000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:15 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x1500, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:32:15 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\xff', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:32:15 executing program 5: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) semget$private(0x0, 0x404b, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) socket$packet(0x11, 0x3, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x9, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7c0a, 0x0, 0x0, 0x0, 0x10000}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @ldst={0x1, 0x1, 0x1, 0x1, 0xb, 0x20, 0xb}, @alu={0x7, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0xf005, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0xdf, &(0x7f0000000180)=""/223, 0x40f00, 0x4, [], 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0xf, 0x7, 0xaadd}, 0x10}, 0x70) r4 = dup2(r3, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) unshare(0x200) [ 2452.680534][T17033] FAT-fs (loop3): bogus logical sector size 18302 22:32:15 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x7f', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2452.740505][T17029] overlayfs: upper fs is r/o, try multi-lower layers mount [ 2452.765610][T17033] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:15 executing program 5: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ff7000/0x3000)=nil) semget$private(0x0, 0x404b, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r1 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x8, 0x10001) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r0, r2, 0x0, 0x1) getsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x208000, 0x0) r5 = dup2(r3, r4) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r8 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r7, r8, 0x0, 0x1) ioctl$UI_BEGIN_FF_UPLOAD(r8, 0xc06855c8, &(0x7f0000000140)={0xc, 0x400, {0x53, 0x9, 0x7, {0x8, 0x100}, {0xff, 0x9}, @ramp={0x2, 0x4a9, {0xfffd, 0x0, 0x36bb, 0x5}}}, {0x51, 0x9, 0x5, {0x7, 0x20}, {0x3, 0xffff}, @period={0x58, 0x7, 0xecf, 0x81, 0x0, {0xf7dd, 0x9, 0x6, 0x4}, 0x5, &(0x7f0000000080)=[0x7, 0x6, 0x0, 0xe4, 0x1]}}}) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') ioctl$VIDIOC_ENUMINPUT(r8, 0xc050561a, &(0x7f0000000200)={0x8, "84711da890005ed8d3c6dc9614470c135d9c976394a776ce455c01a10cef5011", 0x0, 0x10001, 0x2, 0x400, 0x0, 0x2}) sendfile(r6, r9, 0x0, 0x1) ioctl$sock_inet6_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) unshare(0x8000400) 22:32:15 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x2000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:15 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:32:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x4604, 0x1ca22705}], 0x0, 0x0) 22:32:16 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x8c', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2453.307481][T17511] FAT-fs (loop3): bogus logical sector size 18302 [ 2453.342377][T17511] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002740}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:32:16 executing program 5: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) semget$private(0x0, 0x404b, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) socket$inet(0x2, 0x3, 0x9) 22:32:16 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x3f00, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:32:16 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x3000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 2453.439481][T17511] FAT-fs (loop3): bogus logical sector size 18302 [ 2453.461548][T17511] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2453.595208][T17676] overlayfs: upper fs is r/o, try multi-lower layers mount 22:32:16 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4002, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:32:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x4800, 0x1ca22705}], 0x0, 0x0) 22:32:16 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\xf5', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:32:16 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x4000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:17 executing program 5: r0 = getpgrp(0xffffffffffffffff) r1 = syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x4902) r2 = gettid() capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f0000000080)={0x8, 0x0, 0x0, 0xfffffffe}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x284400, 0x0) r4 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) r5 = gettid() waitid(0x83b895581628fca4, r5, &(0x7f0000000040), 0x2, &(0x7f0000000480)) sendmsg$key(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESDEC=r5]], 0x8}}, 0x20004850) r6 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r7 = dup2(0xffffffffffffffff, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0) r8 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r8) r9 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0xfffffffffffffffc, 0x5) writev(r9, 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r9, 0x227d, &(0x7f0000000780)) kcmp(0x0, r5, 0x0, 0xffffffffffffffff, r9) ptrace$setopts(0x4206, r8, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x104, 0x7, 0x9, 0x2}, &(0x7f0000000380)=0x1, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0xfffffffffffffca9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r8, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r10}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r5, r7, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r10}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r10}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r10}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, r3, 0x0, 0x5, &(0x7f0000000040)='sit0\x00', r10}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r2, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)='lowerdir', r10}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={r0, r1, 0x0, 0x40, &(0x7f00000003c0)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8', r10}, 0x30) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) semget$private(0x0, 0x404b, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400, 0x0) ioctl$KVM_GET_DIRTY_LOG(r12, 0x4010ae42, &(0x7f0000000040)={0x10001, 0x0, &(0x7f0000ffe000/0x2000)=nil}) r13 = socket$netlink(0x10, 0x3, 0x0) r14 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x4) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) getsockname(r14, &(0x7f0000000080)=@l2, &(0x7f0000000100)=0x80) r15 = dup2(r13, r11) r16 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r16, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) accept4(r16, &(0x7f0000000240)=@sco, &(0x7f00000002c0)=0x80, 0x80000) r17 = gettid() r18 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r19 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r18, r19, 0x0, 0x1) ioctl$VIDIOC_G_INPUT(r18, 0x80045626, &(0x7f0000000300)) ptrace$setopts(0x4206, r17, 0x0, 0x0) tkill(r17, 0x3c) ptrace$cont(0x18, r17, 0x0, 0x0) ptrace$setregs(0xd, r17, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r17, 0x0, 0x0) ioctl$sock_SIOCSPGRP(r12, 0x8902, &(0x7f0000000140)=r17) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) unshare(0x8000400) [ 2454.088017][T17997] FAT-fs (loop3): bogus logical sector size 18302 [ 2454.096825][T17997] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:17 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x4c00, 0x1ca22705}], 0x0, 0x0) 22:32:17 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\xf6', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:32:17 executing program 5: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) semget$private(0x0, 0x404b, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) dup2(r1, r0) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) [ 2454.245881][T18207] overlayfs: upper fs is r/o, try multi-lower layers mount [ 2454.545313][T18318] FAT-fs (loop3): bogus logical sector size 18302 [ 2454.594527][T18318] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:17 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002748}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:32:17 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4003, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:32:17 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x5000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:17 executing program 5: unshare(0x2a000400) shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ff8000/0x4000)=nil) semget$private(0x0, 0x404b, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:32:17 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\xfe', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2454.689357][T18318] FAT-fs (loop3): bogus logical sector size 18302 [ 2454.703718][T18318] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2454.802581][T18437] overlayfs: upper fs is r/o, try multi-lower layers mount 22:32:17 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x6000, 0x1ca22705}], 0x0, 0x0) 22:32:17 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x401e, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:32:18 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x6000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 2455.092192][T18752] FAT-fs (loop3): bogus logical sector size 18302 [ 2455.098966][T18752] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:18 executing program 5: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) semget$private(0x0, 0x404b, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x28040000) 22:32:18 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x6800, 0x1ca22705}], 0x0, 0x0) 22:32:18 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x5000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:32:18 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2455.414005][T18858] overlayfs: upper fs is r/o, try multi-lower layers mount [ 2455.475411][T18870] FAT-fs (loop3): bogus logical sector size 18302 [ 2455.542992][T18870] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2455.723442][T18870] FAT-fs (loop3): bogus logical sector size 18302 [ 2455.791653][T18870] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:18 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002750}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:32:18 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x7000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:18 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x6000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:32:18 executing program 5: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) semget$private(0x0, 0x404b, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400100, 0x0) getpeername$inet(r3, &(0x7f0000000040)={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x10) 22:32:18 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:32:18 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x6c00, 0x1ca22705}], 0x0, 0x0) 22:32:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x7400, 0x1ca22705}], 0x0, 0x0) [ 2456.101940][T19197] FAT-fs (loop3): bogus logical sector size 18302 [ 2456.132464][T19197] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2456.141053][T19195] overlayfs: upper fs is r/o, try multi-lower layers mount 22:32:19 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:32:19 executing program 5: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) semget$private(0x0, 0x404b, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000000)={0x2, 0x8, 0x4, 0x402, {0x0, 0x7530}, {0x2, 0x1, 0x40, 0x8, 0x2, 0x1, "b845c279"}, 0x87, 0x4, @fd=0xffffffffffffffff, 0x4}) r2 = dup2(r0, r1) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @link_local}, 0x0, {0x2, 0x4e24, @rand_addr=0x3}, 'dummy0\x00'}) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000080)={'veth1\x00', {0x2, 0x4e23, @local}}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) 22:32:19 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x8000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 2456.431638][T19441] FAT-fs (loop3): bogus logical sector size 18302 [ 2456.466795][T19441] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x7526, 0x1ca22705}], 0x0, 0x0) 22:32:19 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x7100, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) [ 2456.601917][T19613] overlayfs: upper fs is r/o, try multi-lower layers mount 22:32:20 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:32:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x7a00, 0x1ca22705}], 0x0, 0x0) 22:32:20 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x9000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002758}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:32:20 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x105100, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:32:20 executing program 5: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) semget$private(0x0, 0x404b, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) r3 = gettid() capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f0000000080)={0x8, 0x0, 0x0, 0xfffffffe}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x284400, 0x0) r5 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) r6 = gettid() waitid(0x83b895581628fca4, r6, &(0x7f0000000040), 0x2, &(0x7f0000000480)) sendmsg$key(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESDEC=r6]], 0x8}}, 0x20004850) r7 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r8 = dup2(0xffffffffffffffff, r7) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, 0x0) r9 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r9) r10 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x5) writev(r10, 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r10, 0x227d, &(0x7f0000000780)) kcmp(0x0, r6, 0x0, 0xffffffffffffffff, r10) ptrace$setopts(0x4206, r9, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x104, 0x7, 0x9, 0x2}, &(0x7f0000000380)=0x1, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0xfffffffffffffca9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r9, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r11}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r6, r8, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r11}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r11}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r11}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, r4, 0x0, 0x5, &(0x7f0000000040)='sit0\x00', r11}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r3, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)='lowerdir', r11}, 0x30) r12 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r11}, 0xc) ioctl$FS_IOC_FSGETXATTR(r12, 0x801c581f, &(0x7f0000000040)={0x3, 0x22, 0x0, 0xc00, 0x8000}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) [ 2457.328571][T19855] FAT-fs (loop3): bogus logical sector size 18302 [ 2457.372557][T19855] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:20 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:32:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x7b26, 0x1ca22705}], 0x0, 0x0) 22:32:20 executing program 5: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) semget$private(0x0, 0x404b, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x10000, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'yam0\x00', @ifru_flags=0x4002}}) unshare(0x8000400) 22:32:20 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0xc0ff20, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:32:20 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xa000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:20 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2457.894190][T20179] FAT-fs (loop3): bogus logical sector size 18302 [ 2457.908463][T20179] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2458.029155][T20179] FAT-fs (loop3): bogus logical sector size 18302 [ 2458.035719][T20179] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:21 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002760}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:32:21 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0xedc0, 0x1ca22705}], 0x0, 0x0) 22:32:21 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x7fffdf003000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:32:21 executing program 5: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) semget$private(0x0, 0x404b, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) dup2(r1, r0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x100, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000140)={0xd9, ""/217}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r4 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r3, r4, 0x0, 0x1) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r7 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip6_flowlabel\x00\xcc!w\x94}Lh*\x15\x0f\\\"E\xcf\xaf\xaaqXG\x17\x90\xa6l\xcdK\f\xaf|\x14\x1d\xfdy\x1eQ\x13\xd9\x02\x7f\x87\xe4@r\xc6\x8b(\x8f\x86\x1c\xd5\xc6L}?KMp+\xa7\aI\xbcU\x8dJ.\xcb\x12\x8b\x00\xa0l\x99*\xbdE\x82\xe7\xa3gC;u\bW\xee\x00D\x91\xbfR\x92:\x0e\x99\x8a\xe7=\xbb\x14T}y+\'\xf5\xdf\x9a\xbb\xcb\xdc\xda\xb3I!y=\x17XW\x0eV\xeafk\x9f\xaa\x1e') sendfile(r6, r7, 0x0, 0x1) ioctl$RNDZAPENTCNT(r6, 0x5204, &(0x7f0000000040)=0x80) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r5, r8, 0x0, 0x1) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) unshare(0x8000400) 22:32:21 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xb000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:21 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2458.383149][T20505] FAT-fs (loop3): bogus logical sector size 18302 [ 2458.409935][T20505] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:21 executing program 5: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) semget$private(0x0, 0x404b, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0xca341d60a208c373, 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x10000) 22:32:21 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2458.561193][T20505] FAT-fs (loop3): bogus logical sector size 18302 [ 2458.577559][T20505] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:21 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x7fffdf008000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:32:21 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0xff00, 0x1ca22705}], 0x0, 0x0) 22:32:21 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xc000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:21 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0xff0f, 0x1ca22705}], 0x0, 0x0) [ 2458.912213][T20939] overlayfs: upper fs is r/o, try multi-lower layers mount [ 2458.957753][T20945] FAT-fs (loop3): bogus logical sector size 18302 [ 2458.964446][T20945] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2459.066761][T20945] FAT-fs (loop3): bogus logical sector size 18302 [ 2459.079746][T20945] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:22 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002768}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:32:22 executing program 5: unshare(0x2e000e00) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) semget$private(0x0, 0x404b, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) 22:32:22 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xd000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:22 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:32:22 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x7ffffffff000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:32:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x407ff, 0x1ca22705}], 0x0, 0x0) [ 2459.584754][T21169] FAT-fs (loop3): bogus logical sector size 18302 [ 2459.592038][T21169] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2459.632876][T21179] overlayfs: upper fs is r/o, try multi-lower layers mount [ 2459.698789][T21169] FAT-fs (loop3): bogus logical sector size 18302 [ 2459.737018][T21169] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x40800, 0x1ca22705}], 0x0, 0x0) 22:32:22 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:32:22 executing program 5: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) semget$private(0x0, 0x404b, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r3 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r2, r3, 0x0, 0x1) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000060}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x800, 0x70bd29, 0x25dfdbfb, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x9}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x2044}, 0x4c020) r5 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) unshare(0x8000400) 22:32:22 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x10000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:22 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x21, 0x3, &(0x7f0000ffc000/0x4000)=nil) [ 2459.954224][T21495] FAT-fs (loop3): bogus logical sector size 18302 [ 2459.966560][T21495] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2460.046453][T21495] FAT-fs (loop3): bogus logical sector size 18302 [ 2460.079848][T21495] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x80400, 0x1ca22705}], 0x0, 0x0) [ 2460.221068][T21512] overlayfs: upper fs is r/o, try multi-lower layers mount 22:32:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002770}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:32:23 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:32:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0xe0000, 0x1ca22705}], 0x0, 0x0) 22:32:23 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x20000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:23 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x300, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:32:23 executing program 5: creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='statm\x00') r1 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) semget$private(0x0, 0x404b, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000040)={0x3fe, 0x0, &(0x7f0000ff7000/0x1000)=nil}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r3, r4, 0x0, 0x1) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000000)={0xa03f, 0x1, 0x9, 0x2, 0x9}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = dup2(r5, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) unshare(0x8000400) 22:32:23 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:32:23 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x500, 0x3, &(0x7f0000ffc000/0x4000)=nil) [ 2460.911295][T21836] FAT-fs (loop3): bogus logical sector size 18302 [ 2460.918883][T22044] overlayfs: upper fs is r/o, try multi-lower layers mount 22:32:23 executing program 5: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) semget$private(0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) [ 2460.952189][T21836] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:24 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x600, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:32:24 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x20100000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x1000000, 0x1ca22705}], 0x0, 0x0) [ 2461.551432][T22558] FAT-fs (loop3): bogus logical sector size 18302 22:32:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002778}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:32:24 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x700, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:32:24 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x3f000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:24 executing program 5: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) semget$private(0x0, 0x404b, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0xd) r2 = dup2(r1, r0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x40080, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r4, r5, 0x0, 0x1) ioctl$CAPI_REGISTER(r5, 0x400c4301, &(0x7f0000000040)={0x6, 0x7ff, 0x8}) dup3(r3, r0, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) 22:32:24 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2461.621779][T22558] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x2000000, 0x1ca22705}], 0x0, 0x0) [ 2461.778128][T22583] overlayfs: upper fs is r/o, try multi-lower layers mount 22:32:24 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x40000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 2461.890234][T22692] FAT-fs (loop3): bogus logical sector size 18302 [ 2461.921077][T22692] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2462.015323][T22692] FAT-fs (loop3): bogus logical sector size 18302 22:32:25 executing program 5: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) semget$private(0x0, 0x404b, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x2, 0x172d3e19ecbc8fe0) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000080)=""/248) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r7 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r7, 0x202002) keyctl$chown(0x4, r7, r5, r6) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r9) keyctl$get_persistent(0x16, r9, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r11) keyctl$get_persistent(0x16, r11, 0x0) syz_mount_image$exfat(&(0x7f0000000180)='exfat\x00', &(0x7f00000001c0)='./file0\x00', 0x7, 0x4, &(0x7f0000001440)=[{&(0x7f0000000200)="2d5bd2a7fdebd21371165c1384f8b126820c6d32bd1731f3f5e5d88f63b43e4206a3f80ba101eb88bc8ec7e9d4a3fcb0dd84e9ef82ffd328a933b9071ab226224accbace7d2b27ddc3a00e780402756fb15bf1e05fd941bd8331674ea2a9a529e65627252195ceb66fe804775ee48e18a5e44ef8a3d1f1baf7789631d2434ad97944d9c56f4e53440166bc9598289ff457ab7e2b89fbe06fe235ca7da375ad2369e51d81b0e7399973b6043290c33bdddaf1f59943088d8a577fd2de20f347818e9f9d7ce041f9feaeafe6988069de64c0ec561edbc104ef0b9a62a5eedbaebcd8c6cc18a87652ccf06a29ccc3dcf16d2803a99cffb7de30e3", 0xf9, 0x6}, {&(0x7f0000000300), 0x0, 0x5}, {&(0x7f0000000340)="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", 0x1000, 0x8}, {&(0x7f0000001340)="0482a25075b71a020aad52c7cf801af4b17d49cd9377afe4e35e84e37ba627a296afff828c35645c98c51fdb66b042f56ffa27c51bc3fa1c689d70bf64c72f4ecbf9636bd6624c3703a6a46db2dc490fe9f35cd4095c694705519f58f743cd1bbfcb0e10f53a9b59537ea90ab9603f38f3f56e8019808a4ce5a44ae66b4fec3137f40f2941d5104274765f7b235be17ed485c1e858d0eb0cc371a8d93f4b7d3f3f34d3f96fe59cf35a5e53184908728523cd7e2a19ab4e27810213293b7d62507bd02cf583a6bd64d0a884d586db2c94c0831c876172b9cf5917195726b3d9", 0xdf, 0x1}], 0x1204060, &(0x7f00000014c0)={[{@codepage={'codepage', 0x3d, 'macromanian'}}, {@allow_utime={'allow_utime', 0x3d, 0x4}}, {@errors_remount='errors=remount-ro'}, {@gid={'gid', 0x3d, r6}}, {@dmask={'dmask', 0x3d, 0x6}}, {@errors_continue='errors=continue'}, {@allow_utime={'allow_utime', 0x3d, 0x2a}}], [{@uid_eq={'uid', 0x3d, r9}}, {@fsmagic={'fsmagic', 0x3d, 0x20}}, {@pcr={'pcr', 0x3d, 0x11}}, {@dont_measure='dont_measure'}, {@fowner_lt={'fowner<', r11}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}) r12 = socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r12, 0x8914, &(0x7f0000000000)={'batadv0\x00', 0x100}) 22:32:25 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x900, 0x3, &(0x7f0000ffc000/0x4000)=nil) [ 2462.128406][T22692] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:25 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:32:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x3000000, 0x1ca22705}], 0x0, 0x0) [ 2462.385058][T22926] overlayfs: upper fs is r/o, try multi-lower layers mount 22:32:25 executing program 5: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) semget$private(0x0, 0x404b, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/dlm-control\x00', 0x153d28afa5790e48, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000001140)={&(0x7f0000001100)=[0x430e, 0x3ed, 0x9], 0x3, 0x552833cb, 0x0, 0x400, 0x7f, 0x7, {0x3, 0x200, 0x6, 0x3014, 0x8, 0x5, 0x7fff, 0x8001, 0x2, 0x1ff, 0xffff, 0x8c, 0x3, 0x10000, "127022ff0c4d4e159082bf9bd83df9f12bd85321cc4dc17908ba39733e824cf6"}}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) write$vnet(r3, &(0x7f0000001040)={0x1, {&(0x7f0000000000)=""/4096, 0x1000, &(0x7f0000001000)=""/55, 0x1, 0x3}}, 0x68) [ 2462.679047][T23238] FAT-fs (loop3): bogus logical sector size 18302 [ 2462.685523][T23238] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:25 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002780}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:32:25 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0xa00, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:32:25 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:32:25 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x48000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 2462.884867][T23351] overlayfs: upper fs is r/o, try multi-lower layers mount 22:32:25 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x4c000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:25 executing program 5: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) semget$private(0x0, 0x404b, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$vcsn(&(0x7f0000000540)='/dev/vcs#\x00', 0x200, 0x200) bind$pptp(r3, &(0x7f0000000580)={0x18, 0x2, {0x3, @broadcast}}, 0x1e) r4 = socket$vsock_stream(0x28, 0x1, 0x0) io_setup(0x800, &(0x7f00000000c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000740)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="0000cee32d1a"}, 0x0, {}, 'dummy0\x00'}) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r7, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0xf31453c676ba8032, 0x0) socket$bt_rfcomm(0x1f, 0x1, 0x3) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r9 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r8, r9, 0x0, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000280)={0x9, 0x1f}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002ec0)=""/181, 0xb5}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002e80)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) dup2(r11, r10) [ 2463.090162][T23460] overlayfs: upper fs is r/o, try multi-lower layers mount 22:32:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x4000000, 0x1ca22705}], 0x0, 0x0) 22:32:26 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x5c000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:26 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:32:26 executing program 5: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) semget$private(0x0, 0x404b, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r3 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r2, r3, 0x0, 0x1) recvmsg$can_raw(r2, &(0x7f0000000640)={&(0x7f0000000000)=@alg, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/182, 0xb6}, {&(0x7f0000000140)=""/67, 0x43}, {&(0x7f00000001c0)=""/37, 0x25}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000240)=""/247, 0xf7}, {&(0x7f0000000340)=""/239, 0xef}, {&(0x7f0000000440)=""/90, 0x5a}], 0x7, &(0x7f0000000540)=""/244, 0xf4}, 0x2000) r4 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) lsetxattr(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)=@random={'os2.', 'sessionid\x00'}, &(0x7f0000000700)='}\x00', 0x2, 0x1) unshare(0x8000400) [ 2463.296727][T23656] FAT-fs (loop3): bogus logical sector size 18302 [ 2463.324910][T23656] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:26 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0xb00, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:32:26 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0xc00, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:32:26 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002788}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:32:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x5000000, 0x1ca22705}], 0x0, 0x0) 22:32:26 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:32:26 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x60000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:26 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0xd00, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:32:27 executing program 5: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) semget$private(0x0, 0x404b, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) [ 2464.014766][T24094] FAT-fs (loop3): bogus logical sector size 18302 [ 2464.027623][T24094] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2464.135348][T24102] overlayfs: upper fs is r/o, try multi-lower layers mount 22:32:27 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0xe00, 0x3, &(0x7f0000ffc000/0x4000)=nil) [ 2464.209158][T24094] FAT-fs (loop3): bogus logical sector size 18302 [ 2464.227662][T24094] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:27 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:32:27 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0xf00, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:32:27 executing program 5: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) semget$private(0x0, 0x404b, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) msgctl$MSG_INFO(0xffffffffffffffff, 0xc, &(0x7f0000000080)=""/68) setsockopt$inet_int(r2, 0x0, 0x16, &(0x7f0000000040)=0x1, 0x4) r3 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000180)=r5) r6 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000280)={r7, @in6={{0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast1}}}, 0x0, 0x8}, &(0x7f0000000200)=0x90) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000440)={r7, @in={{0x2, 0x4e22, @local}}}, &(0x7f0000000100)=0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000100)={r7, @in6={{0xa, 0x4e24, 0x8000, @remote, 0xffff}}, 0x0, 0x0, 0x78, 0x8, 0x48}, 0x98) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r9 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r8, r9, 0x0, 0x1) sendmsg$TIPC_NL_LINK_RESET_STATS(r8, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x40000}, 0x48000) unshare(0x8000400) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r10, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000003c0)=0x14) setsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@local, @in6=@mcast2, 0x4e21, 0x5, 0x4e24, 0x2, 0x2, 0x1a0, 0x1a0, 0x2c, r11, 0xee00}, {0xb6, 0x7ff, 0x7f, 0x5, 0x7, 0x5b, 0x1, 0x4}, {0x1, 0x48, 0x1}, 0x7fff, 0x6e6bba, 0x2, 0x0, 0x0, 0x270e624d45446e51}, {{@in=@multicast2, 0x4d5, 0x3c}, 0x0, @in=@rand_addr=0x8001, 0x0, 0x2, 0x0, 0x4, 0x2, 0x4, 0x501}}, 0xe8) 22:32:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x6000000, 0x1ca22705}], 0x0, 0x0) 22:32:27 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x68000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 2464.684121][T24643] FAT-fs (loop3): bogus logical sector size 18302 [ 2464.716166][T24643] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2464.781613][T24738] overlayfs: upper fs is r/o, try multi-lower layers mount [ 2464.869272][T24643] FAT-fs (loop3): bogus logical sector size 18302 [ 2464.909317][T24643] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002790}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:32:28 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1100, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:32:28 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:32:28 executing program 5: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) semget$private(0x0, 0x404b, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = mq_open(&(0x7f0000000000)='vmnet1bdevppp1\x00', 0x0, 0xb0, &(0x7f0000000040)={0xb, 0x10001, 0xfffffffffffffffa, 0x101, 0x9, 0x5, 0xb51b, 0x9}) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L+', 0x40800000000}, 0x28, 0x1) unshare(0x8000400) r4 = semget$private(0x0, 0x0, 0x0) semctl$GETPID(r4, 0x1, 0xb, &(0x7f0000000280)=""/109) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) keyctl$get_persistent(0x16, r6, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r10 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r10, 0x202002) keyctl$chown(0x4, r10, r8, r9) r11 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r14 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f00000001c0)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) keyctl$setperm(0x5, r14, 0x202002) keyctl$chown(0x4, r14, r12, r13) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000100)={{0x1, r6, r9, 0xee00, r13, 0x92, 0x3}, 0xffffffffffff0001, 0xa155, 0x1}) 22:32:28 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x6c000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x7000000, 0x1ca22705}], 0x0, 0x0) 22:32:28 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1200, 0x3, &(0x7f0000ffc000/0x4000)=nil) [ 2465.277457][T24942] FAT-fs (loop3): bogus logical sector size 18302 [ 2465.284437][T24942] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2465.357571][T24942] FAT-fs (loop3): bogus logical sector size 18302 [ 2465.368379][T24942] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:28 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:32:28 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x74000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:28 executing program 5: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) semget$private(0x0, 0x404b, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r2 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r1, r2, 0x0, 0x1) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r4, r5, 0x0, 0x1) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r5, 0x800442d4, &(0x7f0000000040)=0x1f) ptrace(0x11, r3) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r8 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r7, r8, 0x0, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000080)) r9 = gettid() ptrace$setopts(0x4206, r9, 0x0, 0x0) tkill(r9, 0x3c) ptrace$cont(0x18, r9, 0x0, 0x0) ptrace$setregs(0xd, r9, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r9, 0x0, 0x0) r10 = syz_open_procfs(r9, &(0x7f0000000180)='nxt/nfsfs\x00') sendfile(r6, r10, 0x0, 0x1) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000000)) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = dup2(r11, r0) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) unshare(0x400) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf17e3717cbe449b8) 22:32:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x8000000, 0x1ca22705}], 0x0, 0x0) 22:32:28 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2465.714762][T25302] FAT-fs (loop3): bogus logical sector size 18302 [ 2465.799235][T25304] overlayfs: upper fs is r/o, try multi-lower layers mount [ 2465.810542][T25302] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002798}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:32:29 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1300, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:32:29 executing program 5: unshare(0x2a000400) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r1 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r0, r1, 0x0, 0x1) accept4$ax25(r1, 0x0, &(0x7f0000000040), 0x80800) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r3 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r2, r3, 0x0, 0x1) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={'ip6erspan0\x00', 0x200}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r7 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r6, r7, 0x0, 0x1) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x15) sendfile(r4, r5, 0x0, 0x1) r8 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={0x0, r6, 0xb}, 0x10) semget$private(0x0, 0x404b, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r9, 0x406, r9) getsockname$ax25(0xffffffffffffffff, &(0x7f0000000180)={{0x3, @default}, [@null, @default, @netrom, @null, @remote, @remote, @netrom, @bcast]}, &(0x7f0000000200)=0xffffff40) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) unshare(0x8000400) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r11, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x80, 0x8001}, @mss={0x2, 0x7}, @timestamp, @window={0x3, 0x0, 0x401}, @timestamp, @mss={0x2, 0xfffffff7}], 0x6) 22:32:29 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x7a000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x9000000, 0x1ca22705}], 0x0, 0x0) 22:32:29 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2466.355425][T25504] FAT-fs (loop3): bogus number of reserved sectors [ 2466.397538][T25504] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2466.446210][T25510] overlayfs: upper fs is r/o, try multi-lower layers mount 22:32:29 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x8cffffff, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 2466.518081][T25504] FAT-fs (loop3): bogus number of reserved sectors [ 2466.570381][T25504] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0xa000000, 0x1ca22705}], 0x0, 0x0) 22:32:29 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:32:29 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1400, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:32:29 executing program 5: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) semget$private(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) 22:32:29 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xc0ed0000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 2466.897690][T25905] FAT-fs (loop3): bogus number of reserved sectors [ 2466.961718][T25905] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2467.060790][T25946] overlayfs: upper fs is r/o, try multi-lower layers mount [ 2467.087161][T25905] FAT-fs (loop3): bogus number of reserved sectors [ 2467.096541][T25905] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0xc000000, 0x1ca22705}], 0x0, 0x0) 22:32:30 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:32:30 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1500, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:32:30 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xf6ffffff, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:30 executing program 5: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) semget$private(0x0, 0x404b, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) 22:32:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x200027a0}, @sack_perm, @mss, @mss, @mss], 0x12fb85) [ 2467.520794][T26265] FAT-fs (loop3): bogus number of reserved sectors [ 2467.538630][T26265] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:30 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:32:30 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:32:30 executing program 5: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) semget$private(0x0, 0x404b, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x40, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast2, @in6}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@empty}}, &(0x7f0000000380)=0x55f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) [ 2467.703159][T26265] FAT-fs (loop3): bogus number of reserved sectors [ 2467.729242][T26265] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x10000000, 0x1ca22705}], 0x0, 0x0) 22:32:30 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xf9fdffff, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 2467.946645][T26587] FAT-fs (loop3): bogus number of reserved sectors [ 2467.957507][T26587] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2468.071391][T26587] FAT-fs (loop3): bogus number of reserved sectors [ 2468.081697][T26587] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x20000000, 0x1ca22705}], 0x0, 0x0) 22:32:31 executing program 5: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) semget$private(0x0, 0x404b, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r4 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r3, r4, 0x0, 0x1) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r3, 0x3) 22:32:31 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:32:31 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x3f00, 0x3, &(0x7f0000ffc000/0x4000)=nil) [ 2468.362791][T26839] FAT-fs (loop3): bogus number of reserved sectors 22:32:31 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xff000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x200027a8}, @sack_perm, @mss, @mss, @mss], 0x12fb85) [ 2468.419347][T26839] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2468.630211][T26839] FAT-fs (loop3): bogus number of reserved sectors [ 2468.716714][T26839] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:31 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4002, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:32:31 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:32:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x20100000, 0x1ca22705}], 0x0, 0x0) 22:32:31 executing program 5: unshare(0x2a000400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) keyctl$get_persistent(0x16, r1, 0x0) r2 = getegid() r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xffffffffffffffe5) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000140)={0x1, 0x7, 0x4}) setuid(r4) keyctl$get_persistent(0x16, r4, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r7 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r6, r7, 0x0, 0x1) write$P9_RSTATu(r7, &(0x7f0000000000)={0x7b, 0x7d, 0x2, {{0x0, 0x59, 0x6, 0xffff, {0xdb12d65811604528}, 0x2c100000, 0x4a0b, 0x2, 0x5, 0x19, ',loem1}vboxnet1lovboxnet0', 0x0, '', 0xc, 'ppp1^selinux', 0x1, '}'}, 0xd, '+}mime_type@)', r1, r2, r4}}, 0x7b) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) semget$private(0x0, 0x404b, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = dup2(r8, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000000c0)=0x2, 0x4) unshare(0x8000400) 22:32:31 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xfffffdf9, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:32 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4003, 0x3, &(0x7f0000ffc000/0x4000)=nil) [ 2469.245294][T27472] FAT-fs (loop3): bogus number of reserved sectors 22:32:32 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:32:32 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xffffff7f, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:32 executing program 5: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) semget$private(0x0, 0x404b, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r4 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r3, r4, 0x0, 0x1) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10) [ 2469.294544][T27472] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x200027b0}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:32:32 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x23000000, 0x1ca22705}], 0x0, 0x0) 22:32:32 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x401e, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:32:32 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:32:32 executing program 5: unshare(0x2a000400) shmget$private(0x0, 0x1000, 0x20, &(0x7f0000fff000/0x1000)=nil) semget$private(0x0, 0x404b, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r1 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r0, r1, 0x0, 0x1) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f00000000c0)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:ksm_device_t:s0\x00', 0x22, 0x1) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r5, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000000480)='trusted.overlay.redirect\x00', &(0x7f00000004c0)='./file0/file0\x00', 0xe, 0x1) unshare(0x8000400) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@ipv4={[], [], @multicast1}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f0000000300)=0xe8) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0xdd7e81bd44359e5b, &(0x7f0000000380)={'trans=unix,', {[{@cache_fscache='cache=fscache'}, {@cache_none='cache=none'}, {@mmap='mmap'}, {@cache_none='cache=none'}], [{@subj_user={'subj_user'}}, {@uid_gt={'uid>', r6}}, {@appraise='appraise'}, {@subj_role={'subj_role', 0x3d, '[:posix_acl_access'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@dont_appraise='dont_appraise'}, {@appraise='appraise'}, {@smackfsroot={'smackfsroot', 0x3d, 'clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8'}}]}}) 22:32:32 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xffffff8c, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 2469.750653][T27761] FAT-fs (loop3): bogus number of reserved sectors [ 2469.775576][T27761] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2469.874068][T27761] FAT-fs (loop3): bogus number of reserved sectors [ 2469.908565][T27761] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:32 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x5000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:32:33 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x2e040000, 0x1ca22705}], 0x0, 0x0) 22:32:33 executing program 5: unshare(0x2a000400) semget$private(0x0, 0x404b, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) dup2(r1, r0) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r4 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r3, r4, 0x0, 0x1) mknodat(r3, &(0x7f0000000180)='./file0\x00', 0x8000, 0x400) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r2, r5, 0x0, 0x1) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x23cc02, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffe) r7 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0xffff, 0x12000) getsockopt$inet_dccp_int(r7, 0x21, 0x10, &(0x7f00000000c0), &(0x7f0000000140)=0x4) unshare(0x8000400) 22:32:33 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:32:33 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xfffffff6, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 2470.228693][T28197] FAT-fs (loop3): bogus number of reserved sectors [ 2470.238815][T28197] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2470.336663][T28197] FAT-fs (loop3): bogus number of reserved sectors [ 2470.352968][T28197] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:33 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x3b040000, 0x1ca22705}], 0x0, 0x0) [ 2470.644374][T28506] FAT-fs (loop3): bogus number of reserved sectors [ 2470.656992][T28506] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x200027b8}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:32:33 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x6000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:32:33 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xedc000000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:33 executing program 5: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) semget$private(0x0, 0xc9fe735a29030750, 0x324) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000040)='net/ip_vs\x00') r4 = dup2(r1, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400000, 0x0) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) unshare(0x8000400) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001680)=0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r9) keyctl$get_persistent(0x16, r9, 0x0) r10 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r13 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r13, 0x202002) keyctl$chown(0x4, r13, r11, r12) r14 = gettid() ptrace$setopts(0x4206, r14, 0x0, 0x0) tkill(r14, 0x3c) ptrace$cont(0x18, r14, 0x0, 0x0) ptrace$setregs(0xd, r14, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r14, 0x0, 0x0) r15 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r16) keyctl$get_persistent(0x16, r16, 0x0) r17 = getgid() r18 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r18, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) r19 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r19, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) r20 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r20, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) r21 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r21, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) r22 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r23 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r23, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) sendmmsg$unix(r4, &(0x7f00000017c0)=[{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001600)=[{&(0x7f0000000100)="1a8509e2e8326f1f5bcc653472243316e152511b08e8447c8fa1558efeef97e26c49c4c39da8d44e6dfd78829cc519cdb004d6dc49e2db65eb1b7da9d3e80be18d6b5a7297c74fb5a3e4238ec3329886dbe4e85873e651ec85888d0eba93421144738c0e51b31fa84b3ac60dd6877af1eb411447dca7009de036b52238dfb3f51e4c37383db56e2f1afe07b06e9651043ffde247ba343689dd9505f0127d59d138e5324eb1d63966970db2305156a9666c317cc634de620700f13da4202022c7c790686ff94f3440d3e6784f79", 0xcd}, {&(0x7f0000000200)="c34affac1a0177e674ca0db0de19dc60c2f49cb1a7034265e161c64e573289443d73ee2cdda90856c9ed63b722b1635a4547b1e9382bf47ff196f409e22e41a8abed52b6f64e2008cc14ca515938bd6d89daae4048b1fc31a2999a9b0c9c5b07cc244e8d4d6cdb937a21497cde91ba4d9a507ac62b3b3f058e4c151e2becd8e98b38e3bec8d2f1063e8e2c14ad57ffdb3a6596ea85ac1e67c5dbecbcf500222e20c2f900f538b535ac8872f43ee516be0f23ab2a49fa02149b66b1113573ea39bca36020da482c3bb342b87f4e076e4bea697806f6c074affcbdbbb29800f5", 0xdf}, {&(0x7f0000000300)="6745f4e09b503004aed16aa5d012c6dfa4f15d510659dacd3d1685e4228e0153b00ca733a8b1584562b17b080692cef38a6ad4994b582a1beadb50ed62741f035d853d3fa6691f049f4dbf03a7db51f00ae4bf", 0x53}, {&(0x7f0000000380)="ee75ed6ee0fbc9bd5bee318b39c3a3ea60a0cd8d7323788ff66a900fdf", 0x1d}, {&(0x7f00000003c0)="3fcd359261503e8b1e5560c282e1289d79683190298e660a5eac60dbda00aeff6e4e245566e98d9c22e8549554171a2d74f944eb7002baf36f951bccf038f14cd2a3c39f38e16ee12d8b819ed2ca28ad091b69ebac8de28f78e58597a9ca872233250a0eb958b2c7c3e600f40d245fed2f191085f9415578a41715f7e82afdd01fd7d07bb2e68d4930d2c1ebed47acf9378a", 0x92}, {&(0x7f0000000480)="da1239ba9d62b9f91488e68bf6128459e496bc53da2680995eefe68f90ef75f638d940db388beec21562c3af5ff5d147cc0c468fb13b459f0a2229ed2f0bfd58a9be9b5a52", 0x45}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="3b8334c155650ed90c5781708a2ec548d0b1921d163dfc3dc7e8e946d8e8d36427b4d59a311de2692ef10dd50f2b46f8db8300d3f6a45ed90597819364548ee85fbc10c70764ab1b03d30578c42907f1f8d3b8ca08c5386218675cd6b3534b3a4aa3e4c30ab4b4bc35403b4bfb959084adf820719b9e86fed135f0973bd6353e84589803b0bf1fcbe2e117f762d60cdca00e5246615e503e8f13af445d8d7986301056870be1e4e3c1b388c4d3167c0569c3f8ca270bcc741f4f1d26ad60b26d4d5236", 0xc3}], 0x8, &(0x7f00000016c0)=[@rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, r6]}}, @cred={{0x1c, 0x1, 0x2, {r7, r9, r12}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {r14, r16, r17}}}, @rights={{0x14, 0x1, 0x1, [r18]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r19, r20, 0xffffffffffffffff, r21]}}, @rights={{0x1c, 0x1, 0x1, [r1, r22, r23]}}], 0xd8}], 0x1, 0x20000000) 22:32:33 executing program 5: unshare(0x2a000400) socket$unix(0x1, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x84c, &(0x7f0000ff7000/0x3000)=nil) semget$private(0x0, 0x404b, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r4 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r3, r4, 0x0, 0x1) setxattr$trusted_overlay_upper(&(0x7f0000000280)='./file0\x00', &(0x7f0000001500)='trusted.overlay.upper\x00', &(0x7f0000001540)=ANY=[@ANYBLOB="00fbc500090b0f5b35b3bfa3ce088b8b03df8b63c034d02ffb4ac33de6f8beae294cab735fd30604d1189a2eef7d4a933d19a6262c5603b79acba2544aaa544d45d64abc5e73eeda6b8acdf2f6aec4b1b567b048ad09f1b0b205d07f5dd64c48af6dd775ea180672d55112305133d46dc901363f3df24347b69229addce241bd4ea4db031304af56d1f318dc296335c5be93755d9e3e9dc537765ad3f8c9ee37909df8f11e850136f00ae7cac57d1e395fd97ec7bb12604fbea81cd7895099daa6c7e16943"], 0xc5, 0x2) recvmsg$can_j1939(r4, &(0x7f00000014c0)={&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000001440)=[{&(0x7f00000000c0)=""/233, 0xe9}, {&(0x7f00000001c0)=""/170, 0xaa}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/124, 0x7c}, {&(0x7f0000000340)=""/103, 0x67}, {&(0x7f00000003c0)=""/68, 0x44}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x7}, 0x10000) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r6 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r5, r6, 0x0, 0x1) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, &(0x7f0000001640)={0x6, 0x0, 0x100a, 0x7, 0xfffffffd, 0xfffffff7, 0x3ff, 0x247bdeb915feb215}) r7 = msgget(0x2, 0x1) msgctl$IPC_RMID(r7, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) [ 2470.881732][T28506] FAT-fs (loop3): bogus number of reserved sectors [ 2470.919107][T28506] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:33 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:32:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x3c040000, 0x1ca22705}], 0x0, 0x0) 22:32:34 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x4000000000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:34 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2471.233347][T28827] FAT-fs (loop3): bogus number of reserved sectors [ 2471.240860][T28827] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:34 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x7100, 0x3, &(0x7f0000ffc000/0x4000)=nil) [ 2471.313006][T28827] FAT-fs (loop3): bogus number of reserved sectors [ 2471.365069][T28827] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:34 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x7000000000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:34 executing program 5: unshare(0x2a010500) fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000040)='TRUE', 0x4, 0x3) shmget$private(0x0, 0x2000, 0xa6617ae9ee2808c0, &(0x7f0000ffc000/0x2000)=nil) semget$private(0x0, 0x404b, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) dup2(r1, r0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r3 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r2, r3, 0x0, 0x1) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r4, r5, 0x0, 0x1) ioctl$ASHMEM_GET_SIZE(r4, 0x7704, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000080)=0x70) unshare(0x8000400) 22:32:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x200027c0}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:32:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x3d040000, 0x1ca22705}], 0x0, 0x0) 22:32:34 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x105100, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:32:34 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:32:34 executing program 5: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r0 = open(&(0x7f0000000000)='./file0\x00', 0xc0080, 0x180) ioctl$VT_ACTIVATE(r0, 0x5606, 0x1) semget$private(0x0, 0x404b, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) 22:32:34 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x100000000000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 2472.126892][T29294] FAT-fs (loop3): bogus number of reserved sectors 22:32:35 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2472.202460][T29294] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:35 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0xc0ff20, 0x3, &(0x7f0000ffc000/0x4000)=nil) [ 2472.287520][T29294] FAT-fs (loop3): bogus number of reserved sectors [ 2472.294084][T29294] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:35 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_notify(r1, 0x0) 22:32:35 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x200000000000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x3e040000, 0x1ca22705}], 0x0, 0x0) 22:32:35 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x7fffdf003000, 0x3, &(0x7f0000ffc000/0x4000)=nil) [ 2472.843786][T29860] FAT-fs (loop3): bogus number of reserved sectors [ 2472.905223][T29860] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x200027c8}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:32:36 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:32:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x2007fff) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000003c0)=0x0) fcntl$setstatus(r1, 0x4, 0x44800) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) perf_event_open(0x0, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000540)=ANY=[@ANYBLOB="e000"], 0x1) fdatasync(r4) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) 22:32:36 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x300000000000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:36 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x7fffdf008000, 0x3, &(0x7f0000ffc000/0x4000)=nil) [ 2473.064905][T29860] FAT-fs (loop3): bogus number of reserved sectors [ 2473.101438][T29860] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x3f000000, 0x1ca22705}], 0x0, 0x0) 22:32:36 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x7ffffffff000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:32:36 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x400000000000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:36 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2473.521689][T30276] FAT-fs (loop3): bogus number of reserved sectors [ 2473.556683][T30276] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:36 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) [ 2473.630683][T30276] FAT-fs (loop3): bogus number of reserved sectors [ 2473.652961][T30276] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x3f040000, 0x1ca22705}], 0x0, 0x0) 22:32:36 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) [ 2473.946232][T30592] FAT-fs (loop3): bogus number of reserved sectors [ 2473.957634][T30592] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2474.071856][T30592] FAT-fs (loop3): bogus number of reserved sectors [ 2474.088622][T30592] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x200027d0}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:32:37 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:32:37 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x500000000000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:37 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 22:32:37 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x40000000, 0x1ca22705}], 0x0, 0x0) 22:32:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(r0, 0x8929, &(0x7f0000000000)={'bridge0\x00'}) 22:32:37 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x6, &(0x7f0000ffc000/0x4000)=nil) 22:32:37 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:32:37 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x600000000000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 2474.565450][T30724] FAT-fs (loop3): bogus number of reserved sectors [ 2474.655861][T30724] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:37 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x40040000, 0x1ca22705}], 0x0, 0x0) 22:32:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10000000000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f00000000c0)={0x2, 0x1000, 0x81, 0xffff, 0x2}) clock_gettime(0x0, &(0x7f0000000580)) r1 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f0000000200)={0xe}) futex(&(0x7f0000000540), 0x3, 0x0, &(0x7f0000000440), &(0x7f0000000480)=0x2, 0x1) socket$isdn_base(0x22, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$media(&(0x7f0000000300)='/dev/media#\x00', 0x4, 0x200) r2 = syz_open_procfs(0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={r2}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:32:37 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0xa, &(0x7f0000ffc000/0x4000)=nil) [ 2475.113447][T31147] FAT-fs (loop3): bogus number of reserved sectors [ 2475.232453][T31147] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2475.282006][T31147] FAT-fs (loop3): bogus number of reserved sectors [ 2475.302522][T31147] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x200027d8}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:32:38 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x700000000000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:38 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:32:38 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x40400000, 0x1ca22705}], 0x0, 0x0) 22:32:38 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x800000000000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:38 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:32:38 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfa}, 0x2) 22:32:38 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x900000000000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:38 executing program 5: socket$inet6(0xa, 0x801, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') socketpair$unix(0x1, 0x7, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000240)={'bond0\x00', 0x8}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000100)={@remote}) socket$packet(0x11, 0x0, 0x300) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfe}) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000600)) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfe}) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7ffe}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfe}) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 2475.886332][T31444] FAT-fs (loop3): bogus number of reserved sectors 22:32:38 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2475.963756][T31444] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:39 executing program 1: mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ffc000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x37, &(0x7f0000000040)=""/96, &(0x7f00000000c0)=0x60) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) chroot(&(0x7f0000000000)='./file0\x00') 22:32:39 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x41040000, 0x1ca22705}], 0x0, 0x0) 22:32:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x200027e0}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:32:39 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xa00000000000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:39 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000000840)=[@ip_tos_u8={{0x14}}, @ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x7, 0x8, 0x4, [@multicast2]}]}}}], 0x30}}], 0x24, 0x0) socket$inet6(0xa, 0x3, 0x6) 22:32:39 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r3 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r2, r3, 0x0, 0x1) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000000)={0x10000, 0x0, [0x3, 0x41152a42, 0x2, 0x8, 0x5, 0x2, 0x8, 0x5]}) r4 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) [ 2476.546025][T32007] FAT-fs (loop3): bogus number of reserved sectors 22:32:39 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2476.656732][T32007] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2476.763413][T32007] FAT-fs (loop3): bogus number of reserved sectors [ 2476.787567][T32007] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:39 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x3) request_key(0x0, &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) pipe2(&(0x7f00000001c0), 0xc6800) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000540)=""/199, 0xc7}], 0x1) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000300)={'nat\x00', 0x0, 0x4, 0x69, [], 0x0, 0x0, &(0x7f0000000280)=""/105}, &(0x7f0000000380)=0x78) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$void(r3, 0x5451) preadv(r0, &(0x7f00000017c0), 0x315, 0x800000) 22:32:39 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x42040000, 0x1ca22705}], 0x0, 0x0) 22:32:39 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:32:39 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xb00000000000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:39 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r0 = shmget$private(0x0, 0xf000, 0x0, &(0x7f0000000000/0xf000)=nil) shmat(r0, &(0x7f0000002000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0xf800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @dev={[], 0x15}}, 0x0, {}, 'dummy0\x00'}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) [ 2477.124543][T32334] FAT-fs (loop3): bogus number of reserved sectors [ 2477.146567][T32334] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2477.215788][T32334] FAT-fs (loop3): bogus number of reserved sectors [ 2477.222681][T32334] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:40 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) fcntl$setlease(r2, 0x400, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:32:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x43040000, 0x1ca22705}], 0x0, 0x0) [ 2477.475578][T32607] FAT-fs (loop3): bogus number of reserved sectors [ 2477.536790][T32607] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x200027e8}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:32:40 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xc00000000000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:40 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:32:40 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000000000)={{0xaa57b027d9cd82, 0x0, @reserved="aa61fa4a0d73a6afc12bfa6e21aea8d3b382c5fdd8b9d142afe77a7ce294a236"}}) r3 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:32:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x44040000, 0x1ca22705}], 0x0, 0x0) 22:32:40 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r3 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) writev(r3, &(0x7f00000000c0), 0x20000000000001d2) 22:32:41 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2478.065889][ T307] FAT-fs (loop3): bogus number of reserved sectors 22:32:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f00000001c0)={0x0, 0x8}) [ 2478.129024][ T307] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2478.175828][ T307] FAT-fs (loop3): bogus number of reserved sectors [ 2478.197515][ T307] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:41 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xd00000000000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:41 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x400000, 0x0, &(0x7f0000bfd000/0x400000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x94e468797c203af9) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:32:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x45040000, 0x1ca22705}], 0x0, 0x0) 22:32:41 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2478.535251][ T647] FAT-fs (loop3): bogus number of reserved sectors [ 2478.549942][ T647] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2478.599977][ T647] FAT-fs (loop3): bogus number of reserved sectors [ 2478.607506][ T647] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x200027f0}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:32:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x46040000, 0x1ca22705}], 0x0, 0x0) 22:32:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x141042, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000003c0)=0x0) fcntl$setstatus(r0, 0x4, 0x44800) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000540)=ANY=[@ANYBLOB="e000"], 0x1) fdatasync(r3) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)={0x0, r3}) 22:32:41 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r1 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r0, r1, 0x0, 0x1) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) [ 2479.033374][ T951] FAT-fs (loop3): bogus number of reserved sectors [ 2479.047724][ T951] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:42 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:32:42 executing program 1: unshare(0x2a000400) get_thread_area(&(0x7f0000000000)={0xc8, 0x20001000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r1 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r0, r1, 0x0, 0x1) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000240)) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0xa) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r4, r5, 0x0, 0x1) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r4, &(0x7f0000000080)="d5600222e401ebe2ac1784b1c0bfe3fcf01de01bfc965f4a813b3903245445e018c6cbd411fc82b22e7b38c400ff9128d3a39ff5da0c09185970bb7cd39ef4168810c5f0bb770da7d292b15cbe1a38", &(0x7f0000000100)=""/116, 0x6}, 0x20) r6 = dup2(r3, r2) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r7, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) ioctl$sock_ifreq(r7, 0x8946, &(0x7f0000000040)={'batadv0\x00', @ifru_names='ip6gre0\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:32:42 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x1000000000000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 2479.167867][ T951] FAT-fs (loop3): bogus number of reserved sectors [ 2479.177052][ T951] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x48000000, 0x1ca22705}], 0x0, 0x0) 22:32:42 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x2000000000000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:42 executing program 5: syz_mount_image$minix(&(0x7f0000000100)='minix\x00', &(0x7f0000000040)='./file0\x00', 0x4c00, 0x1, &(0x7f0000000000)=[{&(0x7f0000000180)="e297ad9a07000a00900403000056b8c96824", 0x12, 0x400}], 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") 22:32:42 executing program 1: unshare(0x2a000400) r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x7fff, 0x200) accept$netrom(r0, &(0x7f0000000080)={{0x3, @rose}, [@null, @rose, @remote, @bcast, @rose, @remote, @remote, @rose]}, &(0x7f0000000140)=0x48) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r2 = getpid() r3 = syz_open_procfs(r2, &(0x7f0000000100)='sessionid\x00') sendfile(r1, r3, 0x0, 0x1) timerfd_gettime(r3, &(0x7f0000000000)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:32:42 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2479.483184][ T1382] FAT-fs (loop3): bogus number of reserved sectors [ 2479.550496][ T1396] Unable to read inode block [ 2479.578283][ T1396] MINIX-fs: get root inode failed [ 2479.586816][ T1382] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2479.759507][ T1382] FAT-fs (loop3): bogus number of reserved sectors [ 2479.834540][ T1382] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x200027f8}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:32:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@can_newroute={0x34, 0x18, 0x5, 0x0, 0x0, {}, [@CGW_MOD_OR={0x18, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "1d15167e4623a99e"}, 0x2}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffff7}}]}, 0x34}}, 0x0) 22:32:43 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x2010000000000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:43 executing program 1: unshare(0x10000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x20000000) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:32:43 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:32:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x4c000000, 0x1ca22705}], 0x0, 0x0) 22:32:43 executing program 5: [ 2480.279666][ T1635] FAT-fs (loop3): bogus number of reserved sectors [ 2480.307435][ T1635] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:43 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) write$apparmor_exec(r2, &(0x7f0000000040)={'stack ', '\'%-]]\x00'}, 0xc) r3 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:32:43 executing program 5: 22:32:43 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2480.519068][ T1635] FAT-fs (loop3): bogus number of reserved sectors 22:32:43 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x3f00000000000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 2480.582341][ T1635] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x60000000, 0x1ca22705}], 0x0, 0x0) [ 2481.006931][ T2091] FAT-fs (loop3): bogus number of reserved sectors [ 2481.014661][ T2091] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2481.142975][ T2091] FAT-fs (loop3): bogus number of reserved sectors [ 2481.153217][ T2091] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:44 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x40, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000040)={0xfff}, 0x4) r3 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:32:44 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x200, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) 22:32:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002800}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:32:44 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:32:44 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x4000000000000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x68000000, 0x1ca22705}], 0x0, 0x0) 22:32:44 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x4800000000000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:44 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:32:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000240)="66ba4300b801380000ef0f22dc66b8a1008ec0c4e21db7eb5766baa000b093ee362e0f01ef65d9f9ea00480000aa00b98e0400000f32", 0x36}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x2}) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000080)='security.selinux\x00', 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 22:32:44 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x4c00000000000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 2481.572709][ T2221] FAT-fs (loop3): bogus number of reserved sectors [ 2481.609361][ T2221] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:44 executing program 1: unshare(0x12020000) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) [ 2481.758242][ T2221] FAT-fs (loop3): bogus number of reserved sectors [ 2481.853084][ T2221] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x6c000000, 0x1ca22705}], 0x0, 0x0) 22:32:45 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) [ 2482.133414][ T2767] FAT-fs (loop3): bogus number of reserved sectors 22:32:45 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2482.176890][ T2767] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2482.258621][ T2767] FAT-fs (loop3): bogus number of reserved sectors [ 2482.273867][ T2767] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002808}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:32:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000000)={'bridge0\x00'}) 22:32:45 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x5c00000000000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x74000000, 0x1ca22705}], 0x0, 0x0) 22:32:45 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r1 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r0, r1, 0x0, 0x1) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='memory.events\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x9c, r3, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x8}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7c}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2668}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x804}, 0x0) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:32:45 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2482.722230][ T2992] FAT-fs (loop3): bogus number of reserved sectors [ 2482.729198][ T2992] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:45 executing program 5: r0 = socket(0x10, 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000380)="31000000130009006920060046000107000065a300000000ffff00000600001600"/49, 0x31}], 0x1) 22:32:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x75260000, 0x1ca22705}], 0x0, 0x0) 22:32:45 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x6000000000000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:45 executing program 5: [ 2482.967359][ T3340] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.5'. 22:32:46 executing program 5: 22:32:46 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x6800000000000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 2483.183400][ T3482] FAT-fs (loop3): bogus number of reserved sectors [ 2483.291262][ T3482] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2483.382541][ T3482] FAT-fs (loop3): bogus number of reserved sectors [ 2483.406923][ T3482] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002810}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:32:46 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000001c0)={0x53, 0xfffffffffffffffe, 0x7c, 0x1, @buffer={0x0, 0xc, &(0x7f0000000000)=""/12}, &(0x7f0000000040)="39404bd0fd16ea334bc6b2137eeda7a1434fc803fd2767c6f51df90b871b49fb7979b58b3b0e42e04f2fa853e5373739a45400c847d3a40a4df35c5ada79ae61dcb49b31908f01d428446b66a677d2de7951b3574735e58f4d6fcc09fa0479124f1c75839c6e179e46406e5ef47ab4f30f065aedaad274925ff4202e", &(0x7f00000000c0)=""/167, 0x8, 0x1, 0xffffffffffffffff, &(0x7f0000000180)}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r4 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r3, r4, 0x0, 0x1) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x4) 22:32:46 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:32:46 executing program 5: 22:32:46 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x6c00000000000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:46 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x7a000000, 0x1ca22705}], 0x0, 0x0) 22:32:46 executing program 5: [ 2483.667515][ T3608] FAT-fs (loop3): bogus number of reserved sectors [ 2483.680985][ T3608] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:46 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x7400000000000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:46 executing program 5: [ 2483.832477][ T3608] FAT-fs (loop3): bogus number of reserved sectors 22:32:46 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\xff', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2483.910225][ T3608] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:46 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:32:47 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x7a00000000000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002818}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:32:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x7b260000, 0x1ca22705}], 0x0, 0x0) 22:32:47 executing program 5: 22:32:47 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x2000000) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:32:47 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff525, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:32:47 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x8cffffff00000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:47 executing program 5: [ 2484.754271][ T4174] FAT-fs (loop3): bogus number of reserved sectors 22:32:47 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r1 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r0, r1, 0x0, 0x1) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000000)={0x8}, 0x4) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:32:47 executing program 5: [ 2484.900288][ T4174] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:47 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x2, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:32:48 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xf6ffffff00000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:48 executing program 5: [ 2485.053082][ T4174] FAT-fs (loop3): bogus number of reserved sectors [ 2485.082143][ T4174] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002820}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:32:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x8cffffff, 0x1ca22705}], 0x0, 0x0) 22:32:48 executing program 5: 22:32:48 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_GET_SECUREBITS(0x1b) socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) 22:32:48 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x3, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:32:48 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xf9fdffff00000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 2485.908833][ T23] audit: type=1326 audit(1574375568.879:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=4624 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45d47a code=0x0 [ 2485.920940][ T4629] FAT-fs (loop3): bogus number of reserved sectors 22:32:48 executing program 5: 22:32:48 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x4, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2485.998217][ T4629] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:49 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xff00000000000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0xc0ed0000, 0x1ca22705}], 0x0, 0x0) 22:32:49 executing program 5: 22:32:49 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x5, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2486.367673][ T4753] FAT-fs (loop3): bogus number of reserved sectors [ 2486.406515][ T4753] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2486.574357][ T4753] FAT-fs (loop3): bogus number of reserved sectors [ 2486.592289][ T4753] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002828}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:32:49 executing program 5: 22:32:49 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xffffff7f00000000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:49 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r0 = shmget(0x2, 0x4000, 0x20, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) dup2(r2, r1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x907fc6808b57473b, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:32:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0xf5ffffff, 0x1ca22705}], 0x0, 0x0) 22:32:49 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x6, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:32:49 executing program 5: 22:32:50 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6000, 0x4, &(0x7f0000ff7000/0x6000)=nil) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) r3 = geteuid() setuid(r3) 22:32:50 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'\nowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 2487.047536][ T5089] FAT-fs (loop3): bogus number of reserved sectors [ 2487.071400][ T5089] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2487.217485][ T5089] FAT-fs (loop3): bogus number of reserved sectors [ 2487.247803][ T5089] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:50 executing program 5: [ 2487.318713][ T5263] overlayfs: unrecognized mount option " [ 2487.318713][ T5263] owerdir=./bus" or missing value 22:32:50 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'#owerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0xf6ffffff, 0x1ca22705}], 0x0, 0x0) [ 2487.743664][ T5457] FAT-fs (loop3): bogus number of reserved sectors [ 2487.779471][ T5457] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002830}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:32:50 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x8, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:32:50 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0xb74a7c6e00372d72) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x2, &(0x7f0000ff7000/0x2000)=nil) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x2000, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000040)={0x4000, 0x10000}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') lseek(0xffffffffffffffff, 0x1000, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r4, r5, 0x0, 0x1) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000080)={0x2, 0x10000}) 22:32:50 executing program 5: 22:32:50 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'%owerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:50 executing program 5: 22:32:50 executing program 5: [ 2487.932806][ T5457] FAT-fs (loop3): bogus number of reserved sectors [ 2487.947700][ T5457] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0xf9fdffff, 0x1ca22705}], 0x0, 0x0) [ 2488.033243][ T5543] overlayfs: unrecognized mount option "%owerdir=./bus" or missing value 22:32:51 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'*owerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:51 executing program 5: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)=@gcm_128={{}, "04337d5cf5bc9e31", "7510e9787d9af24dbdad186ba719262a", "102a6d01", "935a5e398aaee1b9"}, 0x28) 22:32:51 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0xa, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2488.243332][ T5669] overlayfs: unrecognized mount option "*owerdir=./bus" or missing value 22:32:51 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'+owerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 2488.407965][ T5821] FAT-fs (loop3): bogus number of reserved sectors [ 2488.522447][ T5821] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2488.523312][ T5968] overlayfs: unrecognized mount option "+owerdir=./bus" or missing value [ 2488.636333][ T5821] FAT-fs (loop3): bogus number of reserved sectors [ 2488.659837][ T5821] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002838}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:32:51 executing program 5: 22:32:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0xff000000, 0x1ca22705}], 0x0, 0x0) 22:32:51 executing program 1: unshare(0x2a000400) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:32:51 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0xb, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:32:51 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={',owerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:52 executing program 5: [ 2489.037469][ T6089] FAT-fs (loop3): bogus number of reserved sectors [ 2489.081835][ T6089] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2489.103250][ T6085] overlayfs: unrecognized mount option "owerdir=./bus" or missing value 22:32:52 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0xf, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:32:52 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, 0x0, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) openat$cgroup_ro(r1, &(0x7f00000001c0)='cpu.stat\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) lstat(&(0x7f0000000340)='./bus\x00', 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000580)={{{@in=@multicast1, @in=@multicast2, 0x4e20, 0x1ff, 0x0, 0x0, 0x2, 0x0, 0x80}, {0x3fde27fc, 0x7fffffff, 0x0, 0x0, 0x5, 0x7, 0x4, 0x800000002}, {0x0, 0x10000002286, 0x7ff}, 0xffffffff, 0x6e6bbc, 0x0, 0x1, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x10}}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3503, 0x0, 0x0, 0xb8, 0x0, 0x4e9, 0x7}}, 0xe8) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1f, 0x0, 0xff, 0x6, 0x1, 0x1, 0x4, 0x5, 0x3f, 0x2}}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) 22:32:52 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) recvfrom$rose(r2, &(0x7f0000000000)=""/2, 0x2, 0x40002103, 0x0, 0x0) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:32:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0xff070400, 0x1ca22705}], 0x0, 0x0) 22:32:52 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'-owerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 2489.498005][ T6305] FAT-fs (loop3): bogus number of reserved sectors [ 2489.527691][ T6305] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2489.616940][ T6305] FAT-fs (loop3): bogus number of reserved sectors [ 2489.708747][ T6305] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002840}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:32:52 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x4000, 0x0) sendmsg$nl_netfilter(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x6000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa0, 0x6, 0x5, 0x1, 0x70bd25, 0x25dfdbfc, {0xc, 0x0, 0x8}, [@generic="ba984357def3578d850ed8ca3830e9cae4674ec374fb1b5091011dd895a693d48238806fc6683e779db76b3c47dcd8b803dbcd876ca2046434348f3d97b9a88f114a3f1fbd539a0f2923fa4e69b38ed3109428c3aca8ca61a20f09a3d5a25fd74d1523c71c82a004aceca11b61d0aa502353048b0e7b34018c7ad0691a5aeaf9a7e93efe3fc339c24a5f8650"]}, 0xa0}, 0x1, 0x0, 0x0, 0x80}, 0x3b760d7e3d5a2889) 22:32:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0xff0f0000, 0x1ca22705}], 0x0, 0x0) 22:32:52 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c02, &(0x7f0000000100)) [ 2489.922070][ T6526] overlayfs: unrecognized mount option "-owerdir=./bus" or missing value 22:32:53 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2490.160570][ T6641] FAT-fs (loop3): bogus number of reserved sectors [ 2490.167441][ T6641] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2490.246732][ T6641] FAT-fs (loop3): bogus number of reserved sectors [ 2490.267698][ T6641] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:53 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'.owerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:53 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0xfffdffff, 0x1ca22705}], 0x0, 0x0) 22:32:53 executing program 5: unshare(0x12020000) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:32:53 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x14, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2490.476179][ T6854] overlayfs: unrecognized mount option ".owerdir=./bus" or missing value 22:32:53 executing program 5: unshare(0x12020000) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:32:53 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x60, r4, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r5}, {0x44, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x3}}, {0x8}}}]}}]}, 0x60}}, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r10}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_ADDRESS={0x8, 0x3}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', r10}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001ac0)={'team0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$netlink(0x10, 0x3, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r16}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r16}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_ADDRESS={0x8, 0x3}]}, 0x28}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001b00)={0x0, @initdev, @dev}, &(0x7f0000001b40)=0xc) r18 = socket$nl_route(0x10, 0x3, 0x0) r19 = socket$netlink(0x10, 0x3, 0x0) r20 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r20, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r19, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r21}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r21}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r18, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r21}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_ADDRESS={0x8, 0x3}]}, 0x28}}, 0x0) r22 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r23 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r22, r23, 0x0, 0x1) getpeername$packet(r22, &(0x7f0000001dc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001e00)=0x14) r25 = socket$nl_route(0x10, 0x3, 0x0) r26 = socket$netlink(0x10, 0x3, 0x0) r27 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r27, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r27, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r26, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r28}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r28}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r25, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r28}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_ADDRESS={0x8, 0x3}]}, 0x28}}, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000003400)={@initdev, 0x0}, &(0x7f0000003440)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000003e00)={{{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000003f00)=0xe8) r31 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r32 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r31, r32, 0x0, 0x1) getsockopt$inet6_mreq(r32, 0x29, 0x15, &(0x7f0000003f40)={@mcast1, 0x0}, &(0x7f0000003f80)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000007140)={'vxcan0\x00', 0x0}) r35 = socket$nl_route(0x10, 0x3, 0x0) r36 = socket$netlink(0x10, 0x3, 0x0) r37 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r37, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r37, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r36, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r38}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r38}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r35, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r38}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_ADDRESS={0x8, 0x3}]}, 0x28}}, 0x0) r39 = socket$nl_route(0x10, 0x3, 0x0) r40 = socket$netlink(0x10, 0x3, 0x0) r41 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r41, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r41, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r40, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r42}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r42}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r39, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r42}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_ADDRESS={0x8, 0x3}]}, 0x28}}, 0x0) r43 = socket$nl_route(0x10, 0x3, 0x0) r44 = socket$netlink(0x10, 0x3, 0x0) r45 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r45, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r45, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r44, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r46}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r46}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r43, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r46}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_ADDRESS={0x8, 0x3}]}, 0x28}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000007180)={'vxcan0\x00', r46}) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000009040)={@initdev, @multicast1, 0x0}, &(0x7f0000009080)=0xc) r49 = socket$nl_route(0x10, 0x3, 0x0) r50 = socket$netlink(0x10, 0x3, 0x0) r51 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r51, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r51, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r50, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r52}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r52}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r49, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r52}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_ADDRESS={0x8, 0x3}]}, 0x28}}, 0x0) r53 = socket$nl_route(0x10, 0x3, 0x0) r54 = socket$netlink(0x10, 0x3, 0x0) r55 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r55, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r55, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r54, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r56}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r56}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r53, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r56}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_ADDRESS={0x8, 0x3}]}, 0x28}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f000000a280)={'vxcan0\x00', 0x0}) r58 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r59 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r58, r59, 0x0, 0x1) recvmsg$can_raw(r58, &(0x7f000000b4c0)={&(0x7f000000a2c0)=@can={0x1d, 0x0}, 0x80, &(0x7f000000b480)=[{&(0x7f000000a340)=""/118, 0x76}, {&(0x7f000000a3c0)=""/4096, 0x1000}, {&(0x7f000000b3c0)=""/156, 0x9c}], 0x3}, 0x1) getpeername$packet(r2, &(0x7f000000b5c0)={0x11, 0x0, 0x0}, &(0x7f000000b600)=0x14) accept4(0xffffffffffffffff, &(0x7f000000b640)=@hci={0x1f, 0x0}, &(0x7f000000b6c0)=0x80, 0x80000) accept4$packet(0xffffffffffffffff, &(0x7f000000b780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f000000b7c0)=0x14, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f000000ccc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f000000cd00)=0x14) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f000000d640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f000000d600)={&(0x7f000000cd40)={0x888, r4, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8, 0x1, r11}, {0xf0, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r16}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x800}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r17}, {0x7c, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r21}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r24}}}]}}, {{0x8, 0x1, r28}, {0x19c, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x8000}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r29}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xecb}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x401}}}]}}, {{0x8}, {0x3c, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r30}, {0x98, 0x2, [{0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0x8001, 0x1f, 0x3}, {0x7057, 0x0, 0x7, 0x40}, {0x6, 0x0, 0x80, 0x1fe8}, {0x0, 0x9, 0x2, 0x1}, {0xff, 0x11, 0x1, 0x4}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x800}}}]}}, {{0x8, 0x1, r33}, {0x1c4, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r34}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r38}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r42}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r47}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xb0}}, {0x8, 0x6, r48}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x2d, 0x2, 0x7, 0x8}]}}}]}}, {{0x8, 0x1, r52}, {0x1d4, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r56}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r57}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r60}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r61}}}]}}, {{0x8, 0x1, r62}, {0xc0, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xc8000000}}, {0x8, 0x6, r63}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r64}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}]}, 0x888}, 0x1, 0x0, 0x0, 0x44ac314819645318}, 0x4000) [ 2490.706472][ T6900] FAT-fs (loop3): bogus number of reserved sectors [ 2490.740859][ T6900] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:53 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'0owerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 2490.947083][ T6980] overlayfs: unrecognized mount option "0owerdir=./bus" or missing value 22:32:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002848}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:32:54 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x3d, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:32:54 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0xfffffdf9, 0x1ca22705}], 0x0, 0x0) 22:32:54 executing program 5: unshare(0x12020000) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:32:54 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'Lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:54 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x3e, &(0x7f0000000040)=""/220, &(0x7f0000000140)=0xdc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000000)={0x9}, 0x4) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:32:54 executing program 5: unshare(0x12020000) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) [ 2491.388977][ T7205] FAT-fs (loop3): bogus number of reserved sectors [ 2491.406710][ T7205] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:54 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x588, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2491.509289][ T7205] FAT-fs (loop3): bogus number of reserved sectors [ 2491.519449][ T7205] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:54 executing program 5: unshare(0x12020000) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) shmctl$SHM_UNLOCK(r0, 0xc) 22:32:54 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r3 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r2, r3, 0x0, 0x1) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000180)=r4) r5 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000280)={r6, @in6={{0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast1}}}, 0x0, 0x8}, &(0x7f0000000200)=0x90) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000440)={r6, @in={{0x2, 0x4e22, @local}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000000)={r6, 0x1f}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000080)={r7, 0xa8, "0c1576593d242fc51446ba5b5e2c8f3f3def6a2815b819b851a0779d18a7f361ee1bbbd62fb2837f4dcb798123048aa9f3a4ec0004b325edea80f67eb5af1cec73c51e2eed69a09b0fbb148fc3542fc9b1cd018bbd86a3d9bab2484e99630cebb9e36a77c5e6149eed937e229fcf162c7523301327aaf308cffe7604822a9b7d0c16a69c1cd8f0d7b8d8929ee24874caf1ff6f951986fcba8f15d6317b77fb6c99447dd35a6ef983"}, &(0x7f0000000140)=0xb0) r8 = socket$netlink(0x10, 0x3, 0x0) dup2(r8, r0) unshare(0x8000400) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) 22:32:54 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0xfffffdff, 0x1ca22705}], 0x0, 0x0) 22:32:54 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'Xowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 2491.939221][ T7535] FAT-fs (loop3): bogus number of reserved sectors [ 2491.953940][ T7535] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2491.970821][ T7537] overlayfs: unrecognized mount option "Xowerdir=./bus" or missing value [ 2492.088383][ T7535] FAT-fs (loop3): bogus number of reserved sectors [ 2492.099834][ T7535] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002850}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:32:55 executing program 5: unshare(0x12020000) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) shmctl$SHM_UNLOCK(r0, 0xc) 22:32:55 executing program 1: unshare(0x2a000400) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r4 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r3, r4, 0x0, 0x1) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f00000000c0)={@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, {&(0x7f0000000000)=""/82, 0x52}, &(0x7f0000000080), 0x10}, 0xa0) shmat(r0, &(0x7f0000ff7000/0x2000)=nil, 0x6000) r5 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VFIO_CHECK_EXTENSION(r5, 0x3b65, 0x2) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:32:55 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x5fa, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:32:55 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'\\owerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0xffffff7f, 0x1ca22705}], 0x0, 0x0) 22:32:55 executing program 5: unshare(0x12020000) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) shmctl$SHM_UNLOCK(r0, 0xc) [ 2492.448643][ T7659] FAT-fs (loop3): bogus number of reserved sectors [ 2492.517430][ T7659] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:55 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r4 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r3, r4, 0x0, 0x1) r5 = openat$cgroup_ro(r3, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x12008020}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x9c, r6, 0x800, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x101}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0x64, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}]}, 0x9c}}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) [ 2492.634862][ T7659] FAT-fs (loop3): bogus number of reserved sectors [ 2492.666498][ T7661] overlayfs: unrecognized mount option "\owerdir=./bus" or missing value 22:32:55 executing program 5: unshare(0x12020000) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) dup2(r2, r1) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) [ 2492.737929][ T7659] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0xffffff8c, 0x1ca22705}], 0x0, 0x0) 22:32:55 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x8400, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:32:55 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'uowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:56 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002858}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:32:56 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x8, 0x4) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r4, r5, 0x0, 0x1) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d8, r6, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xa8, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'rose0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd15}]}]}, @TIPC_NLA_NET={0x58, 0x7, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x418a}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x96a}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xa7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6c71}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x425}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x400}]}, @TIPC_NLA_LINK={0x5c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_PRIO={0x2a, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x6404c851}, 0x40000401) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) [ 2493.147516][ T7989] FAT-fs (loop3): bogus number of reserved sectors [ 2493.154081][ T7989] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:56 executing program 5: unshare(0x12020000) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) dup2(r2, r1) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) [ 2493.278808][ T7989] FAT-fs (loop3): bogus number of reserved sectors [ 2493.285455][ T7989] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:56 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x9e00, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:32:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0xfffffff5, 0x1ca22705}], 0x0, 0x0) 22:32:56 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$NBD_SET_SIZE(r2, 0xab02, 0x2) unshare(0x8000400) mremap(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x1000, 0x366d92c44d1cca1c, &(0x7f0000ff7000/0x1000)=nil) 22:32:56 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'l\nwerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:56 executing program 5: unshare(0x12020000) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) dup2(r2, r1) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) 22:32:56 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x9f00, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2493.772537][ T8270] overlayfs: unrecognized mount option "l [ 2493.772537][ T8270] werdir=./bus" or missing value 22:32:56 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'l%werdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 2493.817849][ T8254] FAT-fs (loop3): bogus number of reserved sectors 22:32:56 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) [ 2493.864976][ T8254] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2493.919148][ T8254] FAT-fs (loop3): bogus number of reserved sectors [ 2493.933727][ T8254] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:56 executing program 5: unshare(0x12020000) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) [ 2494.244513][ T8481] overlayfs: unrecognized mount option "l%werdir=./bus" or missing value 22:32:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002860}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:32:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0xfffffff6, 0x1ca22705}], 0x0, 0x0) 22:32:57 executing program 5: unshare(0x12020000) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) 22:32:57 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ff9000/0x2000)=nil) 22:32:57 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0xa000, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:32:57 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'l,werdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 2494.834595][ T8671] FAT-fs (loop3): bogus number of reserved sectors [ 2494.858111][ T8669] overlayfs: unrecognized mount option "l" or missing value 22:32:57 executing program 5: unshare(0x12020000) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) [ 2494.897474][ T8671] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2495.053415][ T8671] FAT-fs (loop3): bogus number of reserved sectors 22:32:58 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'l\\werdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 2495.108080][ T8671] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0xedc000000000, 0x1ca22705}], 0x0, 0x0) 22:32:58 executing program 5: unshare(0x12020000) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) 22:32:58 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0xa100, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:32:58 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r0, r0) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000000)={@remote, 0x2b}) r3 = dup2(r1, r0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000180)=r5) r6 = socket$inet(0x2, 0x4000000000000004, 0x0) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) writev(r6, &(0x7f00000007c0)=[{&(0x7f0000000340)="af5b948b5ca1067aa1037211d2e706d0635050c5253b3e256f89ea2240b38c76e220792d14467af0e983b1eed8d8bc7d71acb3c3b5773fd45bc6fe889f3eda796371ad6b1af1f0bc333e1341c7ceeb25263680e97bd01d018c88e428115d22ea7cb42c56ae54e9cb70bcbc0cc7d53b2c84bc9fb6e7cdaad6a8588e8681dd4117603c93f1424c95b9", 0x88}, {&(0x7f0000000500)="046fd1756e425c7d15447e019e45e0a5ab4d6cff47a502b0bdcd550589bc511de5d82bc2e25d392b6822ab77ab8236118c04407c66dd91d87584e40029518ccd466948e6b912a98b5c099f6cbe89ba19f8fc436e137b7d5b089194e446341f", 0x5f}, {&(0x7f0000000580)="1e3c71df30a81c3c5db734cc5cbb9f28017c32091067ba234dc6144daa9d30ae2f89f196ed4dc953dc920e511970183f8b27bfd10dcced1621c846597d54ec04762b9f07", 0x44}, {&(0x7f0000000600)="ceb2dfcbe42e75957c5142ba7ec4ce0ac0936f6a0c0655617e0cd0c8233806b927a43a2052141c7fabdb017fd6b57b0b2579034479f2648174adb96f972c8af665a8e67595adf079f07f029c445ea713ea87d98ff179eb0dd041252c7c9633ee6077a07cb9d3b275840cdfd3299285487324fb0b240da2e14cf256e1f82cdbe72d3b0da1f9587b1825f3377c39", 0x8d}, {&(0x7f00000006c0)="c025b2584ebd61706bc5ef47e61e798d4598a5468116721f505bd7d1a637723434decf802fc2a6b104a58242eb3cce98f4c69f5d17a99ee2deceb543b0b4fbd0929c60888d85b40702c928d586d67a02c7124bbb78b9f87d33fa6439d749b92a7fbe1fa934a620fbd77ee13217ec535bcc4ebe46f89c44db236c05f1fa3784bd99c31e59e255a9a6bc9f9cc7f93b1377e528b8be6c4bafdf5f53957f24b8c3635b2e1fdc23c425ee67b2ac64d0277aa147649e72cd6414a53501249b90115a9e3ddf98cff8479cc852acfc7448f8215d8b295b3456f0018b4babbb889e2a024de05133d4bbcc157a447032", 0xeb}], 0x5) r7 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000280)={r8, @in6={{0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast1}}}, 0x0, 0x8}, &(0x7f0000000200)=0x90) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000440)={r8, @in={{0x2, 0x4e22, @local}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000040)=@sack_info={r8, 0x685, 0x1f}, &(0x7f0000000080)=0xc) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) [ 2495.441809][ T8906] FAT-fs (loop3): bogus number of reserved sectors [ 2495.456394][ T8906] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2495.555522][ T8906] FAT-fs (loop3): bogus number of reserved sectors [ 2495.645209][ T8906] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:59 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002868}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:32:59 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0xa200, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:32:59 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lo\nerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:59 executing program 5: unshare(0x12020000) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) 22:32:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x1000000000000, 0x1ca22705}], 0x0, 0x0) 22:32:59 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r0 = shmget$private(0x0, 0xf000, 0x0, &(0x7f0000000000/0xf000)=nil) shmat(r0, &(0x7f0000002000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r4 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r3, r4, 0x0, 0x1) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000000)={0x3, "1213d9"}, 0x4) r5 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) [ 2496.504622][ T9183] FAT-fs (loop3): bogus number of reserved sectors [ 2496.534646][ T9180] overlayfs: unrecognized mount option "lo [ 2496.534646][ T9180] erdir=./bus" or missing value 22:32:59 executing program 5: unshare(0x12020000) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) [ 2496.577664][ T9183] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2496.646195][ T9183] FAT-fs (loop3): bogus number of reserved sectors [ 2496.656741][ T9183] FAT-fs (loop3): Can't find a valid FAT filesystem 22:32:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x8040000000000, 0x1ca22705}], 0x0, 0x0) 22:32:59 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lo%erdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:32:59 executing program 5: unshare(0x12020000) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) 22:32:59 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r4 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r3, r4, 0x0, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000000)='vmnet1-\x00') mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:33:00 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0xa300, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2497.052189][ T9409] FAT-fs (loop3): bogus number of reserved sectors [ 2497.056678][ T9408] overlayfs: unrecognized mount option "lo%erdir=./bus" or missing value [ 2497.180189][ T9409] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:00 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002870}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:33:00 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lo,erdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:33:00 executing program 5: unshare(0x12020000) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) [ 2497.295265][ T9409] FAT-fs (loop3): bogus number of reserved sectors 22:33:00 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e24, 0x9, @mcast1, 0x9}}, 0x0, 0x5, 0x0, "0b17d3dad6e7b1a537876119dc0969a61ad813fc2b24faf8b1edfe60446dabe9b5a4842d233ae58da8655d7976243ae5af3aa385ba9a6cc687e871e36e7343b4ee1c00cd30072dc96b1c58e8fa9224a1"}, 0xd8) r2 = dup2(r1, r0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0xdf8b50fc47007a12, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r3, 0x16}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) [ 2497.364013][ T9409] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:00 executing program 5: unshare(0x12020000) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) [ 2497.515523][ T9637] overlayfs: unrecognized mount option "lo" or missing value 22:33:00 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0xe000000000000, 0x1ca22705}], 0x0, 0x0) 22:33:00 executing program 5: unshare(0x12020000) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) 22:33:00 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lo\\erdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:33:00 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0xa400, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2497.809305][ T9864] FAT-fs (loop3): bogus number of reserved sectors 22:33:00 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x8) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x511182, 0x0) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @dev={[], 0xb}, 'veth0_to_team\x00'}}) 22:33:00 executing program 5: unshare(0x12020000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(0x0, 0xc) [ 2497.897668][ T9864] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2497.925682][ T9869] overlayfs: unrecognized mount option "lo\erdir=./bus" or missing value 22:33:01 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'low\nrdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 2498.041617][ T9864] FAT-fs (loop3): bogus number of reserved sectors [ 2498.070063][ T9864] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2498.216064][ T9992] overlayfs: unrecognized mount option "low [ 2498.216064][ T9992] rdir=./bus" or missing value 22:33:01 executing program 5: unshare(0x12020000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(0x0, 0xc) 22:33:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x100000000000000, 0x1ca22705}], 0x0, 0x0) 22:33:01 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0xa500, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:01 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'low%rdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:33:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002878}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:33:01 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80000, 0x0) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r4, r5, 0x0, 0x1) write$P9_RVERSION(r4, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x20, 0x8, '9P2000.u'}, 0x15) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) [ 2498.759414][T10240] FAT-fs (loop3): bogus number of reserved sectors [ 2498.766213][T10240] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2498.800824][T10245] overlayfs: unrecognized mount option "low%rdir=./bus" or missing value 22:33:01 executing program 5: unshare(0x12020000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(0x0, 0xc) [ 2498.897726][T10240] FAT-fs (loop3): bogus number of reserved sectors 22:33:01 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'low,rdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 2498.975094][T10240] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:02 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0xa600, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:02 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x200000000000000, 0x1ca22705}], 0x0, 0x0) 22:33:02 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmget(0x2, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) r0 = shmget$private(0x0, 0xf000, 0x0, &(0x7f0000000000/0xf000)=nil) shmat(r0, &(0x7f0000002000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:33:02 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) [ 2499.308246][T10481] overlayfs: unrecognized mount option "low" or missing value [ 2499.396208][T10534] FAT-fs (loop3): bogus number of reserved sectors [ 2499.411140][T10534] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:02 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) 22:33:02 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'low\\rdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 2499.539545][T10534] FAT-fs (loop3): bogus number of reserved sectors [ 2499.546132][T10534] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:02 executing program 1: unshare(0x2e000400) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x5, 0x7}) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:33:02 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) [ 2499.889782][T10764] overlayfs: unrecognized mount option "low\rdir=./bus" or missing value 22:33:03 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002880}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:33:03 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x300000000000000, 0x1ca22705}], 0x0, 0x0) 22:33:03 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0xa700, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:03 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) 22:33:03 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r2 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r1, r2, 0x0, 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r4 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r3, r4, 0x0, 0x1) ioctl$TUNSETLINK(r4, 0x400454cd, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) r5 = openat$cgroup_ro(r1, &(0x7f0000000180)='\x00'/10, 0x0, 0x0) write$P9_RSTATFS(r5, &(0x7f0000000040)={0x43, 0x9, 0x2, {0x10000, 0x20, 0x3ff, 0x100000000, 0x1, 0x34, 0x100, 0xa64, 0x7}}, 0x43) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = dup2(r6, r0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:33:03 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowe\ndir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:33:03 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) [ 2500.363521][T10935] FAT-fs (loop3): bogus number of reserved sectors [ 2500.407007][T10932] overlayfs: unrecognized mount option "lowe [ 2500.407007][T10932] dir=./bus" or missing value [ 2500.439946][T10935] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:03 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) 22:33:03 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) [ 2500.587555][T10935] FAT-fs (loop3): bogus number of reserved sectors 22:33:03 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowe%dir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 2500.627922][T10935] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:03 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x400000000000000, 0x1ca22705}], 0x0, 0x0) 22:33:03 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) [ 2500.884036][T11260] overlayfs: unrecognized mount option "lowe%dir=./bus" or missing value [ 2501.093672][T11357] FAT-fs (loop3): bogus number of reserved sectors [ 2501.167818][T11357] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2501.272338][T11357] FAT-fs (loop3): bogus number of reserved sectors [ 2501.284650][T11357] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002888}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:33:04 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x2, @multicast2}}, 0x1e) 22:33:04 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0xa800, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:04 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) 22:33:04 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowe,dir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:33:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x500000000000000, 0x1ca22705}], 0x0, 0x0) 22:33:04 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) [ 2501.541454][T11391] FAT-fs (loop3): bogus number of reserved sectors [ 2501.552593][T11386] overlayfs: unrecognized mount option "lowe" or missing value [ 2501.578036][T11391] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:04 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0xa900, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2501.728264][T11391] FAT-fs (loop3): bogus number of reserved sectors [ 2501.734946][T11391] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:04 executing program 1: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) r3 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0xae1d1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0xf2, 0x0, 0x9808) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:33:04 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowe\\dir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:33:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x600000000000000, 0x1ca22705}], 0x0, 0x0) 22:33:04 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) [ 2501.985061][T11612] overlayfs: unrecognized mount option "lowe\dir=./bus" or missing value [ 2502.201034][T11724] FAT-fs (loop3): bogus number of reserved sectors [ 2502.207772][T11724] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2502.294391][T11724] FAT-fs (loop3): bogus number of reserved sectors [ 2502.342337][T11724] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:05 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002890}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:33:05 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lower,ir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:33:05 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0xaa00, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:05 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) 22:33:05 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x700000000000000, 0x1ca22705}], 0x0, 0x0) [ 2502.571634][T11836] overlayfs: unrecognized mount option "lower" or missing value 22:33:05 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) 22:33:05 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffb000/0x3000)=nil) r0 = shmget$private(0x0, 0xf000, 0x0, &(0x7f0000000000/0xf000)=nil) shmat(r0, &(0x7f0000002000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x8000) r1 = socket$l2tp(0x18, 0x1, 0x1) getpeername(r1, &(0x7f0000000440)=@xdp, &(0x7f00000004c0)=0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) unshare(0x8000400) ioctl$SCSI_IOCTL_DOORLOCK(r4, 0x5380) r5 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xbc82, 0x6a0040) execveat(r5, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=[&(0x7f0000000080)='}\x00', &(0x7f00000000c0)='\x00'], &(0x7f00000003c0)=[&(0x7f0000000140)='systemmd5sumnodevselflo&selfppp1keyring,\\&@lo\x00', &(0x7f0000000180)='{ppp0\'eth1nodev\x00', &(0x7f00000001c0)='}!GPL\x93\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='proc\x00', &(0x7f0000000280)='vmnet0$\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='{wlan0cpusetvboxnet1[eth1\x00', &(0x7f0000000340)='^\x00', &(0x7f0000000380)=',\x00'], 0x800) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) [ 2502.674868][T11843] FAT-fs (loop3): bogus number of reserved sectors [ 2502.704388][T11843] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2502.782623][T11843] FAT-fs (loop3): bogus number of reserved sectors [ 2502.795476][T11843] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:05 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lower\\ir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:33:05 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) 22:33:05 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x800000000000000, 0x1ca22705}], 0x0, 0x0) 22:33:06 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0xff00, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:06 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r1 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r0, r1, 0x0, 0x1) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x280800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r5, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x26044400) [ 2503.181207][T11964] overlayfs: unrecognized mount option "lower\ir=./bus" or missing value [ 2503.232474][T11969] FAT-fs (loop3): bogus number of reserved sectors [ 2503.313820][T11969] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:06 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002898}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:33:06 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x0) shmctl$SHM_UNLOCK(r0, 0xc) 22:33:06 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lower`ir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 2503.450329][T11969] FAT-fs (loop3): bogus number of reserved sectors [ 2503.467974][T11969] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:06 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r1 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r0, r1, 0x0, 0x1) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000040)=""/74) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r4 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r3, r4, 0x0, 0x1) accept4$bt_l2cap(r3, 0x0, &(0x7f00000000c0), 0x800) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = dup2(r5, r2) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r8 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r7, r8, 0x0, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@mcast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000480)=0xffffffffffffffb2) setsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000380)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x1ff, 0x4e21, 0x7f, 0xa, 0x20, 0x20, 0x11, 0x0, r9}, {0xffffffff, 0x9, 0x4, 0x4, 0x8463, 0x856, 0x6, 0x1ff}, {0x2, 0x7, 0xff, 0xfe60}, 0x1, 0x6e6bb2, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x4d6, 0x6c}, 0xa, @in6=@loopback, 0x0, 0xf4d8d098ac57beda, 0x2, 0x8, 0x4, 0x5, 0x4}}, 0xe8) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) pipe(&(0x7f0000000000)) gettid() r10 = gettid() ptrace$setopts(0x4206, r10, 0x0, 0x0) tkill(r10, 0x3c) ptrace$cont(0x18, r10, 0x0, 0x0) ptrace$setregs(0xd, r10, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r10, 0x0, 0x0) r11 = syz_open_procfs(r10, &(0x7f0000000340)='net/igmp\x00') r12 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r11, r12, 0x0, 0x1) ioctl$TCSETSW(r11, 0x5403, &(0x7f0000000300)={0x4, 0x7, 0x7, 0xd33, 0x2, 0x2a, 0x9, 0x6, 0x3f, 0x83, 0x9, 0x5}) r13 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) r14 = dup2(0xffffffffffffffff, r13) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r14, 0xc058534b, &(0x7f0000000280)={0x80000001, 0x8, 0x80000000, 0xffff, 0x3, 0x7}) 22:33:06 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x0) shmctl$SHM_UNLOCK(r0, 0xc) 22:33:06 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x900000000000000, 0x1ca22705}], 0x0, 0x0) 22:33:06 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x31af4, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2503.759043][T12186] overlayfs: unrecognized mount option "lower`ir=./bus" or missing value 22:33:06 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x0) shmctl$SHM_UNLOCK(r0, 0xc) 22:33:06 executing program 5: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(0x0, 0xc) [ 2503.974493][T12307] FAT-fs (loop3): bogus number of reserved sectors [ 2504.026263][T12307] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:07 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerd\nr', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:33:07 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) unshare(0xc020000) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:33:07 executing program 5: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(0x0, 0xc) [ 2504.217492][T12307] FAT-fs (loop3): bogus number of reserved sectors [ 2504.272292][T12307] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2504.417052][T12428] overlayfs: unrecognized mount option "lowerd [ 2504.417052][T12428] r=./bus" or missing value 22:33:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x200028a0}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:33:07 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0xa00000000000000, 0x1ca22705}], 0x0, 0x0) 22:33:07 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x31af5, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:07 executing program 5: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(0x0, 0xc) 22:33:07 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerd%r', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:33:07 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) socket$nl_route(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000840)='/proc/capi/capi20\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000880)=[@timestamp, @timestamp, @timestamp, @timestamp, @window={0x3, 0xffff, 0x7f}, @timestamp], 0x6) unshare(0x8000400) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r4, r5, 0x0, 0x1) ioctl$VIDIOC_G_ENC_INDEX(r4, 0x8818564c, &(0x7f0000000000)) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) [ 2504.887598][T12656] FAT-fs (loop3): bogus number of reserved sectors [ 2504.907604][T12656] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2504.918789][T12655] overlayfs: unrecognized mount option "lowerd%r=./bus" or missing value 22:33:07 executing program 5: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2505.041016][T12656] FAT-fs (loop3): bogus number of reserved sectors [ 2505.084588][T12656] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:08 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerd,r', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:33:08 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000180), r3, 0x0, 0x3, 0x400000}}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e000000ffffffff7703000018010000f8010000f80100000000000018010000e0020000e0020000e0020000e0020000e002000004000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="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"], 0x3d8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000680)=0x80000001, 0x4) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000180), r4, 0x0, 0x3, 0x400000}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000180), r5, 0x0, 0x3, 0x400000}}, 0x20) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f0000000000), r5, 0x3}}, 0x18) 22:33:08 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0xc00000000000000, 0x1ca22705}], 0x0, 0x0) 22:33:08 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x31af6, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:08 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerd%r', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 2505.540381][T12935] FAT-fs (loop3): bogus number of reserved sectors [ 2505.584989][T12935] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2505.677378][T12912] overlayfs: unrecognized mount option "lowerd" or missing value 22:33:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x200028a8}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:33:08 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x1000, 0x880, &(0x7f0000ff7000/0x1000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:33:08 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x1000000000000000, 0x1ca22705}], 0x0, 0x0) 22:33:08 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x31af7, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:09 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerd\\r', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:33:09 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerd%r', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 2506.243928][T13212] FAT-fs (loop3): bogus number of reserved sectors [ 2506.285206][T13212] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:09 executing program 5: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1400, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:33:09 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) [ 2506.349264][T13321] overlayfs: unrecognized mount option "lowerd%r=./bus" or missing value [ 2506.489362][T13212] FAT-fs (loop3): bogus number of reserved sectors [ 2506.557398][T13212] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:09 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x31af8, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:09 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdi\n', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:33:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x2000000000000000, 0x1ca22705}], 0x0, 0x0) 22:33:09 executing program 5: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x401e, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) [ 2506.973976][T13535] overlayfs: unrecognized mount option "lowerdi [ 2506.973976][T13535] =./bus" or missing value [ 2506.990259][T13548] FAT-fs (loop3): bogus number of reserved sectors [ 2506.996935][T13548] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:10 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x200028b0}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:33:10 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={r0}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000034c0)={0x0, @local, @remote}, &(0x7f0000003500)=0xc) connect$can_j1939(r1, &(0x7f0000003540)={0x1d, r3, 0x3, {0x0, 0x1fe, 0x3}, 0xfe}, 0x18) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:33:10 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdi%', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 2507.153926][T13548] FAT-fs (loop3): bogus number of reserved sectors [ 2507.171403][T13548] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:10 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x31af9, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:10 executing program 5 (fault-call:6 fault-nth:0): r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) 22:33:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x2010000000000000, 0x1ca22705}], 0x0, 0x0) 22:33:10 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0xa0800, 0x0) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000040)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000180)=r3) r4 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000280)={r5, @in6={{0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast1}}}, 0x0, 0x8}, &(0x7f0000000200)=0x90) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r7 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r6, r7, 0x0, 0x1) ioctl$TUNSETNOCSUM(r7, 0x400454c8, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000440)={r5, @in={{0x2, 0x4e22, @local}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000080)={r5, @in={{0x2, 0x4e22, @remote}}, 0x401, 0x4, 0xfffff800, 0x401, 0x7}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180)={r8, 0x7fff}, &(0x7f00000001c0)=0x8) r9 = dup2(r2, r0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) [ 2507.595105][T13783] FAT-fs (loop3): bogus number of reserved sectors [ 2507.614391][T13783] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:10 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) [ 2507.685514][T13783] FAT-fs (loop3): bogus number of reserved sectors [ 2507.703334][T13783] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:10 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdi,', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:33:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x2300000000000000, 0x1ca22705}], 0x0, 0x0) 22:33:10 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0x2) 22:33:11 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x31afa, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2508.134343][T14014] FAT-fs (loop3): bogus number of reserved sectors [ 2508.144365][T14014] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2508.245888][T14014] FAT-fs (loop3): bogus number of reserved sectors [ 2508.307901][T14014] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x200028b8}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:33:11 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0x3) 22:33:11 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdi\\', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:33:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x2e04000000000000, 0x1ca22705}], 0x0, 0x0) 22:33:11 executing program 1: unshare(0x2a000400) r0 = socket$inet6(0xa, 0x100000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x1200000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x781, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@loopback}, 0x14) setsockopt$inet6_int(r1, 0x29, 0x100000031, &(0x7f0000000140)=0x8, 0xfd73) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/36, 0x24}, 0x2202) sendmmsg(r0, &(0x7f00000000c0), 0x40000a6, 0x0) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = shmat(0x0, &(0x7f0000ff7000/0x1000)=nil, 0x7000) shmdt(r5) shmdt(r5) setsockopt$inet6_tcp_int(r1, 0x6, 0x3, &(0x7f0000000200)=0xffffffff, 0x4) r6 = dup2(r4, r3) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r8 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') accept4$ax25(r6, 0x0, &(0x7f0000000000), 0x800) sendfile(r7, r8, 0x0, 0x1) accept$alg(r8, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) prctl$PR_GET_KEEPCAPS(0x7) shmctl$SHM_LOCK(r2, 0xb) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) [ 2508.761208][T14256] FAT-fs (loop3): bogus number of reserved sectors [ 2508.792271][T14256] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:11 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x31afb, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:11 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x2c, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:33:11 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xb) [ 2508.960993][T14256] FAT-fs (loop3): bogus number of reserved sectors [ 2509.039786][T14256] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x3b04000000000000, 0x1ca22705}], 0x0, 0x0) 22:33:12 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x50, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:33:12 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:33:12 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xd) [ 2509.399393][T14773] FAT-fs (loop3): bogus number of reserved sectors [ 2509.407614][T14773] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2509.496522][T14782] overlayfs: unrecognized mount option "lowerdirP./bus" or missing value [ 2509.570912][T14773] FAT-fs (loop3): bogus number of reserved sectors [ 2509.612722][T14773] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x200028c0}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:33:12 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x31afc, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:12 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x5c, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:33:12 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x7) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5d, 0x5, 0x0, 0x9}, {0x58dc, 0x20, 0x7, 0x81}, {0x2a, 0x4, 0x9, 0x8}, {0x9, 0x6, 0x1f, 0xffff}, {0x80, 0x7, 0x7, 0x9}]}) r2 = semget$private(0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e21, @rand_addr=0x3b}], 0x10) semctl$GETPID(r2, 0x1, 0xb, &(0x7f0000000280)=""/109) semctl$SEM_INFO(r2, 0x0, 0x13, &(0x7f0000000080)=""/41) r4 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:33:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x3c04000000000000, 0x1ca22705}], 0x0, 0x0) 22:33:12 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xe) [ 2509.985653][T15104] FAT-fs (loop3): bogus number of reserved sectors [ 2509.993709][T15104] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:13 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xf) [ 2510.042821][T15104] FAT-fs (loop3): bogus number of reserved sectors [ 2510.051496][T15104] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2510.069582][T15108] overlayfs: unrecognized mount option "lowerdir\./bus" or missing value 22:33:13 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x3d04000000000000, 0x1ca22705}], 0x0, 0x0) 22:33:13 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) dup2(r1, r0) unshare(0x8000400) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) close(r3) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:33:13 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f0000000080)={0x0, 0x9ba4, 0x7, &(0x7f0000000040)=0x2}) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x1001000004e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = accept(r2, 0x0, 0x0) write(r3, &(0x7f0000000100), 0x1ede5) shutdown(r3, 0x2) sendto$packet(r6, &(0x7f0000000040)='u', 0x1, 0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$bt_hidp(0x1f, 0x3, 0x6) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r10, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) getsockopt$inet_mreqn(r10, 0x0, 0x24, &(0x7f0000000240)={@remote, @broadcast, 0x0}, &(0x7f0000000280)=0xc) sendto(r9, &(0x7f0000000180)="6e7a87db08a55ae55c66b058f6d0b98560bf7d6004599c025c69540ea6e551353e5a0b34938662c95668d61981b242b07bc0f8ff1472cad6ac20aa031baa369cf68fde98c257ee3584793309a56e47c093513639c26adab2e738a5da9a7f400fbd65804fead1a00e88fffb782cecacb73fff3c05fe1556329aed4e650a63efbf981c92376fc77d041d83d678e8c192530bdce2a962b096334a368cb8d89f8ce39523ed915dc19300910513e2b98b1bedcc8d220104623a", 0xb7, 0x42008080, &(0x7f00000002c0)=@hci={0x1f, r11, 0x2}, 0x80) r12 = dup2(r8, r7) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) fchdir(r12) mlockall(0x3) unshare(0x8000400) setxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000140)=@v2={0x2000000, [{0x10000, 0x7}, {0x7f, 0x8001}]}, 0x14, 0x0) shmctl$SHM_UNLOCK(r1, 0xc) 22:33:13 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x31afd, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:13 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}, 0xa}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 2510.447263][T15503] FAT-fs (loop3): bogus number of reserved sectors [ 2510.510998][T15503] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2510.687057][T15503] FAT-fs (loop3): bogus number of reserved sectors [ 2510.700097][T15503] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2510.914875][T15756] overlayfs: missing 'workdir' 22:33:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x200028c8}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:33:14 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x1800) ioctl$sock_bt_bnep_BNEPCONNDEL(r4, 0x400442c9, &(0x7f0000000040)={0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001840)='/dev/autofs\x00', 0x80041, 0x0) sendmsg(r2, &(0x7f00000026c0)={&(0x7f0000001880)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x4, 0x0, 0x3, 0x4, {0xa, 0x4e23, 0x5, @mcast1, 0x1}}}, 0x80, &(0x7f0000002080)=[{&(0x7f0000001900)="9958342bbf24c9629b158c17ac5dd67c98dabaf9994c3dd958563e825d6b464e787fa3097149e09f79544287f34e036c318e5e924e4b2ab859919c1747487a00dd937fbd1d34420c07a10fede670a20d54d8160acee8fcc7b067ab45a7498bda399d554820bdf50d8e1238d2e7bc79e1bef52d814f759fbf614ccf61cbf11787debdf398f610a39dd8254a540290", 0x8e}, {&(0x7f00000019c0)="d7984c41dd1a9be75b1122eeb83ae4a57fa87366d234d0ec4deb6f7caef86a0c843b092e1802c1213a8a772d9cfe2a3e3a5c18769ae505b35d3c97dfeb18bc9058154a70944f92482c2cbf684b8f216d04a775c5bf1639bcb80529b3838b0a8c965bd13658ead0e09c02d83064b515f8bbd14626a91ec869", 0x78}, {&(0x7f0000001a40)="57cb7315078c8f9395f54b5b6ae069d3f1158fd3a238c7d0cc356178cba19b7cd79a72fd80a391cb0fd1f84a5f307def12d50bec1cf423e2092c09a5c79f018e9c4b9332f6d4ea44f6b306dfa63aa9b06caddd3254b205fa811ef58123395fec5b936e18d36568f4239641bfd4fdd67f9a1743ec3e55b78f18545713ee969d5811d735ec", 0x84}, {&(0x7f0000001b00)="1cc7584796fcfd4abd181ed43d0f0509cbe83f27df93d95a982262490a9430300dbeed6268a82b3738b69ce9340896dbe26017c059a5fae0a2a4700afb506fe2a24ab8c198a4c21d3c4f7da6706a6909bca4e323bc633519e536661d03e9b4b3510ac32c8480514d4555b251114f19d48bc20942dd2473a083e37ee6e9b78197af6ee4365901bba2098cd1a318962a1970dd9a9446543640184aa11a93da3e05320ee886f6724657ba8352179d6f1ab809ccdf31ab792938479a41a89e30bf852164a18462", 0xc5}, {&(0x7f0000001c00)="27a678d92d8b2b00a968c016a1f43351560d4329760d0eab9e47bff74dd761bbbc57a1e1e798766eda3d0335bb131784c9ce9e84757a9ce805da430db0a58baee4a08bd8127f8a86e2510a654f380bea302dba2c2915250fd7b4e507d7473f1f02e2ad3c82a7ea7851cab3fbf17ae0fd1ff52f7ea72936172b5800d722a6745cab94bbf8e9b94307d9b3ee559abeee171fccd13b1e4702b54b99be7f0a187457079e714bc38291281a233e9318d26cc1caf34d1d5e958a2202a3c4ca6418aeebcd20e1a92423139a0d4a53eaeab73e5382f5a48e3471ab7589052d2ddd7280f5a864dac2879781b3cbf2242142", 0xed}, {&(0x7f0000001d00)="0a3d0e5da433caecef62b7af11477c0269ac4f57a15a0205abcb836aeea05cbe44f3198ee1ba1abe959fb31c80815e07436c9d17ccaed4df77d3a837c3ef72dd9257ca9f628a29417eab364d95eb9106979fd98aa0699e7ef132e4e9d550a6194a3034becee76ace7d9657e90b8ae1", 0x6f}, {&(0x7f0000001d80)="0bed81db1a2091f6a9662a11a62b7a9650c510e810de9be70c72d0ef505f9836381bbcfde1c6307faf14c5b843cd6d83c9a803b27e60cf31fb84519708ab2f3ea10e4a2450ce9e8ac09e13e4730d796ae87be0f3b29ee60886a73b4309a47767dc8126f4716d831a641e705ff851903d2addfa9406b6e4c50bec8eadd57aa2ff9b15f89e7a67196c28ea90128c662c0f81ddab3c4bd2be8f1fa9a294fcbdc5bd8f1facbe0756aef8a495d485e7ffe5e893380e23f1b1749001dd6baa42654b169632240cd38b9c3034f970b7c17652e58631f10ab407ee5f5a9faa0946", 0xdd}, {&(0x7f0000001e80)="6f670e7d43320e5edde1c7bf23d9a1d94778bb60efc0e393b746150f3dcdc0c20a6249f9e714363dadf9de3fdb37c89b0781fa9086b96751eef73e8bcc63821b78385e8656eb1b9e1dc786e7741a2e37baad9659e6e7a0748d60b95066286df85bdc288d3861b1d9964abd5d8239d9ea6bca2470342882849198e6520376ef27a66b23ca6b04699a0477211c412899a7e583ab5c0c9cc683f186c4e5bba4e54b3614963e9cdf6ad21ba5aa7dc4f446743bba5dfa53c500d8eb3302046a94059d5a44603d6466f6fc22387b0e55c7b113daedb537e00afa73c309ad8370b520c792b85b22bd", 0xe5}, {&(0x7f0000001f80)="7aec95aafdc45befa4cba3d0815d90c95d116cf0ac6ada2da80dc873be80f912819d4e2379516a6f43149ad9693295c60eee2844c18d85f030e9d2bd669b8c66fda6e672cd82c0d950ec1c64b77db3ea592e7b3c461fa465b2d330ce6ffe8c1089b2e6b0695fbb4cbadac387c8d59651ecb3b317ee0cb907c15b1735d8d719855d62b0606ab159a2b729c3925bb5f809c2a2d49e18da17e5d7eca53f90c51f2bebbba98c7d7d0c3fedb65333a807ec760cd467727cda5fd2c3a2818d223c1b7598b63f07b32827ae", 0xc8}], 0x9, &(0x7f0000002140)=[{0xf0, 0x324, 0x401, "4b6e7ca45e7c84b3cd2e8d9500e126a563245e913468a6d400f34aa58c4c61d9a2c507b408996a249fc4f7059c691e379bcab9b3ed23f857d8795c0a544a14467c0f19bc23314be13f0ff98ef0d2a22f172b395be2741044a67518293f0cc46fda2b8e44695029d71998570c75f8f0ef54ade7e4c9e53db399042a97a4dee4d65e5ee6af34bc2dddca442ab3c95806bad7337332b472d6f190e501807dbc06f5bb6bd1cb7371ee2e2a7363040023aba692f3a503a1e1b0d6e1751e67d17c2cf8f8160d22294776f0ff9985784b3daa1ec4a60a3e93bbdb8daa111980"}, {0x98, 0x30c, 0x3, "8b1cc6ff765044a7b014cac0ec02de9eb2a7f613d64b75e1595d501aeb000ba4583c04a31745e573f3c57abdad4c751411405dedc26be715e55519244ab94c295f3bcbe8404375e0ad5e855d5e6b13ffb16297bce43874b5edb5f28d8d5c76d4a06a91ae7a3c793251373187129352eae64427b3ad2a8aee430966e4c5646e08d085"}, {0x60, 0x29, 0x6, "ee33083c23b0457a4e801d0bf851ba91a78dc6ac385f179c64cf70df84fe57357f4839883f4ea2c1394f9d41625bf93364768116eb533b23a281226977b2e53f70ef04c4502164db29597c4cd3"}, {0xb0, 0x105, 0x2, "ec2a85089fbf09dab0d5ab4c53603bd2067fb51592bdf1abaae747b2d375978fd33e8e480f0b86b2715789c3d9ac4faf22b56e59064985b3e29a03e8b58a57e786d9f576609d03e9ce98f840f85bab6fadaa03bbf2475a38f6980c1f38b792ce802adee180cc255ccc4d7268406226506a5351a9cc4eea11af5191539685911060ae34f9ebb4042b03718b4a8f0ed87d6dfae9b81d91cdbce4544120e7ebc86a"}, {0xf8, 0x10c, 0x2, "b9af13941de73b6c8a7157ae134338edb22a0dd98ccf7c15183ad1f91b4a126a21ead10082745d1974e92c02b54939758e41c87811f1d2d96489f924d76b3ddad98faa55f818aafecd0f66d3c7dcbd58094711394912542fd7416116b9bb90c1d4a5decccf7b764a886cb8d37b36b77b1ad6001cb8418dddb22948472fc89c3acd493251329e848faa5f14827d74e19bcbedc7d9cffb55b4a8145da82b368ac310214f860784df7eef03998ae579dace317eb84398558d71500df9850336c6a1aa269f92b3f94243db87b7d2d3cb8ded6ff4f45d2925c7ba97f85ae118abfdb23030053e7b"}, {0x28, 0x104, 0x9, "047c30a2cb137b95b3e05cace30b8b6931ca56322848b6"}, {0x48, 0x10b, 0x5, "e20e4e6005287fe16a1eb63470a2a301b2dc707149b3b589ce2787eba8d76ee0f68b3b9231ef9993a63a64343d5ccdc77928"}, {0xa0, 0x1, 0x3, "bb31a248e16030b7c2dd14a173893fe715caf061456ac17ec360d44ce239b2d14b631e8781dd3de46ce046bb67f0b62bb1b500b4a3154fbf797bdc7bf48ba440622c13bbe334868c554006b113d7c668bde4d0a0903de83eaa24af31f4e8db865306050a3813e627f3ae65878fc2a264964f851a85def4169ed54287e3cbeb31ad1e0d537d9b37218738"}, {0xb8, 0x102, 0x80, "430c4bdb35149e42e095fa45009ae5ba5d25017ddc2285b45732d4b80f45748b4e3ac026986fd2a4071c02237651020dc4f6c9e00c1a7eb393cd091e6d5d7345349fca597929aeb909c7e3c234f698376d80d1f7e7af75822bb2ef1a62b9700463b9002bd851b137072119929eedae64f1776ddb70857f7578b3c5a1ea515c767d17f22e6786f8229c831f037d1b6f1ff690fbd9780e1edc55fce3b6850959815f"}], 0x558}, 0x4003010) shmctl$SHM_UNLOCK(r0, 0xc) 22:33:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x3e04000000000000, 0x1ca22705}], 0x0, 0x0) 22:33:14 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r1 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r0, r1, 0x0, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r3 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r2, r3, 0x0, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000000)={0x0, 0xffff, 0x9, 0x56a6, 0x1, 0x200, 0x4, 0x8, {0x0, @in6={{0xa, 0x4e22, 0x5, @mcast1, 0x2}}, 0x8, 0xfffffff8, 0x5e8496b3, 0x2, 0x1}}, &(0x7f00000000c0)=0xb0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={r4, @in6={{0xa, 0x4e20, 0x10000, @ipv4={[], [], @broadcast}, 0x4}}, 0x8, 0x6, 0x2, 0x8001, 0x8}, &(0x7f00000001c0)=0x98) unshare(0x40060100) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:33:14 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x31afe, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:14 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}, 0x25}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 2511.493862][T15880] FAT-fs (loop3): bogus number of reserved sectors [ 2511.524214][T15880] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2511.580864][T15879] overlayfs: missing 'workdir' [ 2511.641091][T15880] FAT-fs (loop3): bogus number of reserved sectors [ 2511.711789][T15880] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:14 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x6, 0x40) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000040)={{0x5000, 0x256c53a8b5eefabe, 0x7, 0x4, 0x0, 0x1f, 0xff, 0x2, 0xfa, 0x5, 0x2, 0x80}, {0x4000, 0x6000, 0x10, 0x4, 0x2, 0x81, 0x7, 0x9f, 0xff, 0xeb, 0x4, 0x5}, {0x3000, 0xd000, 0xa, 0x81, 0x40, 0x7f, 0x7f, 0x47, 0x4, 0x87, 0x10, 0x81}, {0x0, 0x1c5563036257417c, 0xb, 0x3, 0x2, 0x6, 0xad, 0x6, 0x6, 0x2}, {0x2, 0x1000, 0x10, 0x7f, 0x1, 0x8, 0x4, 0x6, 0xff, 0x80, 0x3, 0x2}, {0x2, 0x0, 0xc, 0x82, 0x4, 0x2, 0xe0, 0x5, 0x3, 0x40, 0x1, 0x1f}, {0x5000, 0x1, 0x11, 0x4, 0x1f, 0x1, 0x7, 0x75, 0x7f, 0x0, 0x3, 0x3}, {0xf000, 0x100000, 0x9, 0x7, 0x2, 0x1f, 0x5, 0xf8, 0x2, 0x6, 0x3, 0x63}, {0x1, 0xf000}, {0x0, 0xd000}, 0x40000000, 0x0, 0x2000, 0x2003, 0x6, 0x1000, 0x0, [0xfff, 0xee6a, 0x4, 0xffffffffffff6832]}) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0x4a, &(0x7f0000000280)="cd6a98f4b337871625eef364b73244a889fd0eed3d9c2fcaf5fb7da275d1b42a10723fb981267480adf889888731fe66c28a5d6008ed97defdc20e9ee70aac31519bddcd21b6034f9759"}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000340)="edc43b34a61857aeee92768d188b49e6f4ea7259c040f00b71f3693338f28d70ab9bf10a20801c3d449c8cfd2f2b900833341d7c9b3844557d659d7611fe2e69e17306d4c39be8b907a89ad518797b9f2f47267d8f4a6f1aec03e2fb0961021cef1d8ccb5fd3723bc422e02425973e619aee6815202cf2770b95d569a7feb34fc59da24e351ccb88b44c9797915809cca1118fd1e0ddd0b9c9d393b758f5e9a8f685ce219e61eb23fe29fccd1281c44e5006e60e9973684ac642cc231a38b11e138bfc276be1dfe739dab72ecb858e56dddfcf18be1b8aad189a86771ffc9b987024e761b8ae8dd2117e92f4bca27e6755179ff45f", 0xf5}, {&(0x7f0000000440)="452124790bb4789cd964c70017ad59c83b5171b0091e8d7f98bbd92ab1ef19b07b2ffe724bd0815ba0726d148a3073e4347e4ce7b3c0ddf00ca4cb65d5c7cfbd386d08f73e14d93808339dff938b47a78ed6b73f10406a82b0ba33b694dfd270990cc43672a2c63d96832b9244efb8e6a82fec420eba92ee8aca997366b95a56884209656954b3786454f1a8bab241aefd099e18ad7c8c3b808153029254902f294d5dfb393b546a684ec657096b9c7125e886c8618322d52c2139a08ad34c36a36b8cce20149d842615e1437aa7898d4c9dd705877506802bdac8", 0xdb}], 0x2) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[0x1000, 0xf000, 0x806, 0x1], 0x20, 0xa, 0x4}) getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000180)=0x80000000, &(0x7f00000001c0)=0x4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = dup2(r3, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) unshare(0x8000400) ioctl$KVM_RUN(r4, 0xae80, 0x0) mremap(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) 22:33:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x3f00000000000000, 0x1ca22705}], 0x0, 0x0) 22:33:14 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r4, r5, 0x0, 0x1) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r5, &(0x7f0000000000)="ad16f01f49b429fb2e9f59c79a4ed14ba4326c806cae56bdaa2f964ad5df1ca6b16897ee1b4065fdfd34584e4b070605f7fdfb4ecd11ebce02512dd98017fa17199fccb2d557e8fe5027921de4278889f9cd7c297b7dab31a9b20ca285a0ae05c402302561f52429b8c3d1d2d66ff8e02e2739fe3b50a3c9548a6004121a239ecbe861763db10ddbd79a7bd69d981545ae8516c1b796dfa53b992dd81544e55f7293c205b352608b29e9"}, 0x20) r6 = shmget$private(0x0, 0xf000, 0x0, &(0x7f0000000000/0xf000)=nil) shmat(r6, &(0x7f0000002000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(r0, 0xc) 22:33:14 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}, 0x3b}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:33:15 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x31aff, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2512.116071][T16268] FAT-fs (loop3): bogus number of reserved sectors [ 2512.135154][T16268] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:15 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0xd) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) [ 2512.207951][T16268] FAT-fs (loop3): bogus number of reserved sectors [ 2512.215284][T16248] overlayfs: missing 'workdir' [ 2512.242109][T16268] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x200028d0}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:33:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x3f04000000000000, 0x1ca22705}], 0x0, 0x0) 22:33:15 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = shmget$private(0x0, 0xf000, 0x0, &(0x7f0000000000/0xf000)=nil) shmat(r3, &(0x7f0000002000/0x2000)=nil, 0x4000) shmat(r3, &(0x7f0000ff9000/0x4000)=nil, 0x8000) r4 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x7fffffff) 22:33:15 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}, 0x50}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:33:15 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) mincore(&(0x7f0000ff9000/0x2000)=nil, 0x2000, &(0x7f0000000100)=""/65) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @aes128, 0x4, "737c43282737b420"}) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r4, r5, 0x0, 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r7 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r6, r7, 0x0, 0x1) ioctl$DRM_IOCTL_ADD_CTX(r6, 0xc0086420, &(0x7f0000000200)) ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, &(0x7f00000000c0)) 22:33:15 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x40800, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2512.778443][ T23] audit: type=1326 audit(1574375595.739:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16530 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45d47a code=0x0 [ 2512.838622][T16538] FAT-fs (loop3): bogus number of reserved sectors [ 2512.877808][T16538] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:15 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) ioctl$USBDEVFS_GET_SPEED(r2, 0x551f) [ 2512.963493][T16538] FAT-fs (loop3): bogus number of reserved sectors 22:33:16 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}, 0x5c}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 2513.016873][T16538] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x4000000000000000, 0x1ca22705}], 0x0, 0x0) 22:33:16 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r4 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r3, r4, 0x0, 0x1) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, &(0x7f0000000000)) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:33:16 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0xffffff1f, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2513.250386][T16857] overlayfs: missing 'workdir' 22:33:16 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'\norkdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 2513.480072][T16970] overlayfs: unrecognized mount option " [ 2513.480072][T16970] orkdir=./file1" or missing value [ 2513.493142][T16965] FAT-fs (loop3): bogus number of reserved sectors [ 2513.537727][T16965] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2513.557086][ T23] audit: type=1326 audit(1574375596.519:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16530 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45d47a code=0x0 [ 2513.833566][T16965] FAT-fs (loop3): bogus number of reserved sectors [ 2513.888915][T16965] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x200028d8}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:33:16 executing program 1: unshare(0x2a020300) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet6_int(r3, 0x28, 0x6, 0x0, &(0x7f0000000040)=0x700) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:33:16 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'%orkdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:33:16 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x90980, 0x0) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000040)) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r4, r5, 0x0, 0x1) r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x0, 0x0) setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f00000000c0)=0x80000000, 0x4) shmctl$SHM_UNLOCK(r1, 0xc) 22:33:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x4004000000000000, 0x1ca22705}], 0x0, 0x0) [ 2514.062142][T17287] overlayfs: unrecognized mount option "%orkdir=./file1" or missing value 22:33:17 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb09906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2514.212471][T17435] FAT-fs (loop3): bogus number of reserved sectors 22:33:17 executing program 5: r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000002c0)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x492, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r0, r0, r1}, &(0x7f0000000240)=""/104, 0x68, &(0x7f0000000580)={&(0x7f0000000500)={'md5\x00'}}) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r5 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r5, 0x202002) keyctl$chown(0x4, r5, r3, r4) r6 = add_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000140)="c06a91afb3d7a6eaa6c4d79b2a53e8ba49e4ecd3436cdaaaddbdbba793e552f0d4e18762a3d94ec50a19021b691ee5aafd5308cfddd821f3f57061a779d50054546beae0944ab24dd7174ef1277fd6d8514e5823ebb2118f07c48c6fab9c1082e9f840b92f7451f5143e3d7fb518ba8b629d7b79b01d1e0084710e40b77e4d2eecbe41629d814d06bc1f4b2e87425d72c5eda6fcf2df1147508208e64c23b8b7f6bd3bc84a5809fcaeb8110a77cfe8348fb498f9a84cdf90a1a3ef07998e1e7a0730e4130a24f258f420", 0xca, r5) keyctl$link(0x8, r0, r6) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r8 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r7, r8, 0x0, 0x1) setsockopt$inet6_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x502}, "a4e730b6302bb704", "f099579c87bb38d7b906d244473ca3fc", "c1e8a390", "ede5e10ac6152c1e"}, 0x28) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000380)={0x2, &(0x7f00000000c0)=[{0xfffb, 0x1, 0x2, 0x7fff}, {0xfff, 0x1c, 0xe7, 0x400}]}, 0x10) r12 = dup2(r11, r10) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r9, 0xc) 22:33:17 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={',orkdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 2514.274552][T17435] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:17 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3d906d6b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2514.446359][T17435] FAT-fs (loop3): bogus number of reserved sectors [ 2514.450139][T17609] overlayfs: unrecognized mount option "orkdir=./file1" or missing value 22:33:17 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'\\orkdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 2514.627078][T17811] overlayfs: unrecognized mount option "\orkdir=./file1" or missing value [ 2514.664599][T17435] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:17 executing program 5: r0 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ff8000/0x1000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) dup2(r2, r1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r4 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r3, r4, 0x0, 0x1) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r6 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r5, r6, 0x0, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r8 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x2) sendfile(r7, r8, 0x0, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x4001ff) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) fanotify_init(0x20, 0x800) 22:33:17 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x4040000000000000, 0x1ca22705}], 0x0, 0x0) [ 2514.955649][T17994] FAT-fs (loop3): bogus number of reserved sectors [ 2515.003365][T17994] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:18 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x200028e0}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:33:18 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'w\nrkdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:33:18 executing program 1: unshare(0x2000600) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) ioctl$VIDIOC_S_JPEGCOMP(0xffffffffffffffff, 0x408c563e, &(0x7f0000000000)={0x2, 0x0, 0x1e, "375d6674195d0aac284a1348be7c368f365bfad704d2ee5ffd77e3c785515b81fe6eefb9c92b2de77e017dd93483b61f9e0d49de87f181828daa6829", 0x24, "972b984b135cb72ca9d238fb6b08f26192ce08e476617616574e710b9cfa1f6c66b830fea162ec22b1fd0008bb991272466a713723d2bf20e02fe1f5", 0x28}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r4 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r3, r4, 0x0, 0x1) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0xa0f, 0x4) r5 = shmget$private(0x0, 0xf000, 0x0, &(0x7f0000000000/0xf000)=nil) shmat(r5, &(0x7f0000002000/0x2000)=nil, 0x4000) sysfs$1(0x1, &(0x7f00000000c0)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') shmctl$SHM_UNLOCK(r5, 0xc) 22:33:18 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) write$P9_RLERRORu(r3, &(0x7f0000000000)={0x19, 0x7, 0x1, {{0xc, '([bdevvmnet0'}, 0x1}}, 0x19) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) 22:33:18 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c90256b66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:18 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x4104000000000000, 0x1ca22705}], 0x0, 0x0) 22:33:18 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d5c66732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2515.271649][T18037] overlayfs: unrecognized mount option "w [ 2515.271649][T18037] rkdir=./file1" or missing value 22:33:18 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x3be03, 0x0) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000040)="5504d9f91835238e8ae5532793c6300209385938c24e646f1653344e2023b67f4b863b8aa8c5058ca299b7fd4d2a5b47029349430a74cd873532a91c8feba331d3d15d6e48206d789e30cd037304cb73575b014fddea2963b63f7cc3d9b871ddb59db50c0f23f1ebcfe86ec6d6f4") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) r4 = getpid() r5 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x17c1, 0x111100) perf_event_open(&(0x7f0000000100)={0x7, 0x70, 0x0, 0x20, 0x6, 0xff, 0x0, 0x2, 0x100, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f00000000c0), 0x2}, 0x2080, 0x9, 0x40, 0x9, 0x1ff, 0x20, 0x1ff}, r4, 0xd, r5, 0xa) 22:33:18 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x73, 0x2031}, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000040)={{0x2, 0x4e21, @local}, {0x6, @remote}, 0x4, {0x2, 0x4e21, @loopback}, 'veth0_to_team\x00'}) r5 = shmget$private(0x0, 0xf000, 0x0, &(0x7f0000000000/0xf000)=nil) shmat(r5, &(0x7f0000002000/0x2000)=nil, 0x4000) shmctl$IPC_RMID(r5, 0x0) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) [ 2515.475028][T18278] FAT-fs (loop3): bogus number of reserved sectors [ 2515.527639][T18278] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:18 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'w%rkdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:33:18 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKSECTGET(r3, 0x1267, &(0x7f0000000000)) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) r5 = accept(r4, &(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @initdev}}, &(0x7f00000000c0)=0x80) preadv(r5, &(0x7f0000000640)=[{&(0x7f0000000100)=""/33, 0x21}, {&(0x7f0000000140)=""/69, 0x45}, {&(0x7f00000001c0)=""/82, 0x52}, {&(0x7f0000000240)=""/171, 0xab}, {&(0x7f0000000300)=""/166, 0xa6}, {&(0x7f00000003c0)=""/59, 0x3b}, {&(0x7f0000000400)=""/38, 0x26}, {&(0x7f0000000440)=""/234, 0xea}, {&(0x7f0000000540)=""/163, 0xa3}, {&(0x7f0000000600)=""/48, 0x30}], 0xa, 0x2) [ 2515.639997][T18278] FAT-fs (loop3): bogus number of reserved sectors 22:33:18 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r3 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r2, r3, 0x0, 0x1) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{}, {}]}) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x20c042, 0x0) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x2) [ 2515.747696][T18278] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2515.957231][T18473] overlayfs: unrecognized mount option "w%rkdir=./file1" or missing value 22:33:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x200028e8}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:33:19 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b25732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x4204000000000000, 0x1ca22705}], 0x0, 0x0) 22:33:19 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x87) unshare(0x8000400) mprotect(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0xd) madvise(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2) shmctl$SHM_UNLOCK(r0, 0xc) 22:33:19 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'w,rkdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:33:19 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r1 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r0, r1, 0x0, 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x8, 0x4, 0x3, 0x4, 0x4, 0x21, 0x1, 0xa2, 0x8, 0x43, 0x3, 0x7fffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) [ 2516.452959][T18797] overlayfs: unrecognized mount option "w" or missing value [ 2516.477771][T18794] FAT-fs (loop3): bogus number of reserved sectors 22:33:19 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b2e732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:19 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x10020000) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1c) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r4, r5, 0x0, 0x1) sendto$rxrpc(r4, &(0x7f0000000040)="4ff9a7fe5c226af16f70ccb0d34ef179beef2d04e59cb1fd9ffb8b9addaedcbe8aedb14a3b8ed807ab9d2cf1084769829444625dc72faa2832b085b808e3829854d416c6bb4d6245b8476d22807745d92b1a74f30b6d782637fb09145f050f16c22751b26aae8fff5a9eb873da114be28a6e43aa4c2a07744f7ddb21377d519ccc8c92b5b7266bce78306d12504c7b84c832b91807c73ef22ed36e64899e8a480d7b2858fd7ba8afcb1fe34e927f5c575855a6ae6996c8a5e3213afdf7dfb7ce37bcdc162c3426823795e3fffc838a21c23b0dcd74f120883f6167cb96a3679766e8a30a5b0546f40efe14136b5ebd", 0xef, 0xdec7a9d629e32ba1, &(0x7f0000000140)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0xfffffff8, @ipv4={[], [], @rand_addr=0x2}, 0x7}}, 0x24) open(&(0x7f0000000000)='./file0\x00', 0x652b01, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) [ 2516.507800][T18794] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2516.664351][T18794] FAT-fs (loop3): bogus number of reserved sectors [ 2516.772493][T18794] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:19 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'w\\rkdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:33:19 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r4 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r3, r4, 0x0, 0x1) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000180)=r5) r6 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000280)={r7, @in6={{0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast1}}}, 0x0, 0x8}, &(0x7f0000000200)=0x90) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000440)={r7, @in={{0x2, 0x4e22, @local}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=r7, &(0x7f0000000040)=0x4) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:33:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x4304000000000000, 0x1ca22705}], 0x0, 0x0) 22:33:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x200028f0}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:33:20 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b2f732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:20 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x40000) restart_syscall() shmctl$SHM_UNLOCK(r0, 0xc) [ 2517.266538][T19277] FAT-fs (loop3): bogus number of reserved sectors 22:33:20 executing program 5: shmctl$IPC_RMID(0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) 22:33:20 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) dup2(r1, r0) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x187, 0x5c9002) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r3 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r2, r3, 0x0, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x2) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) [ 2517.322038][T19277] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:20 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'wo\nkdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:33:20 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b5c732e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2517.484409][T19277] FAT-fs (loop3): bogus number of reserved sectors [ 2517.520054][T19277] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:20 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r4 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r3, r4, 0x0, 0x1) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x627, 0x8, 0x4, {0xc, @pix_mp={0x4, 0xf8a, 0x35315241, 0x0, 0x7, [{0x80, 0x1000}, {0x5, 0x101}, {0x3, 0x8}, {0x81, 0x5}, {0xc62e, 0x3ff}, {0x2415, 0xda4}, {0x6, 0xb9}, {0xed8, 0xb03}], 0x1, 0x80, 0x4, 0x2, 0x4}}}) r5 = dup2(r2, r1) r6 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x6, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r6, 0x3, 0x0, 0x0) unshare(0x8000400) ioctl$DRM_IOCTL_FREE_BUFS(r5, 0x4010641a, &(0x7f0000000080)={0x0, &(0x7f0000000200)}) r7 = socket$pptp(0x18, 0x1, 0x2) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f00000000c0)={0x0, 0x3, 0xfffffffffffffffb, 0x81}) shmctl$SHM_UNLOCK(r0, 0xc) ioctl$UI_SET_PROPBIT(r5, 0x4004556e, 0x1a) 22:33:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x4404000000000000, 0x1ca22705}], 0x0, 0x0) [ 2517.691951][T19656] overlayfs: unrecognized mount option "wo [ 2517.691951][T19656] kdir=./file1" or missing value [ 2517.834523][T19800] FAT-fs (loop3): bogus number of reserved sectors [ 2517.851401][T19800] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:20 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66232e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:20 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r1 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r0, r1, 0x0, 0x1) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x8000) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) prctl$PR_GET_KEEPCAPS(0x7) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r3 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r2, r3, 0x0, 0x1) ioctl$TCGETS2(r3, 0x802c542a, &(0x7f0000000040)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) unshare(0x8000400) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) [ 2517.939719][T19800] FAT-fs (loop3): bogus number of reserved sectors [ 2517.951478][T19800] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:21 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'wo%kdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:33:21 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x200028f8}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:33:21 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x3) r3 = dup2(r2, r1) r4 = socket$caif_seqpacket(0x25, 0x5, 0x1) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000180)=r5) r6 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000280)={r7, @in6={{0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast1}}}, 0x0, 0x8}, &(0x7f0000000200)=0x90) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000440)={r7, @in={{0x2, 0x4e22, @local}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000500)={r7, 0x6, 0x7}, &(0x7f0000000540)=0x8) preadv(r4, &(0x7f0000000480)=[{&(0x7f0000000000)=""/251, 0xfb}, {&(0x7f0000000100)=""/241, 0xf1}, {&(0x7f0000000200)=""/114, 0x72}, {&(0x7f0000000280)=""/211, 0xd3}, {&(0x7f0000000380)=""/214, 0xd6}], 0x5, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) 22:33:21 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) getgroups(0x4, &(0x7f0000000180)=[0xee01, 0xee01, 0xffffffffffffffff, 0xee01]) lchown(&(0x7f0000000000)='./file0\x00', r3, r4) 22:33:21 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x4504000000000000, 0x1ca22705}], 0x0, 0x0) [ 2518.246635][T20081] overlayfs: unrecognized mount option "wo%kdir=./file1" or missing value 22:33:21 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'wo,kdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:33:21 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66252e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:21 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x529a80, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) [ 2518.382474][T20134] FAT-fs (loop3): bogus number of reserved sectors [ 2518.408985][T20134] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:21 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) r3 = socket$caif_stream(0x25, 0x1, 0x5) connect$caif(r3, &(0x7f0000000400)=@dgm={0x25, 0x80, 0x1f}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:33:21 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x4604000000000000, 0x1ca22705}], 0x0, 0x0) 22:33:21 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) dup2(r3, r1) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r4, r5, 0x0, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x2a28) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) [ 2518.700312][T20503] overlayfs: unrecognized mount option "wo" or missing value 22:33:21 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'wo\\kdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:33:21 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b662a2e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2518.938514][T20662] overlayfs: unrecognized mount option "wo\kdir=./file1" or missing value [ 2518.969363][T20693] FAT-fs (loop3): bogus number of reserved sectors [ 2518.975937][T20693] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2519.109687][T20693] FAT-fs (loop3): bogus number of reserved sectors [ 2519.138231][T20693] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:22 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002900}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:33:22 executing program 5: r0 = shmget$private(0x0, 0x1000, 0x1, &(0x7f0000ffd000/0x1000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000040)=0x9) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xe27, 0x140) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xc0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, &(0x7f0000000140)={0x3, 0x1}, 0x0, 0x0, &(0x7f0000000180)={0x1, 0x6, 0xfffffd4b, 0x8}, &(0x7f00000001c0)=0x100000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=0x5}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={r4}, 0xc) renameat(r3, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00') unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000180)=r5) r6 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000280)={r7, @in6={{0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast1}}}, 0x0, 0x8}, &(0x7f0000000200)=0x90) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000440)={r7, @in={{0x2, 0x4e22, @local}}}, &(0x7f0000000100)=0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000380)={r7}, 0x8) 22:33:22 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'wor,dir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:33:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x4800000000000000, 0x1ca22705}], 0x0, 0x0) 22:33:22 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r0 = shmget$private(0x0, 0xf000, 0x0, &(0x7f0000000000/0xf000)=nil) shmat(r0, &(0x7f0000002000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:33:22 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b662b2e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2519.520789][T20954] FAT-fs (loop3): bogus number of reserved sectors [ 2519.527525][T20954] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2519.609774][T20954] FAT-fs (loop3): bogus number of reserved sectors 22:33:22 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b662d2e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:22 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffa000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) [ 2519.721073][T20954] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:22 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = request_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='vmnet0keyring/ppp1-*eth0.-wlan1ppp1\x00', 0xfffffffffffffff8) keyctl$restrict_keyring(0x1d, r1, &(0x7f00000000c0)='cifs.spnego\x00', &(0x7f0000000100)='cgroup.-(eth1:*!wlan1vmnet1#*vboxnet0^vboxnet0\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) unshare(0x8000400) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r5, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {0x2, 0x4e24}, 'dummy0\x00'}) mq_open(&(0x7f0000000200)='syz', 0x1, 0x0, &(0x7f0000000240)={0x9edb, 0x800, 0x4, 0xce, 0x800, 0x2, 0x9, 0x5d8}) fsetxattr$security_selinux(r5, &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:ld_so_t:s0\x00', 0x1d, 0x2) shmctl$SHM_UNLOCK(r0, 0xc) 22:33:22 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'wor\\dir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:33:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x4c00000000000000, 0x1ca22705}], 0x0, 0x0) 22:33:23 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ff9000/0x4000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r4, r5, 0x0, 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r8 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r7, r8, 0x0, 0x1) ioctl$TIOCMIWAIT(r8, 0x545c, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r6, r9, 0x0, 0x1) ioctl$CAPI_GET_MANUFACTURER(r9, 0xc0044306, &(0x7f0000000080)=0x4b) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000040)={0x100000, &(0x7f0000000000), 0x0, r6, 0x2}) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) [ 2520.053784][T21287] overlayfs: unrecognized mount option "wor\dir=./file1" or missing value [ 2520.242097][T21535] FAT-fs (loop3): bogus number of reserved sectors [ 2520.272089][T21535] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002908}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:33:23 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'work,ir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:33:23 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b662e2e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:23 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x28040200) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r4, r5, 0x0, 0x1) ioctl$KDADDIO(r4, 0x4b34, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r3, r6, 0x0, 0x1) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000040)={0x0, 0x0, {0x4, 0x3, 0x201e, 0x2, 0x7, 0xc167e9e4cc60cde6, 0x2, 0x5}}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r8 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r7, r8, 0x0, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0xfff, 0x74}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000300)=@assoc_id=r9, 0x4) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000000)={0x0, 0x40, 0x7, 0x0, 0xc, 0x1f, 0xff, 0x5, 0x8, 0x100, 0x7, 0x1}) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r11 = syz_open_procfs(0x0, &(0x7f0000000100)='\x00'/10) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r13 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r12, r13, 0x0, 0x1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r13, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x4, 0x3, 0x7}) sendfile(r10, r11, 0x0, 0x1) r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r15 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r14, r15, 0x0, 0x1) ioctl$TUNSETSTEERINGEBPF(r11, 0x800454e0, &(0x7f00000000c0)=r15) 22:33:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x6000000000000000, 0x1ca22705}], 0x0, 0x0) 22:33:23 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) dup2(r2, r1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r4 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r3, r4, 0x0, 0x1) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r6 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r5, r6, 0x0, 0x1) r7 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x401, 0xb2449332c7a598d0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0xed7) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) [ 2520.775680][T21726] FAT-fs (loop3): bogus number of reserved sectors [ 2520.804995][T21722] overlayfs: unrecognized mount option "work" or missing value 22:33:23 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r4, r5, 0x0, 0x1) clock_gettime(0x5, &(0x7f00000010c0)={0x0, 0x0}) mq_timedreceive(r4, &(0x7f0000000040)=""/4088, 0xff8, 0x5, &(0x7f0000001080)={r6, r7+10000000}) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) [ 2520.857690][T21726] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:23 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66302e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:24 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) [ 2521.011874][T21726] FAT-fs (loop3): bogus number of reserved sectors 22:33:24 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) keyctl$session_to_parent(0x12) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) [ 2521.073813][T21726] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:24 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66582e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:24 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'work\\ir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 2521.446612][T22321] overlayfs: unrecognized mount option "work\ir=./file1" or missing value 22:33:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002910}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:33:24 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0xc021a00) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r4, r5, 0x0, 0x1) io_uring_enter(r4, 0x80, 0x7fff, 0x7e5d97df16c0a812, &(0x7f0000000000)={0x8}, 0x8) shmctl$SHM_UNLOCK(r0, 0xc) 22:33:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x6800000000000000, 0x1ca22705}], 0x0, 0x0) 22:33:24 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:33:24 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b665c2e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:24 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'work`ir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:33:25 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x100043, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) [ 2522.015584][T22498] FAT-fs (loop3): bogus number of reserved sectors 22:33:25 executing program 1: unshare(0x2a000400) socket$pppoe(0x18, 0x1, 0x0) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ff8000/0x2000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=0x0) r5 = syz_open_procfs(r4, &(0x7f0000000180)='sessionid\x00') sendfile(r3, r5, 0x0, 0x1) r6 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1001}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0x8e17adc8760e5af4, 0x70bd27, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000004c}, 0x1000) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) [ 2522.126921][T22498] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:25 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66632e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:25 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workd\nr', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 2522.232859][T22498] FAT-fs (loop3): bogus number of reserved sectors [ 2522.255431][T22498] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x6c00000000000000, 0x1ca22705}], 0x0, 0x0) 22:33:25 executing program 1: unshare(0x0) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) [ 2522.478207][T23026] FAT-fs (loop3): bogus number of reserved sectors [ 2522.494544][T23026] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2522.606787][T23032] overlayfs: unrecognized mount option "workd [ 2522.606787][T23032] r=./file1" or missing value [ 2522.639294][T23026] FAT-fs (loop3): bogus number of reserved sectors [ 2522.659892][T23026] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:25 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002918}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:33:25 executing program 5: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='clear_ref\xff\xfa\x02\x8a\xf0\bfM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\x9b\x8dZj_>\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbf!\x8e\xe3R\x00\x00\x00$q\x10\xf6F\x82\xda\xf6\xa3\x9d\xc1\xb9\xfe.Wpp\xd3#\x9f\x19\x05y\xa9K;.\xad\x03h,\v+\xb4\xb6\f\x9b\x83\x96\xcc\f\x17\xce\x98\xd0\x17\xe0\xd8\xfb\xcf\xf2\x92\x91\x9b\xf7\xad\x03\x00\xbbD\xbd\xdcR\xad5\x88G\xa0t\x99\x0e\xb9Ur7)@\xea\xee\x19\xfaaG\x11#\x1bxL [\x02y\xe5e\x97\x80\xd9\x9ce\x97C\xd98\x91$\xda )\xe3\xe7&`0|\xd6k\a\x03\xd6\x11\"\xd3\xb5\xc5w\x1al\x94\x93\x84\x13\xc8\xb7\xe7\x84Z\\k\xdf\x11\x1e\n\xbe\xaf\xbe\xd91\x86\xe3m\x04\x9e\xd5\xce\x06\xf0\xba\ay\x94A\xe9\x94\xe1|Z!\x8fH\a\xd3P\xb1\x13)\xdd\x03\xad\xdd\xce\n&&\x879\xf6\x84Z\xb0%\xe2\x03\x13L\n\xb5\x97\x90\xd4\xb6\xc0\xfb\x1b3f\xf4\x0f\x87{\x86\x1d-\xd3I\xf0!\xc3') r4 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r3, r4, 0x0, 0x1) ioctl$VIDIOC_G_OUTPUT(r4, 0x8004562e, &(0x7f0000000080)) ioctl$SIOCRSACCEPT(r4, 0x89e3) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r5, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f0000000000)={{0x2f, @multicast1, 0x4e20, 0x4, 'wlc\x00', 0x10, 0xcae8, 0x54}, {@empty, 0x4e22, 0x10000, 0x6c8f, 0x101, 0x80}}, 0x44) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(0xffffffffffffffff, r6, 0x0, 0x1) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0x9, 0x80, 0x401, 0xa6c, 0x11, 0x8, 0x1, 0x0, 0x3, 0x5}) shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ff9000/0x2000)=nil) r7 = shmget$private(0x0, 0xf000, 0x0, &(0x7f0000000000/0xf000)=nil) shmat(r7, &(0x7f0000002000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(r7, 0xc) 22:33:25 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) 22:33:25 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66642e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x7400000000000000, 0x1ca22705}], 0x0, 0x0) 22:33:25 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workd%r', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 2523.038607][T23246] FAT-fs (loop3): bogus number of reserved sectors [ 2523.067507][T23246] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:26 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66692e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2523.082993][T23253] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20000 [ 2523.161708][T23260] overlayfs: unrecognized mount option "workd%r=./file1" or missing value 22:33:26 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) r3 = dup(0xffffffffffffffff) write$P9_RLERRORu(r3, &(0x7f0000000000)={0xe, 0x7, 0x1, {{0x1, '#'}, 0x8001}}, 0xe) 22:33:26 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) recvmsg(r4, &(0x7f00000016c0)={&(0x7f0000000000)=@ipx, 0x80, &(0x7f0000001540)=[{&(0x7f0000000080)=""/195, 0xc3}, {&(0x7f0000000180)=""/7, 0x7}, {&(0x7f00000001c0)=""/153, 0x99}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/98, 0x62}, {&(0x7f0000001300)=""/215, 0xd7}, {&(0x7f0000001400)=""/180, 0xb4}, {&(0x7f00000014c0)=""/108, 0x6c}], 0x8, &(0x7f00000015c0)=""/240, 0xf0}, 0x2000) 22:33:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x7526000000000000, 0x1ca22705}], 0x0, 0x0) 22:33:26 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workd,r', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:33:26 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x16) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) write$binfmt_aout(r3, &(0x7f0000000000)={{0x533f360b6398b484, 0x0, 0xf8, 0xc, 0x1be, 0x2, 0x2d4, 0x1}, "bdf18ce8adbdb9396698b4199cd0c38ea522ff061b510eba5a9c144f29de9ae9988698783434ec967b5912ed1a2d598070ba049669d84e639044f8f21a"}, 0x5d) [ 2523.568935][T23683] FAT-fs (loop3): bogus number of reserved sectors [ 2523.607569][T23683] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2523.703886][T23683] FAT-fs (loop3): bogus number of reserved sectors [ 2523.724857][T23683] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:27 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002920}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:33:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x7a00000000000000, 0x1ca22705}], 0x0, 0x0) 22:33:27 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) r4 = shmget$private(0x0, 0x4000, 0x74e5af37c85aa79a, &(0x7f0000ff7000/0x4000)=nil) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) keyctl$get_persistent(0x16, r6, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r10 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r10, 0x202002) keyctl$chown(0x4, r10, r8, r9) r11 = geteuid() r12 = getgid() r13 = gettid() ptrace$setopts(0x4206, r13, 0x0, 0x0) tkill(r13, 0x3c) ptrace$cont(0x18, r13, 0x0, 0x0) ptrace$setregs(0xd, r13, 0x0, &(0x7f0000000080)) r14 = gettid() ptrace$setopts(0x4206, r14, 0x0, 0x0) tkill(r14, 0x3c) ptrace$cont(0x18, r14, 0x0, 0x0) ptrace$setregs(0xd, r14, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r14, 0x0, 0x0) shmctl$IPC_SET(r4, 0x1, &(0x7f0000000000)={{0x8, r6, r9, r11, r12, 0x4, 0x4}, 0x2, 0x5, 0x4, 0x8, r13, r14, 0x9}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) 22:33:27 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000c00000/0x400000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000180)=r3) r4 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000280)={r5, @in6={{0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast1}}}, 0x0, 0x8}, &(0x7f0000000200)=0x90) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000440)={r5, @in={{0x2, 0x4e22, @local}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={r5, 0x9, 0x2}, &(0x7f0000000040)=0x8) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:33:27 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b666c2e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:27 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workd\\r', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:33:27 executing program 5: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11a, 0x11a, 0x5, [@datasec={0xe, 0xa, 0x0, 0xf, 0x2, [{0x2, 0x7, 0x5}, {0x5, 0x1000, 0xb38a}, {0x3, 0x4, 0x3}, {0x3, 0xe3c, 0x5}, {0x4, 0x101, 0x7}, {0x2, 0x5, 0xff}, {0x3, 0x1, 0x5e20}, {0x1, 0x401, 0x1}, {0x1, 0x30d2, 0x10}, {0x2, 0x2, 0x7fffffff}], "63fa"}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4, 0xfff}}, @int={0xc, 0x0, 0x0, 0x1, 0x0, 0xa, 0x0, 0xa, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x8}}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x34, 0x5c6c9cad5f430a04}, @const={0x6, 0x0, 0x0, 0xa, 0x2}, @var={0x7, 0x0, 0x0, 0xe, 0x5}, @var={0x9, 0x0, 0x0, 0xe, 0x3, 0x1}, @func={0x7, 0x0, 0x0, 0xc, 0x1}, @const={0x3, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x61, 0x0, 0x0]}}, &(0x7f0000000000)=""/25, 0x139, 0x19}, 0x20) sync_file_range(r0, 0x3, 0x4bb5521a, 0x3378f330de87ab8a) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) dup2(r3, r2) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r4, r5, 0x0, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x200000000400202) unshare(0x8000400) shmctl$SHM_UNLOCK(r1, 0xc) [ 2524.332221][T24016] FAT-fs (loop3): bogus number of reserved sectors [ 2524.448323][T24016] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:27 executing program 5: r0 = shmget$private(0x0, 0x2000, 0x940afc86879f49e9, &(0x7f0000ff7000/0x2000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='\x0f\xe4ev/admmidi#\x00', 0x80000000, 0x103600) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x1, r3, 0x1c, 0x0, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0xa0) r4 = socket$netlink(0x10, 0x3, 0x15) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r5, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) r6 = dup2(r1, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) unshare(0x8000400) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r8 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r7, r8, 0x0, 0x1) ioctl$RNDZAPENTCNT(r7, 0x5204, &(0x7f0000000100)=0x1) shmctl$SHM_UNLOCK(r0, 0xc) r9 = shmat(r0, &(0x7f0000ff8000/0x3000)=nil, 0x4000) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x321820, 0x0) shmdt(r9) 22:33:27 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b666f2e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:27 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdi\n', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 2524.645998][T24016] FAT-fs (loop3): bogus number of reserved sectors 22:33:27 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) r4 = request_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0x0) keyctl$revoke(0x3, r4) shmctl$SHM_UNLOCK(r0, 0xc) [ 2524.725228][T24016] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2524.774915][T24435] overlayfs: unrecognized mount option "workdi [ 2524.774915][T24435] =./file1" or missing value 22:33:27 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x10000, 0x0) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) r3 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:33:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002928}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:33:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x7b26000000000000, 0x1ca22705}], 0x0, 0x0) 22:33:28 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdi%', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:33:28 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x18000, 0x0) faccessat(r4, &(0x7f0000000040)='./file0\x00', 0x40, 0x1800) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r6 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r5, r6, 0x0, 0x1) ioctl$SIOCGIFMTU(r6, 0x8921, &(0x7f0000000080)) shmctl$SHM_UNLOCK(r0, 0xc) 22:33:28 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66702e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:28 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r3 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r2, r3, 0x0, 0x1) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) r4 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) [ 2525.429671][T24765] FAT-fs (loop3): bogus number of reserved sectors [ 2525.444605][T24766] overlayfs: unrecognized mount option "workdi%=./file1" or missing value [ 2525.459602][T24765] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:28 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66752e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:28 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ff8000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x101, 0x507202) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) [ 2525.644846][T24765] FAT-fs (loop3): bogus number of reserved sectors 22:33:28 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) recvmsg(r4, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/211, 0xd3}, {&(0x7f0000000180)=""/82, 0x52}, {&(0x7f0000000200)=""/116, 0x74}, {&(0x7f0000000280)=""/213, 0xd5}], 0x4, &(0x7f00000003c0)=""/245, 0xf5}, 0x2000) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) [ 2525.704304][T24765] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:28 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdi,', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:33:28 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffa000/0x4000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:33:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x8cffffff00000000, 0x1ca22705}], 0x0, 0x0) [ 2526.100946][T25314] FAT-fs (loop3): bogus number of reserved sectors [ 2526.176954][T25384] overlayfs: unrecognized mount option "workdi" or missing value [ 2526.199066][T25314] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002930}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:33:29 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) accept(r3, &(0x7f0000000000)=@x25={0x9, @remote}, &(0x7f0000000080)=0x80) r4 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) 22:33:29 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66782e66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:29 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x8, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x101, 0x7b, 0x3, 0x2}, {0x800, 0x93, 0x3, 0x3}, {0x8daa, 0x1, 0x3, 0xffffffff}, {0x4f, 0x7, 0x1, 0x7}, {0x7fff, 0x7e, 0x4, 0x80}]}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x8) unshare(0x8000400) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r4 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r3, r4, 0x0, 0x1) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r4, 0x800442d3, &(0x7f0000000080)={0xd3e, 0xe231, 0x1a95, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'veth1_to_team\x00'}) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x7, &(0x7f0000ffc000/0x4000)=nil) [ 2526.356731][T25314] FAT-fs (loop3): bogus number of reserved sectors [ 2526.457697][T25314] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:29 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdi\\', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:33:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0xf5ffffff00000000, 0x1ca22705}], 0x0, 0x0) 22:33:29 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) keyctl$get_persistent(0x16, r4, 0x0) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r8 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r8, 0x202002) keyctl$chown(0x4, r8, r6, r7) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r12 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r12, 0x202002) keyctl$chown(0x4, r12, r10, r11) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r16 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r16, 0x202002) keyctl$chown(0x4, r16, r14, r15) getgroups(0x6, &(0x7f0000000240)=[r7, r11, 0xffffffffffffffff, 0xee01, r15, 0xffffffffffffffff]) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000280)={0xa0, 0x2f, 0x6, {{0x4, 0x0, 0x8, 0x0, 0x1f, 0x7, {0x6, 0x3, 0x4, 0x2, 0x0, 0x1, 0x1, 0x1000, 0x10001, 0x4, 0x1, r4, r17, 0x3a8, 0x3f}}, {0x0, 0x1a}}}, 0xa0) r18 = socket$bt_hidp(0x1f, 0x3, 0x6) r19 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r19, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) ioctl$sock_bt_hidp_HIDPCONNADD(r18, 0x400448c8, &(0x7f0000000180)={r19, r2, 0x6, 0xa3, &(0x7f00000000c0)="dd45b9a723ed9a4520940d4f2e08926d476aaa502895ac9c1a0976b14aab5aaf6609306be1dbe1784e6665828cb1639c857bf17b057729c203363d5cf948441120e7eeeb28859f1958736e05eb5e3098eeb630abe49fc58c4cda9828c427057aba467e1aa3d3d8ac5050c51e60b8055ea00fd899f7a28f406ddd8485af4fe421ebbf1ed094814ac5e78ed3c3150b791c6d518ec874daefc9bbbb945e55cdc04117742d", 0x81, 0x0, 0x800, 0xfe01, 0x7, 0x7, 0x400, 'syz0\x00'}) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000000000)=""/82) ioctl$USBDEVFS_DISCARDURB(r2, 0x550b, &(0x7f0000000080)=0x3) 22:33:29 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732f66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:29 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) fsetxattr$security_ima(r3, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000040)=@v1={0x2, "98fa3931"}, 0x5, 0x94d47c66133890cf) r4 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) [ 2526.664277][T25721] overlayfs: unrecognized mount option "workdi\=./file1" or missing value 22:33:29 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x2c, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 2526.823586][T25829] FAT-fs (loop3): bogus number of reserved sectors [ 2526.849987][T25829] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2527.008184][T25829] FAT-fs (loop3): bogus number of reserved sectors [ 2527.099962][T25829] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:30 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) 22:33:30 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) 22:33:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002938}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:33:30 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66733d66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:30 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x50, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:33:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0xf6ffffff00000000, 0x1ca22705}], 0x0, 0x0) 22:33:30 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r7 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r6, r7, 0x0, 0x1) ioctl$TIOCMSET(r7, 0x5418, &(0x7f00000002c0)=0x1e399369) setuid(r5) keyctl$get_persistent(0x16, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x6046, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',loose,access=any,access=', @ANYRESDEC=r5, @ANYBLOB=',noextenD,access=', @ANYRESDEC, @ANYBLOB=',fsname=dummy0\x00,\x00']) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r8, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) ioctl$FS_IOC_SETFSLABEL(r8, 0x41009432, &(0x7f0000000000)="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") unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:33:30 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000000)=0x1) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r4, r5, 0x0, 0x1) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r5, 0x4020565b, &(0x7f0000000140)={0x4, 0x5, 0x2}) shmctl$SHM_UNLOCK(r0, 0xc) connect(r3, &(0x7f0000000040)=@pppoe={0x18, 0x0, {0x1, @local, 'syz_tun\x00'}}, 0x80) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r7 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r6, r7, 0x0, 0x1) getsockopt$SO_J1939_PROMISC(r7, 0x6b, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) [ 2527.621131][T26365] FAT-fs (loop3): bogus number of reserved sectors [ 2527.641672][T26361] overlayfs: unrecognized mount option "workdirP./file1" or missing value [ 2527.667495][T26365] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:30 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x5c, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:33:30 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66735c66617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0xf9fdffff00000000, 0x1ca22705}], 0x0, 0x0) 22:33:30 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$caif_stream(0x25, 0x1, 0x3) accept4(r4, 0x0, &(0x7f0000000000), 0x180400) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) 22:33:31 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}, 0xa}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 2528.155893][T26782] FAT-fs (loop3): bogus number of reserved sectors [ 2528.167510][T26782] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:31 executing program 5: r0 = shmget$private(0x0, 0x1000, 0x80, &(0x7f0000ffc000/0x1000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) ioctl$KDENABIO(r4, 0x4b36) tkill(r5, 0x3c) ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r5, 0x0, 0x0) r6 = getpid() r7 = syz_open_procfs(r6, &(0x7f00000005c0)='attr/fscreate\x00\'\\\x1d\f\xa5:Wfn\xb1\xa8\xcb\x00\x91\x8bM\x94\xe8\x9bR\xed\x81\xfb\x13\xdc\x86\xd9\xdb\xaa~\t\x83\xd9\xa4\xa3\xc3\x98\xce\xbcb\xd6\xd5=Y1\xaf\xdd:\xce\x8d\xe5\xa1l\xfeh\x122i\xc3\xea\xaep:k\x03\xfb\xf6F\f\xee\xb6\xd7\xef?R\x9b\"\x88#\x80\x82\x17\xfd\'\xf5o\xaf\xac\xf1\xaet\xa9\x9c\x90!\xa5\xda\xa5\xb4\xdb4\x95\xbc\x85\xcf\x85\xf7\x8f\x904x\a\xe9XK(\xfe|a\xb8\xf4\x9c}\x85\xef\x1bk\x8b%/\xc2\xb2\xac\x05\xf4\xe8t\xb1\xa7A\xa0\x82\xa4D\xc9\xd5\x98\x130\xdb\x97\xf8a\x00\x93\xdf5\xf7\"\xea\fIIQP\r\xcc\b\x95;>\x82&\xea\xce\xffL\xcb\xfd\x80\xab_^\xd9`\x11?\x8a\xccel\xc7z\xa0\x86L\xf0\x94\x80H\xc7\re\xfe\xc5e)\xae\xf9L\xa7T\xc4\xd7\xf4\xf2\f\xc6F\xe6\"\xc7\x1ag\xf6K9D\x13\x85X\xea\x01\xf4-\xce\x97\xca\x1e\x976_\xfbwr\x85\n\x7f\t\x85\x0fB\x1e\x8e\xe9\f\xa9\xf6\xaa\xe8\xfd\xf2\xddJ\x05\x8e\x825\xb5\x02m\x98\x9d#*lV\xb6`j\xc1\x8e\xe2\xf8\xf4\'!\r\xa0\xcc\xf7\x1aB\xc1\xb8+\xbbHw6\r?x\xf9X\xda\x83\xa8\xc6\xb50\v&\xec,\xea{t\xd5;\xdc)\\\x0e I\x1a.\xf6\xc9\x85\f\x85\x19\xe0\x97\x00dc\xaa6\xd0\x88\v\xd7\xa6z\x16\f\xfc\xb2?f\x86a\xb0}7\xe6\x8eR/\x12R\xe1?\xc7\x97\xa2\xc5\x06\xcf\x1075\xed-\xc9\a\x8f\x92\xe4\x1f\xf8\x95]\xfa\x87=\a\xf3\x83\xc9\xc97\xce\xe9\'\x98\x8c\x15E}i]0:\x87\xa8\x955h\x19\\l\x8a?\xb7\x7f\xda\x1e\x1eB\xa0^\x96\x0f\x86bQ!\xa4y\x83\x80\xc0\x84\xa8\xd5)\x1a\xf4a\xc7D\xa3\xea$\x0e=\xf62\x04z\xb2\x8cO\x9d4\xbc\xcbED\r\xa5mU\xbe+$)\xbc\xb9\x18\xac\xbatW\xde\x83\xc8.\x81\xb2?\xa14=\r\xbfQ\xea\xc2\xdf\xb8\xb1\xce\xb7\x89\xf1\xa4\xcd.\xa2Z\t)=\xd2\xd4bI:tsu8\xdc') ioctl$TCGETX(r3, 0x5432, &(0x7f0000000000)) sendfile(r4, r7, 0x0, 0x1) ioctl$PPPOEIOCDFWD(r7, 0xb101, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r7, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000100)=0x68) shmctl$SHM_UNLOCK(r0, 0xc) [ 2528.251014][T26896] overlayfs: option "workdir=./file1 [ 2528.251014][T26896] upperdir=./file0" is useless in a non-upper mount, ignore [ 2528.264463][T26896] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2528.286385][T26782] FAT-fs (loop3): bogus number of reserved sectors [ 2528.408652][T26782] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002940}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:33:31 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e25617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:31 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x25}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:33:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0xff00000000000000, 0x1ca22705}], 0x0, 0x0) 22:33:31 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r2 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r1, r2, 0x0, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000002e00c37691568d8f6b010000000000004d3f5ef1", @ANYRES32=r6, @ANYBLOB="00000000000000001800120008000100767469000c00020008000100", @ANYRES32=r6], 0x38}}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_ADDRESS={0x8, 0x3}]}, 0x28}}, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000000c0)={r6, 0x3f, 0x3, 0x0, 0x5, 0xc, 0x5}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r8, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r9, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r10, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {}, 0x0, {0x2, 0x0, @empty}, 'dummy0\x00'}) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r12 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r11, r12, 0x0, 0x1) getpeername$packet(r11, &(0x7f0000001e00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001e40)=0x14) connect$can_j1939(r7, &(0x7f0000001e80)={0x1d, r13, 0x2, {0x1, 0xf0, 0x3}, 0x2}, 0x18) r14 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) ioctl$sock_inet_sctp_SIOCINQ(r14, 0x541b, &(0x7f0000000040)) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r11, 0xc0385720, &(0x7f0000000000)={0x0, {0x0, 0x1c9c380}, 0x5, 0x1}) r15 = dup2(r9, r10) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) [ 2528.974307][T27013] FAT-fs (loop3): bogus number of reserved sectors [ 2528.975742][T27015] overlayfs: option "workdir=./file1%upperdir=./file0" is useless in a non-upper mount, ignore [ 2529.033091][T27013] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2529.062906][T27015] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 22:33:32 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e2e617400020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2529.189332][T27013] FAT-fs (loop3): bogus number of reserved sectors [ 2529.195903][T27013] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:32 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e2f617400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:32 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='sessionid\x00') ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000040)={{0x25, 0x1}, 'port0\x00', 0x0, 0x52, 0x3ff, 0x8001, 0x9, 0x8, 0x8, 0x0, 0x1, 0xd8}) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) unshare(0x8000400) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r6 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r5, r6, 0x0, 0x1) setsockopt$inet6_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000000100)=@ccm_128={{0x303}, "ddcf6e18a390e412", "47f405ef03b3380eeaf11441247510bc", "443bdbde", "ec315a73e290485f"}, 0x28) shmctl$SHM_UNLOCK(r1, 0xc) 22:33:32 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x3b}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:33:32 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0xff07040000000000, 0x1ca22705}], 0x0, 0x0) [ 2529.738763][T27343] overlayfs: option "workdir=./file1;upperdir=./file0" is useless in a non-upper mount, ignore 22:33:32 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e5c617400020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2529.847737][T27345] FAT-fs (loop3): bogus number of reserved sectors [ 2529.857544][T27343] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2529.889691][T27345] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:33 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet(0x2, 0x2, 0x40) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) getsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r7 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r6, r7, 0x0, 0x1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x8, 0x6}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000380)={r8, 0x20, &(0x7f0000000300)=[@in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e22, @empty}]}, &(0x7f00000003c0)=0x10) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r5, r9, 0x0, 0x1) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r10, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @rand_addr=0x6}, {0x0, @remote}, 0x10, {}, 'dummy0\x00'}) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r11, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000000140)={0x0, r11, 0x7c5, 0x7fffffff, 0x0, 0x120000}) ioctl$VIDIOC_G_JPEGCOMP(r9, 0x808c563d, &(0x7f0000000080)) setsockopt$RDS_GET_MR_FOR_DEST(r7, 0x114, 0x7, &(0x7f0000000440)={@isdn={0x22, 0x9, 0x0, 0x6, 0xff}, {0xffffffffffffffff}, &(0x7f0000000400), 0x28}, 0xa0) r12 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(0xffffffffffffffff, r12, 0x0, 0x1) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000240)={0x0, 0x2, 0x0, [], &(0x7f0000000200)=0x20}) 22:33:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002948}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:33:33 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e665c7400020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:33 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0xff0f000000000000, 0x1ca22705}], 0x0, 0x0) 22:33:33 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x50}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:33:33 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000000)=0x1, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) 22:33:33 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ff6000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x46, 0x10000) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=0x0, &(0x7f0000000080)=0x4) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r4, 0x8000, 0x80000000}, &(0x7f0000000100)=0xc) r5 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000002680)='/dev/null\x00', 0x480000, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r6, 0x6, 0x2, &(0x7f0000000180), &(0x7f0000002700)=0x6) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) [ 2530.544346][T27571] FAT-fs (loop3): bogus number of reserved sectors [ 2530.620878][T27571] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:33 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66612500020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2530.757266][T27571] FAT-fs (loop3): bogus number of reserved sectors 22:33:33 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66612f00020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2530.800204][T27571] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:33 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:33:33 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r4, r5, 0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f0000000000)={{0x1, 0x1, 0x7, 0x0, 0x50}, 0x6, 0xffff, 'id0\x00', 'timer1\x00', 0x0, 0x8, 0xf4, 0x5, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x7}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f00000001c0)={r7, 0x5}, &(0x7f0000000200)=0x8) shmctl$SHM_UNLOCK(r0, 0xc) 22:33:33 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0xfffdffff00000000, 0x1ca22705}], 0x0, 0x0) [ 2531.087832][T27903] overlayfs: option "workdir=./file1\upperdir=./file0" is useless in a non-upper mount, ignore 22:33:34 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66615c00020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2531.133831][T27903] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2531.235477][T27976] FAT-fs (loop3): bogus number of reserved sectors [ 2531.255181][T27976] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2531.353970][T27976] FAT-fs (loop3): bogus number of reserved sectors [ 2531.428872][T27976] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002950}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:33:34 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'\npperdir', 0x3d, './file0'}}]}) 22:33:34 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0xe) r3 = socket$inet(0x2, 0xa, 0x81) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000000c0)={0x0, 0x2a, "69502d73911329e0ade74b2e945b9bd4cfd5c3018372d0457ec5c2ec58ccc3d2864b703671342c447bc3"}, &(0x7f0000000100)=0x32) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000140)={r4, 0x6e, "89e8c3c18d827a5f7b73eab2fc2f3e1f08dcd778f83414ef288b00fd6a3379224ad3b329d65b3d3de81a23226592ea7256c778ea7ed2a80ba797adbcd8b27de1103b11d282e4f592298d70e00054908408ab7a91b5384d91d7bdc07fc6f939ef3962f329a5774267373516062d8f"}, &(0x7f00000001c0)=0x76) r5 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) r6 = semget$private(0x0, 0x6, 0x0) semctl$SEM_STAT(r6, 0x1, 0x12, &(0x7f0000000040)=""/75) ioctl$DRM_IOCTL_MODESET_CTL(r5, 0x40086408, &(0x7f0000000000)={0x9, 0xcf76}) 22:33:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0xffffff7f00000000, 0x1ca22705}], 0x0, 0x0) 22:33:34 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617404000401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2531.809213][T28130] FAT-fs (loop3): bogus number of reserved sectors [ 2531.838480][T28130] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2531.901867][T28127] FAT-fs (loop0): bogus logical sector size 4 [ 2531.956909][T28127] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2531.973596][T28176] overlayfs: unrecognized mount option " [ 2531.973596][T28176] pperdir=./file0" or missing value 22:33:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0xffffffff00000000, 0x1ca22705}], 0x0, 0x0) 22:33:35 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x3) r3 = dup2(r2, r1) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r6 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r5, r6, 0x0, 0x1) write$P9_RWSTAT(r5, &(0x7f00000000c0)={0x7, 0x7f, 0x2}, 0x7) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r4, r7, 0x0, 0x1) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r7, 0x800443d2, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x2) shmctl$SHM_UNLOCK(r0, 0xc) r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0) r9 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000180)=r9) r10 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000280)={r11, @in6={{0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast1}}}, 0x0, 0x8}, &(0x7f0000000200)=0x90) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x6, &(0x7f0000000440)={r11, @in={{0x2, 0x4e22, @local}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f0000000180)={r11, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x8}}}}, &(0x7f0000000240)=0x84) [ 2532.181904][T28127] FAT-fs (loop0): bogus logical sector size 4 [ 2532.230031][T28127] FAT-fs (loop0): Can't find a valid FAT filesystem 22:33:35 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'#pperdir', 0x3d, './file0'}}]}) 22:33:35 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_FPEMU(0xa, 0x3) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) [ 2532.287482][T28331] FAT-fs (loop3): bogus number of reserved sectors [ 2532.294088][T28331] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:35 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617402020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2532.540390][T28331] FAT-fs (loop3): bogus number of reserved sectors [ 2532.551433][T28331] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:35 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='autogroup\x00I4\xc8>\xdc\xf3\xc9\xda\x88\xf9\xbb\xc4\v\xb6\x04\x00~H\xe5\x8ba\x12\xb6OX#\x89\xe37m') r5 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r4, r5, 0x0, 0x1) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x4000, 0x0) ioctl$PPPIOCSACTIVE(r6, 0x40107446, &(0x7f0000000040)={0xcd}) [ 2532.654176][T28545] FAT-fs (loop0): bogus logical sector size 514 22:33:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0xffffffffffffffff, 0x1ca22705}], 0x0, 0x0) [ 2532.727661][T28545] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2532.899121][T28545] FAT-fs (loop0): bogus logical sector size 514 [ 2532.919271][T28772] FAT-fs (loop3): bogus number of reserved sectors [ 2532.926002][T28545] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2532.933354][T28772] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2533.057581][T28772] FAT-fs (loop3): bogus number of reserved sectors [ 2533.067403][T28772] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002958}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:33:36 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'%pperdir', 0x3d, './file0'}}]}) 22:33:36 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r6 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') r7 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r7, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) pread64(r7, &(0x7f00000002c0)=""/95, 0x5f, 0x5a) sendfile(r5, r6, 0x0, 0x1) ioctl$KVM_S390_UCAS_MAP(r6, 0x4018ae50, &(0x7f0000000000)={0x1, 0x6, 0x8001}) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r9 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r8, r9, 0x0, 0x1) ioctl$DRM_IOCTL_MAP_BUFS(r8, 0xc0186419, &(0x7f0000000280)={0x1, &(0x7f0000000200)=""/79, &(0x7f0000000140)=[{0x9, 0x2, 0x8, &(0x7f00000000c0)=""/2}]}) unshare(0x8000400) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x1) shmctl$SHM_UNLOCK(r0, 0xc) 22:33:36 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617403020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22702}], 0x0, 0x0) [ 2533.278687][T28792] FAT-fs (loop0): bogus logical sector size 515 [ 2533.313599][T28791] FAT-fs (loop3): bogus logical sector size 18302 [ 2533.325051][T28788] overlayfs: unrecognized mount option "%pperdir=./file0" or missing value [ 2533.335375][T28792] FAT-fs (loop0): Can't find a valid FAT filesystem 22:33:36 executing program 5: r0 = shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ff8000/0x2000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8b36, &(0x7f0000000000)='wlan0\x00\rM!\x1e\xd4;2e\x9a\x16\xbf\xd8\x16\xe4C\xa8\xf0\x99\xd6\x06v\xc1B9\xa8\xfe\x00\xee\xa1\xc0\xf7\x04Pd\xcc\xab\xd6\xfe\xe8[\x84\xeb\xff\xff:\xa1\x82\aq6\x9f\x84]') r5 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) socket$l2tp(0x18, 0x1, 0x1) unshare(0x8000400) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000040)) shmctl$SHM_UNLOCK(r0, 0xc) [ 2533.386748][T28791] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2533.527370][T28792] FAT-fs (loop0): bogus logical sector size 515 [ 2533.533670][T28792] FAT-fs (loop0): Can't find a valid FAT filesystem 22:33:36 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'*pperdir', 0x3d, './file0'}}]}) [ 2533.579643][T28791] FAT-fs (loop3): bogus logical sector size 18302 22:33:36 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r6 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r5, r6, 0x0, 0x1) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r8) keyctl$get_persistent(0x16, r8, 0x0) shmget(0x2, 0x2000, 0x800, &(0x7f0000ff9000/0x2000)=nil) r9 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x400, &(0x7f0000000200)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r8}, 0x2c, {'group_id', 0x3d, r9}, 0x2c, {[{@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}], [{@euid_gt={'euid>', r10}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@smackfshat={'smackfshat'}}, {@obj_type={'obj_type', 0x3d, 'dummy0\x00'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}}) [ 2533.625462][T28791] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:36 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r2 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r1, r2, 0x0, 0x1) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) 22:33:36 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617404020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22703}], 0x0, 0x0) [ 2533.875870][T29220] overlayfs: unrecognized mount option "*pperdir=./file0" or missing value 22:33:37 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'+pperdir', 0x3d, './file0'}}]}) [ 2534.067526][T29432] FAT-fs (loop0): bogus logical sector size 516 [ 2534.073982][T29432] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2534.112938][T29430] FAT-fs (loop3): bogus logical sector size 18302 [ 2534.173617][T29432] FAT-fs (loop0): bogus logical sector size 516 [ 2534.224606][T29430] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2534.252978][T29432] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2534.416893][T29430] FAT-fs (loop3): bogus logical sector size 18302 [ 2534.459629][T29430] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002960}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:33:37 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22704}], 0x0, 0x0) 22:33:37 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617405020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:37 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={',pperdir', 0x3d, './file0'}}]}) 22:33:37 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r4 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r3, r4, 0x0, 0x1) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000140)=""/180, 0x0, 0x800, 0x101}, 0x18) r5 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) unshare(0x8000400) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r7 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400, 0x0) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000180)=r8) r9 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000280)={r10, @in6={{0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast1}}}, 0x0, 0x8}, &(0x7f0000000200)=0x90) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f0000000440)={r10, @in={{0x2, 0x4e22, @local}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={r10, 0x4}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000280)={0x374, 0x1, 0x200, 0x6, 0x3818, 0x2, 0x3, 0x7bb17204, r11}, 0x20) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r13 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r12, r13, 0x0, 0x1) ioctl$EVIOCGABS2F(r12, 0x8018456f, &(0x7f0000000380)=""/4096) r14 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r6, r14, 0x0, 0x1) ioctl$IMGETDEVINFO(r14, 0x80044944, &(0x7f0000000000)={0x80000001}) shmctl$SHM_UNLOCK(r0, 0xc) [ 2534.750006][T29553] FAT-fs (loop3): bogus logical sector size 18302 [ 2534.777630][T29553] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2534.859002][T29561] FAT-fs (loop0): bogus logical sector size 517 [ 2534.867573][T29561] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2534.890150][T29553] FAT-fs (loop3): bogus logical sector size 18302 [ 2534.896624][T29553] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:37 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22706}], 0x0, 0x0) 22:33:38 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617406020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:38 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'-pperdir', 0x3d, './file0'}}]}) [ 2535.212791][T29777] FAT-fs (loop3): bogus logical sector size 18302 [ 2535.230279][T29778] FAT-fs (loop0): bogus logical sector size 518 22:33:38 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) alarm(0x1ff) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xb, [@var={0x1, 0x0, 0x0, 0xe, 0x4, 0x1}, @func={0x6, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0xf2, 0x0, 0x61, 0x61, 0x30, 0x0, 0x30, 0x5f, 0x2f]}}, &(0x7f00000000c0)=""/94, 0x3f, 0x5e}, 0x20) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000040)={0x5, 0x3, 0x4, {0xffff, 0xf742, 0xb4, 0x101}}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) getgid() socket$can_bcm(0x1d, 0x2, 0x2) shmctl$SHM_UNLOCK(r0, 0xc) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='bond_slave_1\x00', 0x10) [ 2535.256967][T29780] overlayfs: unrecognized mount option "-pperdir=./file0" or missing value [ 2535.277830][T29777] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2535.299909][T29778] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2535.366690][T29777] FAT-fs (loop3): bogus logical sector size 18302 [ 2535.397128][T29777] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:38 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617407020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:38 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22707}], 0x0, 0x0) [ 2535.547355][T29943] FAT-fs (loop0): bogus logical sector size 519 [ 2535.553669][T29943] FAT-fs (loop0): Can't find a valid FAT filesystem 22:33:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002968}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:33:38 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'.pperdir', 0x3d, './file0'}}]}) [ 2535.805702][T29943] FAT-fs (loop0): bogus logical sector size 519 [ 2535.818655][T30002] FAT-fs (loop3): bogus logical sector size 18302 [ 2535.849664][T30002] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:38 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) prctl$PR_GET_CHILD_SUBREAPER(0x25) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) dup2(r2, r1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r4 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r3, r4, 0x0, 0x1) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r6 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r5, r6, 0x0, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r8 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r10 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r9, r10, 0x0, 0x1) ioctl$UDMABUF_CREATE_LIST(r9, 0x40087543, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000010000001baf73a42a1e842a5e3a179dbf9f80a03d12f5eb53355ac96068e555e9bd547c642b1cddbf64bcb55fab9ffa3d3536bd6c1d053b0000000000", @ANYRES32=r5, @ANYBLOB="0000000000f0ffff000000000000010000000800"]) sendfile(r7, r8, 0x0, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x4000000000000008) unshare(0x8000400) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r12 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') r13 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') r14 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) r15 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendfile(0xffffffffffffffff, r15, 0x0, 0x200000400) ioctl$KDSKBMETA(r13, 0x4b63, &(0x7f0000000040)=0xcbf3) sendfile(r11, r12, 0x0, 0x1) setsockopt$TIPC_GROUP_LEAVE(r12, 0x10f, 0x88) shmctl$SHM_UNLOCK(r0, 0xc) [ 2535.903038][T29943] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2536.003032][T30011] overlayfs: unrecognized mount option ".pperdir=./file0" or missing value 22:33:39 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617408020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2536.054990][T30002] FAT-fs (loop3): bogus logical sector size 18302 [ 2536.081353][T30002] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:39 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22708}], 0x0, 0x0) [ 2536.293778][T30161] FAT-fs (loop0): bogus logical sector size 520 [ 2536.326602][T30161] FAT-fs (loop0): Can't find a valid FAT filesystem 22:33:39 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'0pperdir', 0x3d, './file0'}}]}) [ 2536.338051][T30213] FAT-fs (loop3): bogus logical sector size 18302 [ 2536.356463][T30213] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:39 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ff7000/0x3000)=nil) r1 = add_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000000c0)={r1, 0x45, 0xb3}, &(0x7f0000000100)={'enc=', 'pkcs1', ' hash=', {'sha256-generic\x00'}}, &(0x7f0000000180)="26734a84f5391b9c6c3d0f9211f8f939fd9980cde25fb4edfc10429445b6c289a1692bca6dbe5006e76f7f94cf3962dcb0647cab1b6e11be21a3a16db9b0f3534975bfe2bd", &(0x7f0000000200)=""/179) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x8000000000000000, 0x0) mmap$binder(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) [ 2536.428220][T30161] FAT-fs (loop0): bogus logical sector size 520 [ 2536.466687][T30161] FAT-fs (loop0): Can't find a valid FAT filesystem 22:33:39 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22709}], 0x0, 0x0) 22:33:39 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617409020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2536.626835][T30238] overlayfs: unrecognized mount option "0pperdir=./file0" or missing value 22:33:39 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) [ 2536.711344][T30271] FAT-fs (loop3): bogus logical sector size 18302 [ 2536.731822][T30271] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:39 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0xa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/\x8cev/cache\xe6iles\x00', 0x0, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7, 0x4d, 0x1}, 0x7) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0xd5d68ade2e2af0cf, &(0x7f0000000040)=""/11, &(0x7f0000000080)=0xb) unshare(0x8000400) openat$cgroup_ro(r2, &(0x7f0000000140)='cgroup.controllers\x00', 0x0, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) 22:33:39 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca2270a}], 0x0, 0x0) [ 2536.838686][T30382] FAT-fs (loop0): bogus logical sector size 521 [ 2536.870956][T30382] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2537.021223][T30382] FAT-fs (loop0): bogus logical sector size 521 [ 2537.029166][T30382] FAT-fs (loop0): Can't find a valid FAT filesystem 22:33:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002970}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:33:40 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'Xpperdir', 0x3d, './file0'}}]}) 22:33:40 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e6661740a020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2537.202104][T30561] FAT-fs (loop3): bogus logical sector size 18302 [ 2537.234749][T30637] overlayfs: unrecognized mount option "Xpperdir=./file0" or missing value [ 2537.301915][T30561] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:40 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0xb) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r3 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r2, r3, 0x0, 0x1) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f0000000c40)=0x32) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r3, 0x40045730, &(0x7f0000000000)=0x7ff) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r5, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) recvmmsg(r5, &(0x7f0000004140)=[{{&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/40, 0x28}, {&(0x7f0000000200)=""/169, 0xa9}, {&(0x7f0000000140)=""/52, 0x34}, {&(0x7f0000000380)=""/241, 0xf1}], 0x4, &(0x7f0000000480)=""/150, 0x96}, 0x6}, {{&(0x7f0000000540)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000a80)=[{&(0x7f00000005c0)=""/105, 0x69}, {&(0x7f0000000640)=""/153, 0x32}, {&(0x7f0000000700)=""/211, 0xd3}, {&(0x7f0000000300)=""/50, 0x32}, {&(0x7f0000000800)=""/207, 0x6c}, {&(0x7f0000000900)=""/89, 0x59}, {&(0x7f0000000980)=""/205, 0xcd}], 0x7}, 0x2}, {{&(0x7f0000000b00)=@nfc_llcp, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000b80)=""/69, 0x45}, {&(0x7f0000000c00)=""/55, 0x37}, {&(0x7f0000004400)=""/215, 0xd7}, {&(0x7f0000000d40)=""/148, 0x94}, {&(0x7f0000000e00)=""/84, 0x54}, {&(0x7f0000000e80)=""/6, 0x6}, {&(0x7f0000000ec0)=""/248, 0xf8}], 0x7, &(0x7f0000001040)=""/230, 0xe6}, 0x4}, {{&(0x7f0000001140)=@isdn, 0x80, &(0x7f0000001240)=[{&(0x7f00000011c0)=""/91, 0x5b}], 0x1, &(0x7f0000001280)=""/175, 0xaf}, 0x10}, {{&(0x7f0000001340)=@hci, 0x80, &(0x7f00000017c0)=[{&(0x7f00000013c0)=""/132, 0x84}, {&(0x7f0000001480)=""/199, 0xc7}, {&(0x7f0000001580)=""/18, 0x12}, {&(0x7f00000015c0)}, {&(0x7f0000001600)=""/26, 0x1a}, {&(0x7f0000001640)=""/236, 0xec}, {&(0x7f0000001740)=""/65, 0x41}], 0x7, &(0x7f0000001840)=""/185, 0xb9}, 0xffffffff}, {{&(0x7f0000001900)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001980)=""/193, 0xc1}, {&(0x7f0000001a80)=""/106, 0x6a}, {&(0x7f0000001b00)=""/33, 0x21}], 0x3, &(0x7f0000001b80)}, 0x10001}, {{&(0x7f0000001bc0)=@alg, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001c40)=""/112, 0x70}, {&(0x7f0000001cc0)=""/140, 0x8c}], 0x2, &(0x7f0000001dc0)=""/41, 0x262}}, {{&(0x7f0000001e00)=@tipc=@id, 0x80, &(0x7f0000004080)=[{&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000002e80)=""/241, 0xf1}, {&(0x7f0000002f80)=""/197, 0xc5}, {&(0x7f0000003080)=""/4096, 0x1000}], 0x4, &(0x7f00000040c0)=""/120, 0x78}, 0x4}], 0x8, 0x10000, &(0x7f0000004340)={0x77359400}) openat$tun(0xffffffffffffff9c, &(0x7f0000004380)='/dev/net/tun\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000043c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r7, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) [ 2537.386983][T30561] FAT-fs (loop3): bogus logical sector size 18302 22:33:40 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'\\pperdir', 0x3d, './file0'}}]}) [ 2537.427235][T30561] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2537.483349][T30773] FAT-fs (loop0): bogus logical sector size 522 [ 2537.490306][T30773] FAT-fs (loop0): Can't find a valid FAT filesystem 22:33:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22710}], 0x0, 0x0) [ 2537.585013][T30773] FAT-fs (loop0): bogus logical sector size 522 [ 2537.610280][T30773] FAT-fs (loop0): Can't find a valid FAT filesystem 22:33:40 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x4e24, @loopback}, {0x0, @random="0000562bd104"}, 0x8, {0x2, 0x0, @remote}, 'dummy0\x00'}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) r4 = dup2(r3, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) 22:33:40 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e6661740c020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2537.742690][T30844] overlayfs: unrecognized mount option "\pperdir=./file0" or missing value [ 2537.876979][T30891] FAT-fs (loop3): bogus logical sector size 18302 [ 2537.892437][T30891] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2537.959183][T30891] FAT-fs (loop3): bogus logical sector size 18302 [ 2537.967586][T30891] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:41 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'cpperdir', 0x3d, './file0'}}]}) 22:33:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22714}], 0x0, 0x0) [ 2538.036070][T30997] FAT-fs (loop0): bogus logical sector size 524 [ 2538.109453][T30997] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2538.129497][T31063] FAT-fs (loop3): bogus logical sector size 18302 [ 2538.137740][T31063] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca2273d}], 0x0, 0x0) 22:33:41 executing program 5: setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0, 0x36}, 0x8) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket$pptp(0x18, 0x1, 0x2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) r4 = dup2(r3, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000180)=r5) socket$inet(0x2, 0x80001, 0x0) r6 = accept4(0xffffffffffffffff, &(0x7f0000000340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, &(0x7f00000003c0)=0x80, 0x80000) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000580)=@assoc_value={0x0}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000280)={r7, @in6={{0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast1}}}, 0x0, 0x8}, &(0x7f0000000200)=0x90) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000440)={r7, @in={{0x2, 0x4e22, @local}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=r7, &(0x7f0000000040)=0x4) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000080)={r8, 0x4, 0x10}, &(0x7f00000000c0)=0xc) [ 2538.306346][T30997] FAT-fs (loop0): bogus logical sector size 524 [ 2538.322134][T30997] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2538.479151][T31107] overlayfs: unrecognized mount option "cpperdir=./file0" or missing value [ 2538.509546][T31111] FAT-fs (loop3): bogus logical sector size 18302 22:33:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002978}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:33:41 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e6661740f020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2538.600420][T31111] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:41 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) r4 = open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x82) r5 = dup2(r4, r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) 22:33:41 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'dpperdir', 0x3d, './file0'}}]}) [ 2538.741301][T31317] FAT-fs (loop0): bogus logical sector size 527 [ 2538.785404][T31111] FAT-fs (loop3): bogus logical sector size 18302 [ 2538.812327][T31317] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2538.863999][T31111] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2539.069158][T31317] FAT-fs (loop0): bogus logical sector size 527 [ 2539.075729][T31317] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2539.084770][T31332] overlayfs: unrecognized mount option "dpperdir=./file0" or missing value 22:33:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22747}], 0x0, 0x0) 22:33:42 executing program 5: r0 = shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ffb000/0x2000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) 22:33:42 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617410020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2539.409317][T31539] FAT-fs (loop3): bogus logical sector size 18302 [ 2539.444910][T31636] FAT-fs (loop0): bogus logical sector size 528 22:33:42 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'ipperdir', 0x3d, './file0'}}]}) 22:33:42 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x0, @loopback, 0x7ff}, @in6={0xa, 0x4e22, 0x401, @ipv4={[], [], @loopback}, 0x1020000}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e24, 0x8e1, @empty, 0x200}], 0x64) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) [ 2539.465675][T31636] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2539.486791][T31539] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2539.546062][T31636] FAT-fs (loop0): bogus logical sector size 528 [ 2539.561072][T31636] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2539.660130][T31655] overlayfs: unrecognized mount option "ipperdir=./file0" or missing value 22:33:42 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617412020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2539.745437][T31539] FAT-fs (loop3): bogus logical sector size 18302 [ 2539.764189][T31539] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002980}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:33:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22749}], 0x0, 0x0) 22:33:42 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) dup2(r2, r1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r4 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r3, r4, 0x0, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x8000000000000001) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x67e, 0x3) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) [ 2539.919872][T31849] FAT-fs (loop0): bogus logical sector size 530 [ 2539.953504][T31849] FAT-fs (loop0): Can't find a valid FAT filesystem 22:33:43 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'lpperdir', 0x3d, './file0'}}]}) 22:33:43 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617423020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2540.235869][T31975] overlayfs: unrecognized mount option "lpperdir=./file0" or missing value [ 2540.286319][T31966] FAT-fs (loop3): bogus logical sector size 18302 [ 2540.386482][T31966] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2540.480491][T32028] FAT-fs (loop0): bogus logical sector size 547 [ 2540.558404][T32028] FAT-fs (loop0): Can't find a valid FAT filesystem 22:33:43 executing program 5: r0 = shmget$private(0x0, 0x4000, 0xd35f7d2691a3c53e, &(0x7f0000ff7000/0x4000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r5, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) r7 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x940, 0x800) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r8, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000140)={0x3, 0x8, 0xa, 0x0, 0x0, [{r1, 0x0, 0x8}, {r1, 0x0, 0xfffffffffffffef2}, {r5, 0x0, 0x7}, {r2, 0x0, 0x7ff}, {r6, 0x0, 0x5}, {r2, 0x0, 0x6}, {r7, 0x0, 0xfffffffffffffffa}, {r8, 0x0, 0x7fffffff}, {r2, 0x0, 0xff}, {r9, 0x0, 0x100}]}) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r11 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r10, r11, 0x0, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r11, 0x0, 0x3, &(0x7f0000000040)=0x4, 0x4) shmctl$SHM_UNLOCK(r0, 0xc) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r13 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r12, r13, 0x0, 0x1) ioctl$USBDEVFS_RESETEP(r13, 0x80045503, &(0x7f0000000000)={0xe, 0x1}) 22:33:43 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'opperdir', 0x3d, './file0'}}]}) 22:33:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x2, 0x0) 22:33:43 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617448020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2540.707941][T32028] FAT-fs (loop0): bogus logical sector size 547 [ 2540.730362][T32028] FAT-fs (loop0): Can't find a valid FAT filesystem 22:33:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002988}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:33:43 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x20000000400200) unshare(0x8000400) set_robust_list(&(0x7f0000000080)={0x0, 0x5, &(0x7f0000000040)={&(0x7f0000000000)}}, 0x18) shmctl$SHM_UNLOCK(r0, 0xc) [ 2540.970208][T32124] FAT-fs (loop3): bogus logical sector size 18302 22:33:44 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) eventfd2(0x6, 0x80000) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000000)={{0x8680bb1bbf31e87, 0x0, @descriptor="a4d65c121e50e9e2"}, 0x3c, [], "e80b13126b51cefde74c159553a25a97b166e47f19cd76fe8dfc771566fec7a19f8c217e28cb0a41aac2074f9c787aba2bcd94013f196098b376032d"}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) [ 2541.077800][T32133] FAT-fs (loop0): bogus logical sector size 584 [ 2541.084429][T32124] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2541.138542][T32133] FAT-fs (loop0): Can't find a valid FAT filesystem 22:33:44 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'ppperdir', 0x3d, './file0'}}]}) [ 2541.330204][T32133] FAT-fs (loop0): bogus logical sector size 584 22:33:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x3, 0x0) [ 2541.394644][T32133] FAT-fs (loop0): Can't find a valid FAT filesystem 22:33:44 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e6661744c020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:44 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200000, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r1, 0xc) 22:33:44 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r1 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r0, r1, 0x0, 0x1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000040)={r2}) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) [ 2541.520171][T32422] overlayfs: unrecognized mount option "ppperdir=./file0" or missing value [ 2541.593355][T32426] FAT-fs (loop3): bogus logical sector size 18302 [ 2541.628710][T32426] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x4, 0x0) [ 2541.702028][T32455] FAT-fs (loop0): bogus logical sector size 588 [ 2541.719465][T32455] FAT-fs (loop0): Can't find a valid FAT filesystem 22:33:44 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'spperdir', 0x3d, './file0'}}]}) [ 2541.827672][T32455] FAT-fs (loop0): bogus logical sector size 588 [ 2541.859534][T32455] FAT-fs (loop0): Can't find a valid FAT filesystem 22:33:44 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r4, 0x111, 0x2, 0x0, 0x4) sendfile(0xffffffffffffffff, r4, 0x0, 0x1) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000080)=0x80, 0x4) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "11f734a71d612e3f", "623ecfe39f578917c20cee2af373a41ce8ec6cc533f500e6cb2830875c23d75a", "b0083da1", "ecb9f474136ac044"}, 0x38) bind$isdn(r4, &(0x7f0000000000)={0x22, 0x7, 0x7, 0x68, 0x1}, 0x6) shmctl$SHM_UNLOCK(r0, 0xc) 22:33:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x5, 0x0) [ 2542.014434][T32744] overlayfs: unrecognized mount option "spperdir=./file0" or missing value [ 2542.174962][T32750] FAT-fs (loop3): bogus logical sector size 18302 [ 2542.226279][T32750] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002990}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:33:45 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@remote, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x31, r2}) r3 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:33:45 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617468020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:45 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'xpperdir', 0x3d, './file0'}}]}) [ 2542.336444][T32750] FAT-fs (loop3): bogus logical sector size 18302 22:33:45 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r3 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r2, r3, 0x0, 0x1) write$cgroup_int(r3, &(0x7f0000000180)=0x8, 0x12) r4 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000140)) r5 = dup2(r4, r1) write$FUSE_INTERRUPT(r2, &(0x7f00000001c0)={0x10, 0x0, 0x8}, 0x10) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000080)=0xc) r6 = shmget$private(0x0, 0x4000, 0x78000248, &(0x7f0000ff8000/0x4000)=nil) shmat(r6, &(0x7f0000ff9000/0x2000)=nil, 0x4000) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000000)) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e21, @remote}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0xf0, {0x2, 0x4e21, @remote}, 'teql0\x00'}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r8 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000300)) sendfile(r7, r8, 0x0, 0x1) ioctl$EVIOCGABS0(r7, 0x80184540, &(0x7f0000000200)=""/248) [ 2542.379660][T32750] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2542.424244][ T492] FAT-fs (loop0): bogus logical sector size 616 [ 2542.430818][ T492] FAT-fs (loop0): Can't find a valid FAT filesystem 22:33:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x6, 0x0) [ 2542.729829][ T552] overlayfs: unrecognized mount option "xpperdir=./file0" or missing value 22:33:45 executing program 1: unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r2 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r1, r2, 0x0, 0x1) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000080)={0x8001, 0x1ff, 0x3ff, 0x4}) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e21, 0x5, @local, 0x5}, @in6={0xa, 0x4e24, 0x6, @rand_addr="0b3d5166080f3233f0dd82d612ef26c4", 0x5}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x58) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) write$binfmt_elf32(r4, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x1f, 0x2, 0x4, 0x4, 0x1ff, 0x2, 0x6, 0xd364, 0x63, 0x38, 0x16c, 0x5, 0x78, 0x20, 0x1, 0x7, 0x8, 0x4}, [{0x2, 0xfffffff9, 0x1, 0xfffffffe, 0x1, 0x8000, 0xc54e, 0xfff}, {0x4, 0x8e, 0x6, 0x7fff, 0x4, 0x3f, 0xc4, 0x7ff}], "9d33f72891485512ef62ab540a5312f2e6addbf6826ad50a55e655a5a1bbf7405426b0dcc94781993abb97bead1baa11e05414113db20ab7c4701baf4bc507f3bf419f7cb8541a6098975cbc3b820a53c5935190f7a5611253fcf2745b172f9895002c38e52a298b58504a245a357ca5d874392d3ae1e06f2e113a425fdcdf4a94c3add16584d5ab0ba451362d6e17310b83c863ba11a3e9d32f9ae27455143c7e7867793ce8ebe250e564ffdce875b7ae9e77dcdc1d9d4b7420818e2f1f4ac43d28de697d8a16a4139d9127256df1ab90822acc6be4df4b147330ac23271521a4a2", [[], [], [], [], []]}, 0x65a) r5 = dup2(r3, r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:33:45 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e6661746c020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:45 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x2159f7a476217ae7, &(0x7f0000ff9000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r4, r5, 0x0, 0x1) getsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) 22:33:45 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'u\nperdir', 0x3d, './file0'}}]}) [ 2542.957736][ T814] FAT-fs (loop3): bogus logical sector size 18302 [ 2542.989503][ T814] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2543.078101][ T820] FAT-fs (loop0): bogus logical sector size 620 22:33:46 executing program 1: [ 2543.144369][ T820] FAT-fs (loop0): Can't find a valid FAT filesystem 22:33:46 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x7, 0x0) 22:33:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002998}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:33:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x81) bind(r3, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) sendfile(r2, r4, 0x0, 0x200fff) fcntl$getflags(0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) [ 2543.304545][ T820] FAT-fs (loop0): bogus logical sector size 620 [ 2543.318509][ T1033] FAT-fs (loop3): bogus logical sector size 18302 [ 2543.325457][ T820] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2543.332779][ T1033] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2543.362970][ T1027] overlayfs: unrecognized mount option "u [ 2543.362970][ T1027] perdir=./file0" or missing value 22:33:46 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617474020401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2543.487245][ T1033] FAT-fs (loop3): bogus logical sector size 18302 [ 2543.532403][ T1033] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:46 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'u%perdir', 0x3d, './file0'}}]}) 22:33:46 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x8, 0x0) 22:33:46 executing program 1: r0 = socket$kcm(0x2, 0x80001, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x12, &(0x7f0000000200), 0x4) [ 2543.752947][ T1241] FAT-fs (loop0): bogus logical sector size 628 22:33:46 executing program 5: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) r3 = shmget$private(0x0, 0xf000, 0x0, &(0x7f0000000000/0xf000)=nil) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r5, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) getsockopt$IPT_SO_GET_REVISION_MATCH(r5, 0x0, 0x42, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000040)=0x1e) shmat(r3, &(0x7f0000002000/0x2000)=nil, 0x4000) r6 = shmget$private(0x0, 0xf000, 0x0, &(0x7f0000000000/0xf000)=nil) shmat(r6, &(0x7f0000002000/0x2000)=nil, 0x4000) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000080)={0x101, 0x5, 0x7, 0x0, 0x15, 0x9, 0x3f, 0x1, 0x6, 0x40}) r7 = shmget$private(0x0, 0xf000, 0x0, &(0x7f0000000000/0xf000)=nil) shmat(r7, &(0x7f0000002000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(0x0, 0xc) [ 2543.887900][ T1270] FAT-fs (loop3): bogus logical sector size 18302 [ 2543.894508][ T1270] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2543.903480][ T1241] FAT-fs (loop0): Can't find a valid FAT filesystem 22:33:46 executing program 1: mlockall(0x3) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) [ 2543.966613][ T1270] FAT-fs (loop3): bogus logical sector size 18302 [ 2543.977860][ T1270] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:47 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'u,perdir', 0x3d, './file0'}}]}) 22:33:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x9, 0x0) 22:33:47 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617478020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:47 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3, 0x20000) getsockname$unix(r3, 0xfffffffffffffffd, &(0x7f0000000040)) r4 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) [ 2544.357653][ T1493] FAT-fs (loop0): bogus logical sector size 632 [ 2544.382280][ T1501] overlayfs: unrecognized mount option "u" or missing value [ 2544.414399][ T1493] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2544.427439][ T1500] FAT-fs (loop3): bogus logical sector size 18302 [ 2544.482025][ T1500] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x200029a0}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:33:47 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e6661747a020401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:47 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'u\\perdir', 0x3d, './file0'}}]}) 22:33:47 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x120, &(0x7f0000ffc000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x10102, 0x0) fstat(r3, &(0x7f0000000040)) r4 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) unshare(0x1c020400) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r6 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r5, r6, 0x0, 0x1) write$vnet(r6, &(0x7f0000000340)={0x1, {&(0x7f0000000200)=""/182, 0xb6, &(0x7f00000002c0)=""/109, 0x3, 0x2}}, 0x68) shmctl$SHM_UNLOCK(r0, 0xc) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r7, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r7) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x8f, &(0x7f0000000100)="9971d8205334615c7089c0be2d7ad129887a734556362aa24191a8298029746aabba72ab41b31ca978d77b659849c0e2741e05f2569338873587fb4812457cb505b9f2", 0x43) write$FUSE_POLL(r2, &(0x7f00000000c0)={0x18, 0x0, 0x7, {0x3}}, 0x18) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dsp\x00', 0x5ce5704be54a7be4, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r8, r9, 0x0, 0x1) ioctl$MON_IOCT_RING_SIZE(r9, 0x9204, 0x1143fb) 22:33:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0xa, 0x0) [ 2545.011267][ T1732] overlayfs: unrecognized mount option "u\perdir=./file0" or missing value [ 2545.042412][ T1729] FAT-fs (loop3): bogus logical sector size 18302 22:33:48 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000000)=0xac7, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) shmctl$SHM_UNLOCK(r0, 0xc) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, &(0x7f00000000c0)={0x400, 0x6, "5fa9c51fbfda5513034881523d75a5e7a05c291626a41d69ef980045c582300d", 0x7, 0x400, 0x0, 0x80000000, 0x31}) symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') [ 2545.062910][ T1729] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2545.069940][ T1733] FAT-fs (loop0): bogus logical sector size 634 [ 2545.091717][ T1733] FAT-fs (loop0): Can't find a valid FAT filesystem 22:33:48 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'up\nerdir', 0x3d, './file0'}}]}) [ 2545.241116][ T1729] FAT-fs (loop3): bogus logical sector size 18302 [ 2545.290009][ T1729] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2545.303027][ T1733] FAT-fs (loop0): bogus logical sector size 634 22:33:48 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0815b5055e0bcfe87b3071") ioctl$EVIOCGPROP(r0, 0x40284504, &(0x7f00000002c0)=""/233) [ 2545.388864][ T1968] overlayfs: unrecognized mount option "up [ 2545.388864][ T1968] erdir=./file0" or missing value [ 2545.408719][ T1733] FAT-fs (loop0): Can't find a valid FAT filesystem 22:33:48 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'up%erdir', 0x3d, './file0'}}]}) 22:33:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0xc, 0x0) 22:33:48 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400030401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:48 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) socket$netlink(0x10, 0x3, 0xa) r3 = dup2(r2, r1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7319d7b3bb195cbb9862987e7e6338b0fb754b831d864726e984c3498effae436e8d8a8d6c7828fa8847cc575ae85ed4fba194183cb7f0a78ad077c20f10146ae9448e0a98877d0cb3d0725532fea6909882cd53f550ee6f81cb089b2ab19810df5d2b9028ab9e057df90b6ce9743a10683fcbe8644c2ec1ebaa52bb40c0ca61ba92", 0x82, 0x4000, &(0x7f00000000c0)={0xa, 0x4e21, 0x8001, @mcast1, 0x7}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r4, r5, 0x0, 0x1) write$FUSE_GETXATTR(r5, &(0x7f0000000140)={0x18, 0x0, 0x3, {0x7}}, 0x18) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x1a, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}, 0x1c) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) [ 2545.768780][ T2283] FAT-fs (loop3): bogus logical sector size 18302 [ 2545.777702][ T2283] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2545.864386][ T2283] FAT-fs (loop3): bogus logical sector size 18302 [ 2545.865422][ T2292] FAT-fs (loop0): bogus logical sector size 768 [ 2545.878041][ T2283] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2545.900278][ T2292] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2545.942307][ T2297] overlayfs: unrecognized mount option "up%erdir=./file0" or missing value 22:33:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x200029a8}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:33:49 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) gettid() lstat(0x0, 0x0) getgid() getgroups(0x1, &(0x7f0000000040)=[0xffffffffffffffff]) r2 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, 0x0) getresgid(&(0x7f00000006c0), 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0) pipe2(0x0, 0x0) getgid() sendmsg$unix(0xffffffffffffffff, 0x0, 0xfd1c492160ddf9bd) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000040)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) bind$packet(r4, &(0x7f0000000200), 0x14) io_setup(0x3, &(0x7f0000000400)) setuid(0x0) r5 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$TUNSETOWNER(r5, 0x400454cc, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0xc) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3}, 0xb) ftruncate(r6, 0x200004) sendfile(r0, r6, 0x0, 0x80001d00c0d0) 22:33:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0xe, 0x0) 22:33:49 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400050401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:49 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f0000000000)={{0x4, 0x0, @reserved="93a9aa2e38234a42ede91a943b27b285506a59945faa86514b535608893824da"}}) shmctl$SHM_UNLOCK(r0, 0xc) 22:33:49 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'up,erdir', 0x3d, './file0'}}]}) [ 2546.458234][ T2522] FAT-fs (loop3): bogus logical sector size 18302 [ 2546.473692][ T2522] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x10, 0x0) [ 2546.507091][ T2524] FAT-fs (loop0): bogus logical sector size 1280 [ 2546.539639][ T2524] FAT-fs (loop0): Can't find a valid FAT filesystem 22:33:49 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0815b5055e0bcfe87b3071") ioctl$EVIOCGPROP(r0, 0x80084504, &(0x7f00000002c0)=""/233) 22:33:49 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400060401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2546.710451][ T2839] FAT-fs (loop3): bogus logical sector size 18302 [ 2546.727590][ T2839] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:49 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'up\\erdir', 0x3d, './file0'}}]}) 22:33:49 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) pipe(&(0x7f0000000000)={0xffffffffffffffff}) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a900050004000000060000000900000009000000271e7a3a101b4915faebcb07396fb0bc2a3ed332135bebb99e760dace13cfb9a93a8a6fddbcdbe67f0473b14fe3fddb32257d59c01efb9982887b1356affc4a02149d59310f8eddddb811822b74d62acdd1393ad6ee2369297d8b035e73a5f130e5233308465885b3d482d8883996fff73387a60d93928a33f5c474857459fd4d729e25e5a3e78b0e15a8e3a1027abfcb6b38aff0b9487c40db10fd242440df7fcf07dda43b44c37ec"], 0x1c1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0xd) r4 = dup2(r3, r2) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r6 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r5, r6, 0x0, 0x1) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) open(&(0x7f00000002c0)='./file0\x00', 0x400400, 0x2) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r6, 0x28, 0x6, &(0x7f0000000280)={r7, r8/1000+30000}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) shmctl$SHM_UNLOCK(r0, 0xc) [ 2546.866640][ T2852] FAT-fs (loop0): bogus logical sector size 1536 [ 2546.887067][ T2852] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2546.985545][ T2839] FAT-fs (loop3): bogus logical sector size 18302 [ 2547.087800][ T2839] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2547.095746][ T2852] FAT-fs (loop0): bogus logical sector size 1536 22:33:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x23, 0x0) [ 2547.144447][ T2852] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2547.181307][ T3070] overlayfs: unrecognized mount option "up\erdir=./file0" or missing value 22:33:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x200029b0}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:33:50 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0815b5055e0bcfe87b3071") ioctl$EVIOCGPROP(r0, 0x40044581, 0x0) 22:33:50 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400070401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:50 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upp\nrdir', 0x3d, './file0'}}]}) 22:33:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x48, 0x0) [ 2547.932818][ T3206] FAT-fs (loop0): bogus logical sector size 1792 [ 2547.939522][ T3206] FAT-fs (loop0): Can't find a valid FAT filesystem 22:33:50 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000a0401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2547.979281][ T3209] FAT-fs (loop3): bogus logical sector size 18302 [ 2548.014872][ T3209] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2548.023772][ T3205] overlayfs: unrecognized mount option "upp [ 2548.023772][ T3205] rdir=./file0" or missing value 22:33:51 executing program 1: msgget(0x0, 0xfc60067342d32180) [ 2548.112197][ T3341] FAT-fs (loop0): bogus logical sector size 2560 [ 2548.142932][ T3341] FAT-fs (loop0): Can't find a valid FAT filesystem 22:33:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x4c, 0x0) 22:33:51 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='lo\x00', 0x2) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080), 0x10) 22:33:51 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upp%rdir', 0x3d, './file0'}}]}) 22:33:51 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000f0401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:51 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000000c0)) [ 2548.424707][ T3510] FAT-fs (loop3): bogus logical sector size 18302 [ 2548.457497][ T3510] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2548.597648][ T3510] FAT-fs (loop3): bogus logical sector size 18302 [ 2548.679099][ T3596] overlayfs: unrecognized mount option "upp%rdir=./file0" or missing value [ 2548.689329][ T3510] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2548.703982][ T3597] FAT-fs (loop0): bogus logical sector size 3840 [ 2548.761711][ T3597] FAT-fs (loop0): Can't find a valid FAT filesystem 22:33:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x200029b8}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:33:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x60, 0x0) 22:33:52 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upp,rdir', 0x3d, './file0'}}]}) 22:33:52 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400140401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:52 executing program 1: syz_open_procfs(0x0, 0x0) setxattr$security_selinux(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) syslog(0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a}) flock(0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) open(0x0, 0x0, 0x0) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) keyctl$setperm(0x5, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0xfffffffffffffe5d, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba000000000009000000f6626d", @ANYRES32=0x0, @ANYBLOB="03001f160000000008001b0000000000"], 0x28}}, 0x0) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) setresgid(0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180), 0x0) setresgid(0x0, 0x0, 0x0) [ 2549.246782][ T3822] FAT-fs (loop0): bogus logical sector size 5120 22:33:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x68, 0x0) [ 2549.337939][ T3822] FAT-fs (loop0): Can't find a valid FAT filesystem 22:33:52 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upp\\rdir', 0x3d, './file0'}}]}) 22:33:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x6c, 0x0) 22:33:52 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400200401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2549.797788][ T4047] overlayfs: unrecognized mount option "upp\rdir=./file0" or missing value [ 2549.843802][ T4054] FAT-fs (loop0): bogus logical sector size 8192 [ 2549.866184][ T4054] FAT-fs (loop0): Can't find a valid FAT filesystem 22:33:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x74, 0x0) 22:33:52 executing program 1: set_mempolicy(0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 2549.953296][ T4054] FAT-fs (loop0): bogus logical sector size 8192 [ 2549.970254][ T4054] FAT-fs (loop0): Can't find a valid FAT filesystem 22:33:53 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'uppe\ndir', 0x3d, './file0'}}]}) [ 2550.376009][ T4179] overlayfs: unrecognized mount option "uppe [ 2550.376009][ T4179] dir=./file0" or missing value 22:33:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x200029c0}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:33:53 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174003d0401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:53 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x219}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB='{Q\x00\x00'], 0x4) 22:33:53 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x7a, 0x0) 22:33:53 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'uppe%dir', 0x3d, './file0'}}]}) [ 2551.105815][ T4304] FAT-fs (loop0): bogus logical sector size 15616 [ 2551.137134][ T4307] device nr0 entered promiscuous mode 22:33:54 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x300, 0x0) [ 2551.163852][ T4304] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2551.281338][ T4416] FAT-fs (loop3): bogus logical sector size 18302 [ 2551.293603][ T4304] FAT-fs (loop0): bogus logical sector size 15616 [ 2551.295299][ T4416] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:54 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'uppe,dir', 0x3d, './file0'}}]}) [ 2551.367656][ T4304] FAT-fs (loop0): Can't find a valid FAT filesystem 22:33:54 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400400401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:54 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x42e, 0x0) [ 2551.624595][ T4424] overlayfs: unrecognized mount option "uppe" or missing value 22:33:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x200029c8}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:33:54 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x43b, 0x0) [ 2551.794466][ T4459] FAT-fs (loop0): bogus logical sector size 16384 22:33:54 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'uppe\\dir', 0x3d, './file0'}}]}) [ 2551.870924][ T4459] FAT-fs (loop0): Can't find a valid FAT filesystem 22:33:55 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)}, 0x0) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) [ 2552.028842][ T4459] FAT-fs (loop0): bogus logical sector size 16384 [ 2552.042110][ T4459] FAT-fs (loop0): Can't find a valid FAT filesystem 22:33:55 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r4 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r3, r4, 0x0, 0x1) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r6 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r5, r6, 0x0, 0x1) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) r7 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$RTC_EPOCH_SET(r7, 0x40084149, 0x718000) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r9) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r11 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r10, r11, 0x0, 0x1) r12 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snf/\xc5cmC#D#c\x00', 0x0, 0x20000) ioctl$RTC_EPOCH_SET(r12, 0x40084149, 0x718000) r13 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x84c42, 0x0) r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r15 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r14, r15, 0x0, 0x1) r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r17 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r16, r17, 0x0, 0x1) r18 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r13, 0x4c81, r18) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r18) r19 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/de\x04\x01\x00\x00\x00\x00\x00\x00mC#D#c\x00', 0x0, 0x0) ioctl$RTC_EPOCH_SET(r19, 0x40084149, 0x718000) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r21) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r22 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x200000, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r22) r23 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r23, 0x84, 0x6d, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="7300e8ffeebea0cb8dea2c0e3fda5e66f1c8e0cde2c1c6e9bb5183830672b04462677952ef250000b35f001396eeff804ca704dffe53268443fbf2504e597589abc468754e755560d8833c32e2e4013a20207314d3e25d47580b285984b29acf989bc23801c282a3fbfb3261cb99dba2ee261a915fee61502d7d2963daf6ffed3a4b456cdd896254b82071ad6023a5c9e5bdb42ad0d12b410a60aa5aa1d482fd05b0fd5be3b4b8f8f890fc940cb5b5160098aed745dc15fa5feb00b1e261543bd8b6b103b9a0d747757d3305fdf154f0e84ad8dd1fae8e09e5c56afa977ad0eb3133ca682da9d30197121bf38f49722a9457286aa871ba653cc873da52ade015832ee62603b0e057494cc15e935b1910cda0645136501b897191511336"], &(0x7f0000000180)=0x2) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r23, 0x84, 0x71, &(0x7f00000000c0)={r24, 0x4}, 0x8) 22:33:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x43c, 0x0) 22:33:55 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400ff0401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2552.214609][ T4654] overlayfs: unrecognized mount option "uppe\dir=./file0" or missing value 22:33:55 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0815b5055e0bcfe87b3071") ioctl$EVIOCGPROP(r0, 0x80284504, &(0x7f00000002c0)=""/233) 22:33:55 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400030401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:55 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upper,ir', 0x3d, './file0'}}]}) 22:33:55 executing program 5: init_module(&(0x7f0000000000)='\xd0securityem0-]bdev\x00', 0x13, &(0x7f0000000040)='em0[%-\x00') r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) 22:33:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x43d, 0x0) [ 2552.616045][ T4973] FAT-fs (loop0): bogus logical sector size 768 [ 2552.654837][ T4973] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2552.875306][ T4973] FAT-fs (loop0): bogus logical sector size 768 [ 2552.914528][ T5196] overlayfs: unrecognized mount option "upper" or missing value [ 2552.940186][ T4973] FAT-fs (loop0): Can't find a valid FAT filesystem 22:33:56 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x200029d0}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:33:56 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$NBD_SET_TIMEOUT(0xffffffffffffffff, 0xab09, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) 22:33:56 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upper\\ir', 0x3d, './file0'}}]}) 22:33:56 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000040)) 22:33:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x43e, 0x0) 22:33:56 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400040401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2553.342376][ T5314] EXT4-fs warning (device sda1): ext4_group_add:1624: No reserved GDT blocks, can't resize [ 2553.409587][ T5321] overlayfs: unrecognized mount option "upper\ir=./file0" or missing value 22:33:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000080)=0x1000) 22:33:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x43f, 0x0) 22:33:56 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400050401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:56 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420040, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r1, 0xc) 22:33:56 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upper`ir', 0x3d, './file0'}}]}) 22:33:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x440, 0x0) [ 2553.977071][ T5789] FAT-fs (loop0): bogus logical sector size 1280 [ 2554.055504][ T5956] FAT-fs (loop3): bogus logical sector size 18302 [ 2554.077919][ T5789] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2554.111143][ T5956] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2554.277008][ T5956] FAT-fs (loop3): bogus logical sector size 18302 [ 2554.286154][ T5956] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x200029d8}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:33:57 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperd\nr', 0x3d, './file0'}}]}) 22:33:57 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={0x0, 0x0, &(0x7f00008b7ff0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000001010500003f88000000dea5030b9b00100002000c00010008b74a81ed0000e2"], 0x24}}, 0x0) 22:33:57 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x1200, &(0x7f0000ff7000/0x3000)=nil) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video0\x00', 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) write$FUSE_GETXATTR(r3, &(0x7f0000000000)={0x18, 0x0, 0x6, {0xffffffc0}}, 0x18) shmctl$SHM_UNLOCK(r0, 0xc) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x310000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r5, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x1ff}}, ["", "", "", "", "", "", ""]}, 0x24}}, 0x4000) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r7 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r6, r7, 0x0, 0x1) io_uring_register$IORING_UNREGISTER_FILES(r7, 0x3, 0x0, 0x0) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f0000000040)=""/184) r8 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x40000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r8, 0xc0a85320, &(0x7f0000000140)={{0x4, 0x1}, 'port1\x00', 0x10, 0x1000, 0x2f62, 0x4, 0x10d81629, 0x9, 0x5, 0x0, 0x0, 0x7ff}) 22:33:57 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400060401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x441, 0x0) [ 2554.449736][ T5973] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2554.472834][ T5975] FAT-fs (loop0): bogus logical sector size 1536 [ 2554.487780][ T5975] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2554.492795][ T5969] overlayfs: unrecognized mount option "upperd [ 2554.492795][ T5969] r=./file0" or missing value [ 2554.495711][ T5973] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 22:33:57 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400070401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:57 executing program 1: 22:33:57 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperd%r', 0x3d, './file0'}}]}) [ 2554.627830][ T5982] FAT-fs (loop3): bogus logical sector size 18302 [ 2554.635082][ T5982] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2554.714600][ T5982] FAT-fs (loop3): bogus logical sector size 18302 [ 2554.737629][ T5982] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:57 executing program 1: [ 2554.831130][ T6095] FAT-fs (loop0): bogus logical sector size 1792 22:33:57 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) dup2(r2, r1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r4 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r3, r4, 0x0, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="a1798ddb9b3e027d100affa46302"], 0x14}}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9384fb6adccfa4d3}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="200025bd7000fddbdf2507000000080004000800000008000500080000002000010008000b00736970000c00e8ff1d0000000200000008000b0073697000040003004800010014000300000000000000000000000008000000080004004e20000008000b007369700008000500010000000c0006006c626c63720000000800060007000000080006009a9e000008000600ff0100000800040080000000"], 0xb0}}, 0x4800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4001fe) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000180)=0x4a5b) unshare(0x8000400) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r8 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') r9 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r9) r10 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r9) request_key(&(0x7f0000000240)='blacklist\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)='IPVS\x00', r10) sendfile(r7, r8, 0x0, 0x1) ioctl$PIO_UNISCRNMAP(r8, 0x4b6a, &(0x7f00000001c0)="809f4b835e9e7f628349237032c332072917471c118238b6a1b199") shmctl$SHM_UNLOCK(r0, 0xc) 22:33:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x442, 0x0) [ 2554.878078][ T6095] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2554.980803][ T6099] overlayfs: unrecognized mount option "upperd%r=./file0" or missing value [ 2555.018083][ T6095] FAT-fs (loop0): bogus logical sector size 1792 [ 2555.060518][ T6095] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2555.112911][ T6286] FAT-fs (loop3): bogus logical sector size 18302 [ 2555.204198][ T6286] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2555.374304][ T6286] FAT-fs (loop3): bogus logical sector size 18302 [ 2555.387636][ T6286] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x200029e0}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:33:58 executing program 1: 22:33:58 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x90a44, 0x0) mmap$usbfs(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x1000002, 0x13, r4, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x7435371fab4d1cd2) shmctl$SHM_UNLOCK(r0, 0xc) 22:33:58 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperd,r', 0x3d, './file0'}}]}) 22:33:58 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400080401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x443, 0x0) 22:33:58 executing program 1: [ 2555.669635][ T6325] overlayfs: unrecognized mount option "upperd" or missing value [ 2555.689438][ T6330] FAT-fs (loop3): bogus logical sector size 18302 22:33:58 executing program 1: 22:33:58 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r4, r5, 0x0, 0x1) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r4, 0x800443d2, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {}]}) [ 2555.760915][ T6330] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:58 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000a0401ed01000270fff0", 0x16}], 0x0, 0x0) 22:33:58 executing program 1: 22:33:59 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperd\\r', 0x3d, './file0'}}]}) [ 2556.059967][ T6330] FAT-fs (loop3): bogus logical sector size 18302 [ 2556.088570][ T6330] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2556.184315][ T6551] FAT-fs (loop0): bogus logical sector size 2560 [ 2556.276041][ T6551] FAT-fs (loop0): Can't find a valid FAT filesystem 22:33:59 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x200029e8}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:33:59 executing program 1: 22:33:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x444, 0x0) 22:33:59 executing program 5: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x5) unshare(0x8000400) 22:33:59 executing program 1: [ 2556.386741][ T6655] overlayfs: unrecognized mount option "upperd\r=./file0" or missing value [ 2556.496556][ T6658] FAT-fs (loop3): bogus logical sector size 18302 [ 2556.544051][ T6551] FAT-fs (loop0): bogus logical sector size 2560 [ 2556.563210][ T6658] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2556.588136][ T6551] FAT-fs (loop0): Can't find a valid FAT filesystem 22:33:59 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdi\n', 0x3d, './file0'}}]}) 22:33:59 executing program 1: 22:33:59 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000f0401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2556.712509][ T6658] FAT-fs (loop3): bogus logical sector size 18302 [ 2556.824160][ T6658] FAT-fs (loop3): Can't find a valid FAT filesystem 22:33:59 executing program 1: 22:33:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x445, 0x0) 22:34:00 executing program 1: 22:34:00 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x446, 0x0) [ 2557.222459][ T6888] FAT-fs (loop3): bogus logical sector size 18302 [ 2557.229249][ T6888] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2557.231276][ T6889] FAT-fs (loop0): bogus logical sector size 3840 [ 2557.306241][ T6889] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2557.350195][ T6893] overlayfs: unrecognized mount option "upperdi [ 2557.350195][ T6893] =./file0" or missing value [ 2557.460316][ T6897] FAT-fs (loop3): bogus logical sector size 18302 22:34:00 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x200029f0}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:34:00 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) shmget$private(0x0, 0xf000, 0x0, &(0x7f0000000000/0xf000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0x80e6db4c7adb3540) r4 = shmget$private(0x0, 0xf000, 0x0, &(0x7f0000000000/0xf000)=nil) shmat(r4, &(0x7f0000002000/0x2000)=nil, 0x4000) r5 = shmget$private(0x0, 0xf000, 0x0, &(0x7f0000000000/0xf000)=nil) shmat(r5, &(0x7f0000002000/0x2000)=nil, 0x4000) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) keyctl$get_persistent(0x16, r7, 0x0) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r11 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r11, 0x202002) keyctl$chown(0x4, r11, r9, r10) r12 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r13) keyctl$get_persistent(0x16, r13, 0x0) r14 = getegid() r15 = gettid() ptrace$setopts(0x4206, r15, 0x0, 0x0) tkill(r15, 0x3c) ptrace$cont(0x18, r15, 0x0, 0x0) ptrace$setregs(0xd, r15, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r15, 0x0, 0x0) r16 = gettid() ptrace$setopts(0x4206, r16, 0x0, 0x0) tkill(r16, 0x3c) ptrace$cont(0x18, r16, 0x0, 0x0) ptrace$setregs(0xd, r16, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r16, 0x0, 0x0) shmctl$IPC_SET(r5, 0x1, &(0x7f0000000000)={{0xce, r7, r10, r13, r14, 0xe0, 0x5}, 0x2, 0x100000001, 0x5, 0x7, r15, r16, 0x1}) shmctl$SHM_UNLOCK(r4, 0xc) 22:34:00 executing program 1: [ 2557.507016][ T6897] FAT-fs (loop3): Can't find a valid FAT filesystem 22:34:00 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400100401ed01000270fff0", 0x16}], 0x0, 0x0) 22:34:00 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdi%', 0x3d, './file0'}}]}) 22:34:00 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x500, 0x0) 22:34:00 executing program 1: 22:34:00 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r2 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r1, r2, 0x0, 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x60de}, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) [ 2557.823276][ T7013] FAT-fs (loop0): Directory bread(block 60673) failed 22:34:00 executing program 1: 22:34:00 executing program 1: [ 2557.907423][ T7019] overlayfs: unrecognized mount option "upperdi%=./file0" or missing value [ 2557.929656][ T7013] FAT-fs (loop0): Directory bread(block 60674) failed [ 2558.011401][ T7023] FAT-fs (loop3): bogus logical sector size 18302 [ 2558.023906][ T7013] FAT-fs (loop0): Directory bread(block 60675) failed 22:34:01 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdi,', 0x3d, './file0'}}]}) 22:34:01 executing program 1: [ 2558.056314][ T7023] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2558.094961][ T7013] FAT-fs (loop0): Directory bread(block 60676) failed [ 2558.210256][ T7023] FAT-fs (loop3): bogus logical sector size 18302 [ 2558.225409][ T7023] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2558.285615][ T7226] overlayfs: unrecognized mount option "upperdi" or missing value 22:34:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x200029f8}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:34:01 executing program 1: 22:34:01 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400140401ed01000270fff0", 0x16}], 0x0, 0x0) 22:34:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x600, 0x0) 22:34:01 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdi\\', 0x3d, './file0'}}]}) 22:34:01 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) r4 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000002c0)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x492, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r4, r4, r5}, &(0x7f0000000240)=""/104, 0x68, &(0x7f0000000580)={&(0x7f0000000500)={'md5\x00'}}) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) setsockopt$inet_int(r6, 0x0, 0x18, &(0x7f0000000000)=0x8, 0x4) keyctl$update(0x2, r4, &(0x7f0000000200)="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", 0x1000) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r3) r7 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) 22:34:01 executing program 1: [ 2558.695444][ T7353] FAT-fs (loop0): bogus logical sector size 5120 [ 2558.707604][ T7357] FAT-fs (loop3): bogus logical sector size 18302 22:34:01 executing program 1: 22:34:01 executing program 1: [ 2558.771194][ T7353] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2558.780130][ T7357] FAT-fs (loop3): Can't find a valid FAT filesystem 22:34:01 executing program 1: 22:34:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x700, 0x0) 22:34:01 executing program 5: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000000)) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r1, 0xc) [ 2558.985301][ T7353] FAT-fs (loop0): bogus logical sector size 5120 [ 2559.007494][ T7353] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2559.240649][ T7578] FAT-fs (loop3): bogus logical sector size 18302 [ 2559.292761][ T7578] FAT-fs (loop3): Can't find a valid FAT filesystem 22:34:02 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002a00}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:34:02 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x2c, './file0'}}]}) 22:34:02 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174003d0401ed01000270fff0", 0x16}], 0x0, 0x0) 22:34:02 executing program 1: 22:34:02 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_S390_UCAS_MAP(r3, 0x4018ae50, &(0x7f0000000040)={0x3, 0x80000000}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') ioctl$KVM_GET_DEVICE_ATTR(r5, 0x4018aee2, &(0x7f00000005c0)={0x0, 0x6, 0x5, &(0x7f0000000580)=0x1eb9}) sendfile(r4, r5, 0x0, 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r7 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r6, r7, 0x0, 0x1) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0xfffffe47) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000180)=r8) r9 = socket$inet(0x2, 0x80001, 0x0) io_setup(0x10, &(0x7f0000000240)=0x0) io_submit(r10, 0x1, &(0x7f0000000540)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x5, 0x81, 0xffffffffffffffff, &(0x7f0000000380)="56a8102536dc9f14cdd0a11959bfbd54414db111f0ef0e6ec2a6651bbb861755c61ab18d0df695422137e39ae128d14a236700b5140071e1ce2d3ab557d1b5a01d462fe9ae63878ae943554e3fb029f4c87d1affdd85b4da47354ae6d2d78ca8d09e8200a7b0e70eb1da9e8949ae0c35513640ea548cb08b3cafdb7005dcf02e9a5a23a5083130b6fc894f5242dc2ac98ca81b96c83df2595c58", 0x9a, 0x800, 0x0, 0x2, r8}]) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000280)={r11, @in6={{0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast1}}}, 0x0, 0x8}, &(0x7f0000000200)=0x90) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f0000000440)={r11, @in={{0x2, 0x4e22, @local}}}, &(0x7f0000000100)=0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000080)={0x5, 0x8204, 0x80000000, 0x0, r11}, 0x10) r12 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) 22:34:02 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x900, 0x0) 22:34:02 executing program 1: [ 2559.622173][ T7695] FAT-fs (loop0): bogus logical sector size 15616 [ 2559.640837][ T7699] FAT-fs (loop3): bogus logical sector size 18302 [ 2559.648545][ T7695] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2559.659708][ T7699] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2559.827233][ T7695] FAT-fs (loop0): bogus logical sector size 15616 [ 2559.840739][ T7707] overlayfs: unrecognized mount option "upperdir" or missing value 22:34:02 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0xa00, 0x0) [ 2559.895940][ T7695] FAT-fs (loop0): Can't find a valid FAT filesystem 22:34:02 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x54001400, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) 22:34:02 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020400ed01000270fff0", 0x16}], 0x0, 0x0) 22:34:02 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x50, './file0'}}]}) 22:34:02 executing program 1: [ 2560.219081][ T7927] FAT-fs (loop3): bogus logical sector size 18302 [ 2560.225701][ T7927] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2560.283634][ T7927] FAT-fs (loop3): bogus logical sector size 18302 [ 2560.290671][ T7927] FAT-fs (loop3): Can't find a valid FAT filesystem 22:34:03 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002a08}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:34:03 executing program 1: 22:34:03 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020201ed01000270fff0", 0x16}], 0x0, 0x0) 22:34:03 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) r4 = dup2(r3, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) 22:34:03 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0xc00, 0x0) 22:34:03 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x5c, './file0'}}]}) [ 2560.713395][ T8147] FAT-fs (loop3): bogus logical sector size 18302 22:34:03 executing program 1: 22:34:03 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x80, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000040)=@int=0x2daa, 0x4) r3 = socket$netlink(0x10, 0x3, 0xb) r4 = dup2(r3, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) unshare(0x8000400) shmctl$SHM_UNLOCK(r0, 0xc) [ 2560.753862][ T8152] overlayfs: unrecognized mount option "upperdir\./file0" or missing value [ 2560.777533][ T8147] FAT-fs (loop3): Can't find a valid FAT filesystem 22:34:03 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020301ed01000270fff0", 0x16}], 0x0, 0x0) [ 2560.935376][ T8147] FAT-fs (loop3): bogus logical sector size 18302 22:34:03 executing program 1: 22:34:03 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}, 0xa}]}) [ 2561.020035][ T8147] FAT-fs (loop3): Can't find a valid FAT filesystem 22:34:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0xe00, 0x0) [ 2561.288547][ T8473] overlayfs: failed to resolve './file0 [ 2561.288547][ T8473] ': -2 [ 2561.291583][ T8475] FAT-fs (loop0): bogus sectors per cluster 3 [ 2561.312455][ T8475] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2561.384195][ T8475] FAT-fs (loop0): bogus sectors per cluster 3 [ 2561.400866][ T8475] FAT-fs (loop0): Can't find a valid FAT filesystem 22:34:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002a10}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:34:04 executing program 1: 22:34:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x1020, 0x0) 22:34:04 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000000)=0x4, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x400, 0x0) ioctl$sock_inet_SIOCDELRT(r4, 0x890c, &(0x7f00000000c0)={0x0, {0x2, 0x4e24, @loopback}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, {0x2, 0x4e24, @empty}, 0x8, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000080)='team0\x00', 0x1, 0x2}) shmctl$SHM_UNLOCK(r0, 0xc) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000140)={0x3, 0x3, 0x1, {0x1, 0x6, 0x5, 0xfff}}) 22:34:04 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}, 0x25}]}) 22:34:04 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020501ed01000270fff0", 0x16}], 0x0, 0x0) 22:34:04 executing program 1: 22:34:04 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x59d7e818af787b63, &(0x7f0000ff7000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) getsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f0000000040)=0x3, &(0x7f0000000080)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x8000400) getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000000), 0x4) shmctl$SHM_UNLOCK(r0, 0xc) 22:34:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x2000, 0x0) [ 2561.871225][ T8603] FAT-fs (loop0): bogus sectors per cluster 5 [ 2561.893059][ T8599] overlayfs: failed to resolve './file0%': -2 [ 2561.919064][ T8603] FAT-fs (loop0): Can't find a valid FAT filesystem 22:34:04 executing program 1: [ 2561.998031][ T8603] FAT-fs (loop0): bogus sectors per cluster 5 [ 2562.041697][ T8603] FAT-fs (loop0): Can't find a valid FAT filesystem 22:34:05 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}, 0x3b}]}) 22:34:05 executing program 1: [ 2562.285072][ T8925] overlayfs: failed to resolve './file0;': -2 22:34:05 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002a18}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:34:05 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x2010, 0x0) 22:34:05 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020601ed01000270fff0", 0x16}], 0x0, 0x0) 22:34:05 executing program 5: 22:34:05 executing program 1: 22:34:05 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}, 0x50}]}) 22:34:05 executing program 5: 22:34:05 executing program 1: [ 2562.956624][ T9104] FAT-fs (loop0): bogus sectors per cluster 6 [ 2563.001120][ T9107] overlayfs: failed to resolve './file0P': -2 [ 2563.032157][ T9104] FAT-fs (loop0): Can't find a valid FAT filesystem 22:34:06 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x2300, 0x0) 22:34:06 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}, 0xa}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:34:06 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020701ed01000270fff0", 0x16}], 0x0, 0x0) 22:34:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000500)={[0x0, 0x400007ff, 0x0, 0x0, 0x0, 0x0, 0x4cc], 0x12000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2563.380206][ T9201] overlayfs: option "workdir=./file1 [ 2563.380206][ T9201] upperdir=./file0" is useless in a non-upper mount, ignore [ 2563.468677][ T9201] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2563.501396][ T9199] FAT-fs (loop0): bogus sectors per cluster 7 [ 2563.511288][ T9199] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2563.616155][ T9199] FAT-fs (loop0): bogus sectors per cluster 7 [ 2563.631247][ T9199] FAT-fs (loop0): Can't find a valid FAT filesystem 22:34:06 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002a20}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:34:06 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}, 0x5c}]}) 22:34:06 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x2675, 0x0) 22:34:06 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') syz_mount_image$jfs(&(0x7f00000000c0)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x3, 0x2, &(0x7f0000000300)=[{&(0x7f0000000140)="eb79a07a7be10525565e191391f9dc8e8f0d8cb087ab078ec845798a8fd464c657555376687cc64d18ae687209346454045eda2a48223a78b9c7ea4426335bf9080e38441527717165728ac10fafb0d4ca5b7fe06f5e74237d27b19e418bf2ad472ec1e549a39d02ad09a2ea12087a276fe5ef50986d6b2415a6d9a2273c12984577cb9f2a7f3f096deef4af9d2ca62622cb45a0515a2eedc8b76ca71620a1bea78eea913992552ca9450464fb978042a849d36fe5b99f889fb8ebd31e4c", 0xbe, 0x100000000000000}, {&(0x7f0000000200)="1bf9a95acfc078c41fc3aaedc46f40fae6dd26f1cab205ec3649d65d7e2418d5c5c5e029fbd1155158c548c796a398a200b2e3c982669e60bbfd78e42c0fdd52f2dc6b5a629cc3bd26d390c3fb3f429ea4ea93e0c8d90ecb3ac63e0e675985cccfd039c3fbd12ffe772d225852efd1d1eca99acb4b103c2b8ce64cb3ec19abcd8e820cd9dd2ad30e527b73e34299fb7c1713216acb15355f8d9d11dc181b2bf632d098d1c27f969f04eaf93879aab9be4c4e731196a954a8f7dfc3ff50e82fca276098b12c67ba8ea390ead8ddf22672b465851d8c449e", 0xd7, 0x7}], 0x800000, &(0x7f0000000340)={[{@noquota='noquota'}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}], [{@measure='measure'}]}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000380), &(0x7f00000003c0)=0x4) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendfile(r0, r1, 0x0, 0xa808) 22:34:06 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020801ed01000270fff0", 0x16}], 0x0, 0x0) 22:34:06 executing program 5: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001480)='/dev/fuse\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000800)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f0000000040)) [ 2564.063567][ T23] audit: type=1800 audit(1574375647.029:99): pid=9360 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17729 res=0 [ 2564.136277][ T9366] overlayfs: upper fs is r/o, try multi-lower layers mount 22:34:07 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:34:07 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x267b, 0x0) [ 2564.320313][ T9358] jfs: Unrecognized mount option "measure" or missing value 22:34:07 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020901ed01000270fff0", 0x16}], 0x0, 0x0) 22:34:07 executing program 5: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x2000, 0x10) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d623455e1ffb5ea3544438cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) syz_mount_image$hfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_user='access=user'}]}}) setxattr$system_posix_acl(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000a40)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) [ 2564.560922][ T9691] overlayfs: upper fs is r/o, try multi-lower layers mount 22:34:07 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x2e04, 0x0) 22:34:07 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) keyctl$get_persistent(0x16, r1, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x7, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)="a774d9a07233167e15419a91facb1cee5f239e21d3752c35fbc5f1c3ef9b2ac264c423b9bf7749236197e35cf6593e6fa0f57006d6fbb7e51bca0da8ac55baee487322a783ee4adcd760c2b397b1c82fee046498d826ef462c3bf573233a8a2d632f6d", 0x63, 0x6}], 0x800, &(0x7f0000000200)={[{@noacl='noacl'}, {@bsddf='bsddf'}], [{@subj_user={'subj_user', 0x3d, 'syscall\x00'}}, {@smackfsfloor={'smackfsfloor'}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'syscall\x00'}}, {@seclabel='seclabel'}, {@subj_type={'subj_type', 0x3d, '\xa3+lo{:@wlan1proc[${wlan1cgroupeth1self/cgroup[keyring!ppp1}\'eth0'}}, {@uid_gt={'uid>', r1}}, {@subj_role={'subj_role', 0x3d, 'syscall\x00'}}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x7822, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x20, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='syscall\x00') preadv(r2, &(0x7f00000013c0), 0x1e3, 0x0) [ 2564.670066][ T9699] FAT-fs (loop0): bogus sectors per cluster 9 [ 2564.706233][ T9699] FAT-fs (loop0): Can't find a valid FAT filesystem 22:34:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002a28}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:34:07 executing program 1: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000040)="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") madvise(&(0x7f0000495000/0x400000)=nil, 0x404000, 0x15) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r2 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) sendfile(r3, r2, 0x0, 0x1) read$eventfd(r2, &(0x7f0000000140), 0x8) 22:34:07 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020a01ed01000270fff0", 0x16}], 0x0, 0x0) 22:34:08 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}], [], 0x2}) 22:34:08 executing program 5: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x400000, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xabbbe5304a092656, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r1, 0x0, 0x0, 0x2000073d, &(0x7f0000e68000)={0x2, 0x5e23, @broadcast}, 0xffffffffffffffca) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2f9f) shutdown(r1, 0x1) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xea0618d5bbe6c7d7) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r3 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r2, r3, 0x0, 0x1) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000180)=r4) r5 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000280)={r6, @in6={{0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast1}}}, 0x0, 0x8}, &(0x7f0000000200)=0x90) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000440)={r6, @in={{0x2, 0x4e22, @local}}}, &(0x7f0000000100)=0x84) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000180)=r7) r8 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000280)={r9, @in6={{0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast1}}}, 0x0, 0x8}, &(0x7f0000000200)=0x90) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000440)={r9, @in={{0x2, 0x4e22, @local}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000001c0)={r6, 0xdde, 0xff, 0x1, 0x5, 0x6e, 0x4, 0x9, {r9, @in={{0x2, 0x4e23, @broadcast}}, 0x6, 0xd2df, 0x11, 0x7, 0x81}}, &(0x7f00000000c0)=0xb0) 22:34:08 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x3b04, 0x0) [ 2565.202117][T10038] FAT-fs (loop0): bogus sectors per cluster 10 [ 2565.265243][T10038] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2565.450716][T10038] FAT-fs (loop0): bogus sectors per cluster 10 [ 2565.496199][T10038] FAT-fs (loop0): Can't find a valid FAT filesystem 22:34:08 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020f01ed01000270fff0", 0x16}], 0x0, 0x0) 22:34:08 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}], [], 0x3}) 22:34:08 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x3c04, 0x0) [ 2565.877934][T10404] FAT-fs (loop0): bogus sectors per cluster 15 22:34:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002a30}, @sack_perm, @mss, @mss, @mss], 0x12fb85) [ 2565.977813][T10404] FAT-fs (loop0): Can't find a valid FAT filesystem 22:34:09 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r7}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_ADDRESS={0x8, 0x3}]}, 0x28}}, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr="e379f8e9504c7a33843056f2b4b0d108"}, @FOU_ATTR_IPPROTO={0x8}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e24}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4800}, 0x24000000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x4032, 0xffffffffffffffff, 0x0) exit(0x0) 22:34:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x3d04, 0x0) 22:34:09 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0xa, 0xffffffff}]}}}]}, 0x3c}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r4 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r3, r4, 0x0, 0x1) ioctl$VIDIOC_G_DV_TIMINGS(r3, 0xc0845658, &(0x7f00000000c0)={0x0, @reserved}) [ 2566.200649][T10404] FAT-fs (loop0): bogus sectors per cluster 15 [ 2566.227615][T10404] FAT-fs (loop0): Can't find a valid FAT filesystem 22:34:09 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400021001ed01000270fff0", 0x16}], 0x0, 0x0) 22:34:09 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}], [], 0x4}) [ 2566.335584][T10531] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551615) 22:34:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x3e04, 0x0) 22:34:09 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) sendmsg$key(r1, 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) ptrace$setregs(0xf, 0x0, 0x5, &(0x7f00000001c0)) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vcs\x00', 0x103040, 0x0) sendmsg$nl_netfilter(r3, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb6e733013408ccee}, 0x4008050) fcntl$setlease(r1, 0x400, 0x0) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmat(0x0, &(0x7f0000002000/0x3000)=nil, 0x6000) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000780)=""/180) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000240)={0x5}, 0x8) socket(0x0, 0x5, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) sendto$netrom(r4, &(0x7f00000000c0)="df715f2a9b0eb52ad4dec68b520db208077b833d7a6271432158a6cc97adae7153940ea213bc062c59175e49e39bfc304093d968ae27a91c7aafb6e3d940a3b4ab17f1274f87a7db8c0d258721e9fa2af22f23331c12ea5808fdce71b8767f6a709fc31e950368fd59627706917ad7817e3c9752893536df6607b69c9f748502ecf4e76124aecbfef4a81677f7b1e5471c66fe4bc547f7e40ab6f58f", 0x9c, 0x1, &(0x7f0000000280)={{0x3, @default}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) 22:34:09 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/current\x00', 0x2, 0x0) pread64(r0, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0xab) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0x2}, 0x8) [ 2566.633837][T10733] overlayfs: unrecognized mount option "" or missing value 22:34:09 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}], [], 0x5}) 22:34:09 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400021201ed01000270fff0", 0x16}], 0x0, 0x0) 22:34:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x3f00, 0x0) [ 2567.020599][T11063] FAT-fs (loop0): bogus sectors per cluster 18 [ 2567.040317][T11063] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2567.197839][T11063] FAT-fs (loop0): bogus sectors per cluster 18 [ 2567.225417][T11063] FAT-fs (loop0): Can't find a valid FAT filesystem 22:34:10 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002a38}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:34:10 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x43, 0x0) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000000700)={[], 0x4, 0x4, 0x3, 0x0, 0x4, 0x1000, 0xd000, [], 0xf9f}) openat$tun(0xffffffffffffff9c, &(0x7f0000000a40)='/dkw/net/tun\x85', 0x4000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x18, 0x0, 0x3ff, 0x83d3, 0x0, 0x1, 0x805, [], 0x0, 0xffffffffffffffff, 0x1ffffffd}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, [], 0x0, 0x5, 0xffffffffffffff9c, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iyn\ft:\xe1\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;<\xadH\x90+[-l\xfd\n\xbc\xf5\xd7\r\xf3\xfd5.\x8dD<\x88\xc6\x0f\xd7\x14\x0f\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4N') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x802, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x0, 0xffff, &(0x7f0000000680)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000580)={'yam0\x00'}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r4, r5, 0x0, 0x1) sendto$packet(r5, &(0x7f0000000a80)="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", 0x1000, 0x4000000, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x4, 0x6, @broadcast}, 0x14) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x4e21, @loopback}, {0x306, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r7 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r6, r7, 0x0, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r9 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r8, r9, 0x0, 0x1) r10 = openat$cgroup_ro(r9, &(0x7f0000000080)='memory.eQe\x86\xf3\xab\xca', 0x7a05, 0x1700) write$cgroup_pid(r10, &(0x7f0000000000), 0x10000000d) 22:34:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x3f04, 0x0) 22:34:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000580)='/proc/self/net/pfkey\x00', 0x0, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, 0x0) dup2(r1, r0) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x4) 22:34:10 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}], [], 0x6}) [ 2567.384143][T11177] QAT: Invalid ioctl 22:34:10 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400021401ed01000270fff0", 0x16}], 0x0, 0x0) [ 2567.418566][T11179] overlayfs: unrecognized mount option "" or missing value 22:34:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x4000, 0x0) 22:34:10 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}], [], 0x7}) 22:34:10 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x100000) setsockopt$sock_void(r0, 0x1, 0x24, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) fchmod(r1, 0x20) unshare(0x2040400) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20, 0x0, 0x19}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\xe7\x01', @ifru_names='bondsSlave_1\x00\x00\x00\b'}) 22:34:10 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400023d01ed01000270fff0", 0x16}], 0x0, 0x0) 22:34:10 executing program 5: sysinfo(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r2 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r1, r2, 0x0, 0x1) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000380)='tls\x00', 0x4) recvfrom$llc(r0, &(0x7f0000000040)=""/171, 0xab, 0x1, &(0x7f0000000100)={0x1a, 0x0, 0x20, 0x37, 0x7, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) getcwd(&(0x7f0000000440)=""/82, 0x52) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x803, 0x4) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000280)={{{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev, 0x0, 0x3c}, 0x0, @in=@multicast2}}, 0xe8) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x4e23, @rand_addr=0x2}, 0x10) setxattr$security_selinux(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:clock_device_t:s0\x00', 0x24, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r3, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000003e8cf3f5cd6ddd8e586cc9bf491fbbbc37b82e1ce874b523bf50209b184c35dd965f4963c051d7aae7cc1db3351779c535553488b81236153b7cb20a7aececefeb50cacf675b9c402c1b45da507000000000000009bc366ddbe5038f0dd108013b9e9c9c1e9849846060c1069a2b036ef5e9c011e0227ebdafd38dae5d1cab3fe1e93997467d77f", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f00000003c0)) [ 2567.811589][T11504] FAT-fs (loop3): bogus logical sector size 18302 [ 2567.818971][T11504] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2567.871043][T11504] FAT-fs (loop3): bogus logical sector size 18302 [ 2567.949127][T11509] overlayfs: unrecognized mount option "" or missing value [ 2567.952887][T11506] FAT-fs (loop0): bogus sectors per cluster 61 [ 2567.976952][T11500] bond0: (slave bond_slave_1): Releasing backup interface [ 2567.997580][T11504] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2568.021195][T11506] FAT-fs (loop0): Can't find a valid FAT filesystem 22:34:11 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}], [], 0x8}) [ 2568.342530][T11821] overlayfs: unrecognized mount option "" or missing value 22:34:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002a40}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:34:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x4004, 0x0) 22:34:11 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r1 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') r2 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x3, 0x30400) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x8d0) sendfile(r0, r1, 0x0, 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r4 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r3, r4, 0x0, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, &(0x7f0000000180), 0x4) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000040)=""/197) r5 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$TUNSETOWNER(r5, 0xc0386105, 0x0) 22:34:11 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400026301ed01000270fff0", 0x16}], 0x0, 0x0) 22:34:11 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}], [], 0x9}) [ 2568.983785][T11941] FAT-fs (loop3): bogus logical sector size 18302 [ 2568.997182][T11941] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2569.028576][T11943] FAT-fs (loop0): bogus sectors per cluster 99 [ 2569.064488][T11943] FAT-fs (loop0): Can't find a valid FAT filesystem 22:34:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x4040, 0x0) [ 2569.154305][T11951] overlayfs: unrecognized mount option " " or missing value 22:34:12 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r3 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r2, r3, 0x0, 0x1) unlinkat(r2, &(0x7f0000000000)='./file0\x00', 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @dev={[], 0x25}}, 0x0, {}, 'veth0_to_bridge\x00'}) r5 = fcntl$dupfd(0xffffffffffffffff, 0x406, r4) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='hQ\xd6)\xd43\xdd\xe1\xf8\xed\xb4\xaa\xc8O\xca\xe2o\"\n\a\x8f\x94\x00'/49, 0xffc7) close(r0) timerfd_settime(r2, 0x3, &(0x7f0000000040)={{}, {0x77359400}}, &(0x7f0000000080)) 22:34:12 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020400ed01000270fff0", 0x16}], 0x0, 0x0) [ 2569.354944][T12087] FAT-fs (loop3): bogus logical sector size 18302 [ 2569.367711][T12087] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2569.538760][T12087] FAT-fs (loop3): bogus logical sector size 18302 [ 2569.591525][T12087] FAT-fs (loop3): Can't find a valid FAT filesystem 22:34:12 executing program 1: r0 = open(&(0x7f00000004c0)='./file0\x00', 0xcb6c341415cebad7, 0x21) fcntl$setlease(r0, 0x400, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x40084149, 0x718000) open(&(0x7f00003b6ff8)='./file0\x00', 0x10000000080040, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, r3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') mkdir(&(0x7f0000000140)='./file0\x00', 0x0) unshare(0x24020400) perf_event_open(&(0x7f0000000540)={0x1, 0x70, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7f, 0x1386, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xd}, 0xc06, 0x1}, 0x0, 0xd, 0xffffffffffffffff, 0x4) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000000)=0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r7 = openat$cgroup_ro(r6, 0x0, 0x0, 0x0) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r9 = open(&(0x7f00003b6ff8)='./file0\x00', 0x0, 0x0) fcntl$setlease(r9, 0x400, 0x0) r10 = open(0x0, 0x10000000080040, 0x0) fcntl$setlease(r10, 0x400, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup2(r12, r11) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r13, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r13, 0xc08c5334, &(0x7f0000000200)) r14 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/mixer\x00', 0x20c0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r14, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r16 = gettid() ptrace$setopts(0x4206, r16, 0x0, 0x0) tkill(r16, 0x3c) ptrace$cont(0x18, r16, 0x0, 0x0) ptrace$setregs(0xd, r16, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r16, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r16, r13, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r15}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r15}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r8, 0x0, 0xd, &(0x7f0000000500)='em1{bdevbdevvmnet1\x00', r15}, 0x3c1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r7, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r5, r4, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r15}, 0x30) r17 = gettid() ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={[], 0x8, 0x158, 0x0, 0x81, 0x1, r17}) r18 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r19 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r19, 0x8904, 0x0) r20 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r21 = openat$cgroup_ro(r20, 0x0, 0x0, 0x0) r22 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r23 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r24 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r25 = dup2(r24, r23) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r25, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r25, 0xc08c5334, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100), 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r22, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r21, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r19, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00'}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, r18, 0x0, 0xd, &(0x7f0000000040)='eth0.trusted\x00'}, 0x30) r26 = syz_open_procfs(0x0, &(0x7f00000001c0)='c\xcbear_refs\x00\xb0Ix\xe6\fK\xa3/\xd7\xb9IqK\xcb\xe8\fW\xafYt|a\xa3\x16\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xcaPx\xfcd\xd3\x8d\x1e){\x9dR\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\x98\xfc\xbfX\x12\x97\xb3\x1b\xea\xfa\xff\xb7gx\xa1\x96\xad\x93\xaa=-z\x06r\b\'') ioctl$VIDIOC_ENUM_FMT(r26, 0xc0405602, &(0x7f0000000000)={0x80000000, 0x9, 0x2, "2a401be47ce62357cc7f799ecb396ab8ab5a332deb20a5b0b90af1981e334344", 0x929883f5}) pkey_alloc(0x0, 0x0) 22:34:12 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}], [], 0xa}) 22:34:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x4104, 0x0) 22:34:12 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020402ed01000270fff0", 0x16}], 0x0, 0x0) [ 2569.986376][T12272] overlayfs: unrecognized mount option " [ 2569.986376][T12272] " or missing value [ 2570.040163][T12275] FAT-fs (loop3): bogus logical sector size 18302 [ 2570.074373][T12275] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2570.205920][T12275] FAT-fs (loop3): bogus logical sector size 18302 22:34:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002a48}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:34:13 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020403ed01000270fff0", 0x16}], 0x0, 0x0) 22:34:13 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}], [], 0xb}) 22:34:13 executing program 1: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@quiet='quiet'}]}) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/185) [ 2570.258317][T12275] FAT-fs (loop3): Can't find a valid FAT filesystem 22:34:13 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x4204, 0x0) [ 2570.360671][T12495] overlayfs: unrecognized mount option " " or missing value 22:34:13 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020404ed01000270fff0", 0x16}], 0x0, 0x0) [ 2570.518524][T12497] hfs: can't find a HFS filesystem on dev loop1 [ 2570.609967][T12616] FAT-fs (loop3): bogus logical sector size 18302 [ 2570.680274][T12616] FAT-fs (loop3): Can't find a valid FAT filesystem 22:34:13 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}], [], 0xc}) [ 2570.871538][T12616] FAT-fs (loop3): bogus logical sector size 18302 [ 2570.997451][T12616] FAT-fs (loop3): Can't find a valid FAT filesystem 22:34:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x4304, 0x0) 22:34:14 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020405ed01000270fff0", 0x16}], 0x0, 0x0) 22:34:14 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x10000000000004}, 0x1c) read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/27, 0x1b) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r3 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r2, r3, 0x0, 0x1) accept4$alg(r2, 0x0, 0x0, 0x80000) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r5, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) r6 = fcntl$dupfd(r4, 0x406, r5) connect$l2tp(r1, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x2, 0x1, 0x2, 0x2}}, 0x2e) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r8 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r7, r8, 0x0, 0x1) ioctl$KVM_DIRTY_TLB(r8, 0x4010aeaa, &(0x7f0000000040)={0x101, 0x3}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r11, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) msgget$private(0x0, 0x5c0) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r13 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r12, r13, 0x0, 0x1) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000080)=r13, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) sendmmsg(r1, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000780)="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", 0xaf8}, {&(0x7f0000000140)='o', 0x180204}, {&(0x7f0000000380)="0ae4b4615a51d552901fda3f132c2c402f734ca3a349113b63e0a4b8186d6dbf4a7e572c08189123a71d21df30a99e23888dbe9a3197548087f161f1f1699369c7b000e75398fe3c76f1d4c450eb450e00efbabfdbb224c31bcafc049ccd3e08b238315e8083bcfec4d06734cadd8ce1e5c58e9f7454c809", 0x78}], 0x3}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)="e4f43d171135a5b21ebf519ff69248487fed5bd9ec12ef35bb7611fe050c5743a58fea15bfdc79fe21a56de097e9a8512f10eb8ca818d28ac31ca177b8607a2022962a5eb19ec00d3839151c2ced74326b5e0213bbddef808f", 0x59}, {&(0x7f0000002780)}], 0x2}}], 0x2, 0x0) [ 2571.150690][T12723] overlayfs: unrecognized mount option " " or missing value [ 2571.258825][T12727] FAT-fs (loop3): bogus logical sector size 18302 [ 2571.265315][T12727] FAT-fs (loop3): Can't find a valid FAT filesystem 22:34:14 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}], [], 0xd}) [ 2571.580578][T12727] FAT-fs (loop3): bogus logical sector size 18302 [ 2571.587098][T12727] FAT-fs (loop3): Can't find a valid FAT filesystem 22:34:14 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020406ed01000270fff0", 0x16}], 0x0, 0x0) 22:34:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002a50}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:34:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x4404, 0x0) 22:34:14 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x2, 0x0, 0x3, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}]}, 0x58}}, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x410122, 0x0) fspick(r1, &(0x7f0000000040)='./file0\x00', 0x1) r2 = socket(0x1, 0xa, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x4, @rand_addr="d8cd4906154abcf2f24e0e995a01293d", 0xffffffff}, @in6={0xa, 0x4e22, 0x9, @mcast2, 0x7fff}, @in6={0xa, 0x4e20, 0x8, @mcast2, 0xffffffff}], 0x54) 22:34:14 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}], [], 0x10}) 22:34:14 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020407ed01000270fff0", 0x16}], 0x0, 0x0) [ 2572.047624][T13055] FAT-fs (loop3): bogus logical sector size 18302 [ 2572.054277][T13055] FAT-fs (loop3): Can't find a valid FAT filesystem 22:34:15 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[{0x110, 0x113, 0x2, "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"}, {0xf8, 0x111, 0x401, "ceaf5879078014c252fb32b53d2a62afc231a373a932d58a2dcda1b09f408db6050ede94998ecedbd85c8ada306e5f0e179bcad7b697b55b970cf388a9362535f10287240ffa99145a85371c5cdadf528fb10b08c879b6b4f9ec0fc5850699d53365ee88ab3b2054af2d774d8125b7764c9863adb7c48d699abdc8deab78ad931ebfd1684654c7c787c04980822b374b260299ca369271fe5d00c1596ae365b73e75ca9bc105d4b40845cbd051454d0dc5cfc6b454c15264cce6f0ac49bc9854058f64a8622eb3840cb50b095fdf76419005064e85b9e372c4e1ef6badccdc9e307e8faace5c74eb"}, {0xe8, 0x1e, 0x25, "bd8276d900c58f410d8b44c37bbbd24a03d7152424f7b2b57c82e86fc7e8f648c0e856bfab22a402b7eba1bc12ec57bf4c1adc5f1d454edfdadd52350625126eff1faa176e6a7bd12e02723c8f630c5352aec9220acd18cf17359204bd498f187bf6ddf136871060594a132a759f7db16b43a0ea70e76fe95dcb94199c3a82026c0d4e766dc6499291230e30c7d6d8022fbe9b575fbf71652044c828275d039a5aebb048b9950f71ea53232db86a462290a4ebedf67f80b8cb0b2fe3aed0c4293b2e5c406db96a3353cb6e9dd0cfe5682f4ecfd0a1713f"}], 0x2f0}, 0x40000) getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r9 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r8, r9, 0x0, 0x1) ioctl$ASHMEM_SET_NAME(r9, 0x41007701, &(0x7f0000000100)='nodev\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000005ffffa6fffff7", @ANYRES32=r7, @ANYBLOB="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"], 0x3}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x21f) close(r5) socket$inet(0x10, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x115081, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r5, 0x0, 0x4ffe0, 0x0) 22:34:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x4504, 0x0) [ 2572.298081][T13163] overlayfs: unrecognized mount option "" or missing value [ 2572.370941][T13172] FAT-fs (loop3): bogus logical sector size 18302 [ 2572.377665][T13172] FAT-fs (loop3): Can't find a valid FAT filesystem 22:34:15 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020408ed01000270fff0", 0x16}], 0x0, 0x0) [ 2572.471724][T13172] FAT-fs (loop3): bogus logical sector size 18302 22:34:15 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}], [], 0x48}) [ 2572.529105][T13172] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2572.724672][T13372] overlayfs: unrecognized mount option "H" or missing value 22:34:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x4604, 0x0) 22:34:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x4800, 0x0) 22:34:15 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020409ed01000270fff0", 0x16}], 0x0, 0x0) [ 2573.143452][T13497] FAT-fs (loop3): bogus logical sector size 18302 [ 2573.184410][T13497] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2573.307684][T13497] FAT-fs (loop3): bogus logical sector size 18302 [ 2573.334550][T13497] FAT-fs (loop3): Can't find a valid FAT filesystem 22:34:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002a58}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:34:16 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r2 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendto(r2, &(0x7f0000000380)="f2596f462965413b60ec871b0485e58b88a962c62a3f414398f9b5111d7e46f5ba73434e054d7da19ea25904170b27844fdf2e015475de32ed083850600af2374c70d1cb99c1223efdbe3230", 0x4c, 0x10000040, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @empty}, 0x2, 0x2, 0x4, 0x3}}, 0x80) sendfile(r1, r2, 0x0, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000480)=0xff, 0x4) ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000000000)) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) sendmmsg(r3, &(0x7f0000005c00), 0x1, 0x0) dup3(r0, r3, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r4, r5, 0x0, 0x1) ioctl$VIDIOC_DV_TIMINGS_CAP(r4, 0xc0905664, &(0x7f0000000280)={0x0, 0x0, [], @bt={0xeeb, 0x6, 0xb8, 0x2, 0x1, 0x9ec6, 0x5, 0x8}}) 22:34:16 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}], [], 0x4c}) 22:34:16 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e6661740002040aed01000270fff0", 0x16}], 0x0, 0x0) 22:34:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x4c00, 0x0) 22:34:16 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}], [], 0x5c}) [ 2573.807433][T13695] FAT-fs (loop3): bogus logical sector size 18302 [ 2573.833934][T13695] FAT-fs (loop3): Can't find a valid FAT filesystem 22:34:16 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e6661740002040bed01000270fff0", 0x16}], 0x0, 0x0) [ 2573.930389][T13695] FAT-fs (loop3): bogus logical sector size 18302 [ 2573.981414][T13695] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2573.986356][T13736] overlayfs: unrecognized mount option "\" or missing value 22:34:17 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r2 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendto(r2, &(0x7f0000000380)="f2596f462965413b60ec871b0485e58b88a962c62a3f414398f9b5111d7e46f5ba73434e054d7da19ea25904170b27844fdf2e015475de32ed083850600af2374c70d1cb99c1223efdbe3230", 0x4c, 0x10000040, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @empty}, 0x2, 0x2, 0x4, 0x3}}, 0x80) sendfile(r1, r2, 0x0, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000480)=0xff, 0x4) ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000000000)) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000f41b25e406d58937e7e899e0524843c9577f89f71ebddf077798df8826b7b47ab4a76907477a209522adca7e5454b7dec9d9a67305c04a8ccffca53df7d9b4b25cc84628348a24593c5dbdf200796a8fd217367c017f76f131c8693a790137471be91470ffc97d2c3545b812f7f58f436706f17b26ae3208e5809f51528f2436610c52b724993141a5cb7a0a9c3dca0a16787a4d0c82e2d9829219e3c96b000000002150a4058a8e4347e13f94be6d87fc7ec9abb88b1a03b8d9e4eac3f0076580f6e76aec101fc935e5c25fac970f73d3fe7d20b0b91a5b4046cf69b3a1071a96f3d5fdf7a8e7b907d236e91a85b6e2a13b6b5eb558d081f5b2244a7c5669b224b8000000fc000000000000000000000000000000000000000000000062085d96e0f8d13a66b83352292ca675dd568ebe289a9faab13aaa2b5962ddf78443ef53f79be433fdd3f812e39e7439ca9790ff0fb160a9b9f307aed734438a8a9626fcb6f20c2ee611082fe2a1bda3"], 0x18}}], 0x1, 0x0) sendmmsg(r3, &(0x7f0000005c00), 0x1, 0x0) dup3(r0, r3, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r4, r5, 0x0, 0x1) ioctl$VIDIOC_DV_TIMINGS_CAP(r4, 0xc0905664, &(0x7f0000000280)={0x0, 0x0, [], @bt={0xeeb, 0x6, 0xb8, 0x2, 0x1, 0x9ec6, 0x5, 0x8}}) 22:34:17 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x6000, 0x0) 22:34:17 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e6661740002040ced01000270fff0", 0x16}], 0x0, 0x0) 22:34:17 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002a60}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:34:17 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}], [], 0x60}) 22:34:17 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e6661740002040fed01000270fff0", 0x16}], 0x0, 0x0) 22:34:17 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x6800, 0x0) 22:34:17 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r2 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendto(r2, &(0x7f0000000380)="f2596f462965413b60ec871b0485e58b88a962c62a3f414398f9b5111d7e46f5ba73434e054d7da19ea25904170b27844fdf2e015475de32ed083850600af2374c70d1cb99c1223efdbe3230", 0x4c, 0x10000040, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @empty}, 0x2, 0x2, 0x4, 0x3}}, 0x80) sendfile(r1, r2, 0x0, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000480)=0xff, 0x4) ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000000000)) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) sendmmsg(r3, &(0x7f0000005c00), 0x1, 0x0) dup3(r0, r3, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r4, r5, 0x0, 0x1) ioctl$VIDIOC_DV_TIMINGS_CAP(r4, 0xc0905664, &(0x7f0000000280)={0x0, 0x0, [], @bt={0xeeb, 0x6, 0xb8, 0x2, 0x1, 0x9ec6, 0x5, 0x8}}) [ 2574.771354][T13865] overlayfs: unrecognized mount option "`" or missing value 22:34:17 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}], [], 0x68}) 22:34:17 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x6c00, 0x0) 22:34:18 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020410ed01000270fff0", 0x16}], 0x0, 0x0) [ 2575.300369][T13991] overlayfs: unrecognized mount option "h" or missing value 22:34:18 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x7400, 0x0) 22:34:18 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r2 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendto(r2, &(0x7f0000000380)="f2596f462965413b60ec871b0485e58b88a962c62a3f414398f9b5111d7e46f5ba73434e054d7da19ea25904170b27844fdf2e015475de32ed083850600af2374c70d1cb99c1223efdbe3230", 0x4c, 0x10000040, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @empty}, 0x2, 0x2, 0x4, 0x3}}, 0x80) sendfile(r1, r2, 0x0, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000480)=0xff, 0x4) ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000000000)) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) sendmmsg(r3, &(0x7f0000005c00), 0x1, 0x0) dup3(r0, r3, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r4, r5, 0x0, 0x1) ioctl$VIDIOC_DV_TIMINGS_CAP(r4, 0xc0905664, &(0x7f0000000280)={0x0, 0x0, [], @bt={0xeeb, 0x6, 0xb8, 0x2, 0x1, 0x9ec6, 0x5, 0x8}}) 22:34:18 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}], [], 0x6c}) 22:34:18 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020414ed01000270fff0", 0x16}], 0x0, 0x0) [ 2575.795871][T14121] overlayfs: unrecognized mount option "l" or missing value 22:34:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002a68}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:34:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x7526, 0x0) 22:34:19 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r2 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendto(r2, &(0x7f0000000380)="f2596f462965413b60ec871b0485e58b88a962c62a3f414398f9b5111d7e46f5ba73434e054d7da19ea25904170b27844fdf2e015475de32ed083850600af2374c70d1cb99c1223efdbe3230", 0x4c, 0x10000040, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @empty}, 0x2, 0x2, 0x4, 0x3}}, 0x80) sendfile(r1, r2, 0x0, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000480)=0xff, 0x4) ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000000000)) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) sendmmsg(r3, &(0x7f0000005c00), 0x1, 0x0) dup3(r0, r3, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r4, r5, 0x0, 0x1) ioctl$VIDIOC_DV_TIMINGS_CAP(r4, 0xc0905664, &(0x7f0000000280)={0x0, 0x0, [], @bt={0xeeb, 0x6, 0xb8, 0x2, 0x1, 0x9ec6, 0x5, 0x8}}) 22:34:19 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e6661740002043ded01000270fff0", 0x16}], 0x0, 0x0) 22:34:19 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}], [], 0x74}) [ 2576.556360][T14250] overlayfs: unrecognized mount option "t" or missing value 22:34:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x7a00, 0x0) 22:34:19 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}], [], 0x7a}) 22:34:19 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed00000270fff0", 0x16}], 0x0, 0x0) 22:34:19 executing program 1: syz_mount_image$xfs(&(0x7f0000000280)='_\n\x00\xb1', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)) 22:34:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x7b26, 0x0) [ 2576.992225][T14367] FAT-fs (loop0): bogus number of FAT structure [ 2577.009976][T14365] overlayfs: unrecognized mount option "z" or missing value [ 2577.017515][T14367] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2577.171867][T14367] FAT-fs (loop0): bogus number of FAT structure [ 2577.196811][T14367] FAT-fs (loop0): Can't find a valid FAT filesystem 22:34:20 executing program 1: r0 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x3, 0x0, @empty}, 0x1c) socket$inet_udplite(0x2, 0x2, 0x88) setresuid(0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 22:34:20 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x9}}, {@max_read={'max_read', 0x3d, 0x1}}, {@blksize={'blksize', 0x3d, 0x200}}]}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f8175732c776f726b6469723d2e2f66686c65312c40030000000000003d2e2f66696c65302c00"]) [ 2577.700992][T14493] fuse: blksize only supported for fuseblk [ 2577.735356][T14493] overlayfs: unrecognized mount option "@" or missing value 22:34:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002a70}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:34:21 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed02000270fff0", 0x16}], 0x0, 0x0) 22:34:21 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0xedc0, 0x0) 22:34:21 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x3143, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) umount2(&(0x7f0000000080)='./file1\x00', 0x4) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r3 = syz_open_dev$swradio(&(0x7f0000001040)='/dev/swradio#\x00', 0x1, 0x2) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x96}}, {0x6, @random="fe8719c177ab"}, 0x50, {0x2, 0x0, @broadcast}, 'dummy0\x00'}) getsockname(r4, &(0x7f00000011c0)=@hci={0x1f, 0x0}, &(0x7f0000001240)=0x80) sendmsg$nl_route_sched(r3, &(0x7f0000001300)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2080040}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="280000002a0000022bbd7000ffdb00000000000000", @ANYRES32=r5, @ANYBLOB="080000000a001000fffff3ff"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x814) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r2, r6, 0x0, 0x1) ioctl$NBD_SET_TIMEOUT(r6, 0xab09, 0xd9c6) 22:34:21 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed03000270fff0", 0x16}], 0x0, 0x0) 22:34:21 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0xff00, 0x0) [ 2578.406519][T14617] QAT: Invalid ioctl [ 2578.443166][T14617] overlayfs: upper fs is r/o, try multi-lower layers mount 22:34:21 executing program 1: socket$netlink(0x10, 0x3, 0x8000000004) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x158}], 0x1) 22:34:21 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0xff0f, 0x0) 22:34:21 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed04000270fff0", 0x16}], 0x0, 0x0) 22:34:21 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) keyctl$get_persistent(0x16, r2, 0x0) mount$overlay(0x400000, &(0x7f0000000200)='./file1\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'overlay\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@euid_gt={'euid>', r2}}, {@fsname={'fsname'}}, {@hash='hash'}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@fsname={'fsname'}}]}) 22:34:21 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0xfffffffffffffffc) fsetxattr$security_capability(r0, &(0x7f0000000000)='security.capability\x00', 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x111441, 0x114) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x2, {}, 'dummy0\x00'}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f00000000c0)={0x30000007}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000200)="2eb2104890524912fb921faf4876aba1967b3f5f249421d4f2c9282e4740563ffc41eee1ccaac8f5789a3623a58bf346fb5cc25438fe569390032b94a6489f266100f0fb5aab2b2442d81ca888f4c8c3aa2b674f47c63cb5d6cb0fd6e243a0", 0x5f}], 0x1) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0xa198) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x208583, 0x140) ioctl$KDGKBLED(r3, 0x4b64, &(0x7f0000000140)) 22:34:21 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x407ff, 0x0) 22:34:22 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002a78}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:34:22 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed05000270fff0", 0x16}], 0x0, 0x0) 22:34:22 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65312c75707065726469723d2e2f66696c65302c0063164d7cb3018cce5143721c474d20cef320b4bb343a5b4d72431098b11202fba00d6e481d017ea7167272ce1128f5b900000000000000051b3d2fc7a86c34a3383febe9660baf38e16770cdcfe9"]) socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000540)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r3 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r2, r3, 0x0, 0x1) r4 = openat$cgroup_ro(r2, &(0x7f00000005c0)='cgroup.stat\x00', 0x0, 0x0) ioctl$IMCTRLREQ(r4, 0x80044945, &(0x7f0000000600)={0x4004, 0x5, 0x200, 0x6}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="a6cc3504", @ANYRES16=r6, @ANYBLOB="0101000000000000000011000000"], 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x52372f42eb89d4bf}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, r6, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7f}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r1, r7, 0x0, 0x1) r8 = gettid() ptrace$setopts(0x4206, r8, 0x0, 0x0) tkill(r8, 0x3c) ptrace$cont(0x18, r8, 0x0, 0x0) ptrace$setregs(0xd, r8, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r8, 0x0, 0x0) syz_open_procfs(r8, &(0x7f0000000580)='net/ipv6_route\x00') sendmsg$can_raw(r7, &(0x7f0000000280)={&(0x7f0000000080), 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@canfd={{0x2, 0x1, 0x0, 0x1}, 0x40, 0x0, 0x0, 0x0, "73eb839ddbff6e520896b06f60e478073ca88dcfbe06f98c6abd8496089b74bca6b2dc405cf538ca072ee95b65bedbd6ea626bd3b76054de7b9a7f0eed341003"}, 0x48}, 0x1, 0x0, 0x0, 0x4814}, 0x4) 22:34:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x40800, 0x0) 22:34:22 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) connect(r0, &(0x7f0000000380)=@ipx={0x4, 0x1, 0xfff, "00001300", 0x1}, 0x80) syncfs(r1) prctl$PR_GET_DUMPABLE(0x3) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) clone(0x8000000, &(0x7f00000000c0)="cddb839d92c970c7531134b266f6b7050cc421d170d7", &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="9a5164eb34cff31e8fa2609c2662f9254abcd962c7b01a14a70594d624307034f3e62cddf99202053064fc7f924ed1e5eea4b6420a5c64a7427c45abdf79edf3963a8bf54a26e459fab38a0d2faa7936c7b9e7c02e0a524737dd128353a7228351583198ad1b4c2fdcc889c08d732545f245813e84df2e") r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000300)='/proc/capi/capi20ncci\x00', 0x101004, 0x0) ioctl$PPPIOCSMRRU(r3, 0x4004743b, &(0x7f0000000340)=0x40) write(r2, &(0x7f00000008c0)="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", 0x1c0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5b0, 0x1e8, 0x0, 0x0, 0x2f8, 0x2f8, 0x518, 0x518, 0x518, 0x518, 0x518, 0x6, &(0x7f0000000280), {[{{@ip={@local, @multicast2, 0x0, 0xff, '\x00', 'ifb0\x00', {}, {0xff}, 0x84, 0x0, 0x10}, 0x0, 0x98, 0xd8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x4, @ipv4=@dev={0xac, 0x14, 0x14, 0x1e}, 0x4e21}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@unspec=@addrtype1={0x28, 'addrtype\x00', 0x1, {0x9, 0x400, 0x17}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1d}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x18}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xc}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x2}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x60, 0x3f}}}, {{@uncond, 0x0, 0xc0, 0x100, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00'}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x8, 0xfffffbff, @ipv6=@mcast2, 0x4e24}}}, {{@uncond, 0x0, 0xe0, 0x120, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x3}}, @common=@socket0={0x20, 'socket\x00'}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x6, 0x8, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4e20}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x610) pipe(0x0) socket$inet6(0xa, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) [ 2579.626779][T15161] overlayfs: upper fs is r/o, try multi-lower layers mount 22:34:22 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0xc5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000480)=ANY=[@ANYBLOB="fc578aff2d59b655cb6e3b180166000000000000000038f5030884e4854713824e7f4d839d8d2dd6503409c2fb979885d58b725623538b7a9d6b49fb36728c14a5c7239be4078cae91", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2cb3"]) mount$overlay(0x400000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x6820, &(0x7f0000000540)=ANY=[@ANYBLOB="6c6fa9ab000000723d2e2f6275732c696ed7a260bfd0f51ef3ae6465783d6f66662c78696e613d6175d3c5f11a"]) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r2 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r1, r2, 0x0, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r2, 0xc0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=0x7, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x3, 0x2}, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x5, 0x6}, &(0x7f0000000200)=0x6, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5}}, 0x10) 22:34:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x80400, 0x0) 22:34:22 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed06000270fff0", 0x16}], 0x0, 0x0) 22:34:22 executing program 1: perf_event_open(&(0x7f0000000600)={0x1, 0x43b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x1000004001) close(0xffffffffffffffff) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 22:34:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0xe0000, 0x0) 22:34:23 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed07000270fff0", 0x16}], 0x0, 0x0) 22:34:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x1000000, 0x0) [ 2580.616242][T15520] FAT-fs (loop3): bogus logical sector size 18302 [ 2580.708922][T15520] FAT-fs (loop3): Can't find a valid FAT filesystem 22:34:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002a80}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:34:23 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000140)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:34:23 executing program 1: perf_event_open(&(0x7f0000000600)={0x1, 0x43b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x1000004001) close(0xffffffffffffffff) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 22:34:23 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed08000270fff0", 0x16}], 0x0, 0x0) 22:34:23 executing program 5: r0 = creat(0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, 0x0) syz_open_dev$mouse(0x0, 0xa3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0x100000001) ftruncate(r3, 0x200004) sendfile(r1, r3, 0x0, 0x80001d00c0d0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r4, r5, 0x0, 0x1) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000180)=r6) r7 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r10 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r9, r10, 0x0, 0x1) ioctl$DRM_IOCTL_AGP_ALLOC(r10, 0xc0206434, &(0x7f0000000140)={0xfffffffffffffffb, 0x0, 0x10000, 0x3ff}) ioctl$DRM_IOCTL_SG_FREE(r5, 0x40106439, &(0x7f00000001c0)={0x8f1, r11}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000280)={r8, @in6={{0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast1}}}, 0x0, 0x8}, &(0x7f0000000200)=0x90) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000440)={r8, @in={{0x2, 0x4e22, @local}}}, &(0x7f0000000100)=0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000000)={0x1ff, 0xdd55, 0x602, 0x10000, 0x1, 0x6, 0x58, 0x5, r8}, 0x20) [ 2580.910538][T15520] FAT-fs (loop3): bogus logical sector size 18302 [ 2580.949068][T15520] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2580.982358][T15528] overlayfs: upper fs is r/o, try multi-lower layers mount 22:34:24 executing program 1: perf_event_open(&(0x7f0000000600)={0x1, 0x43b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x1000004001) close(0xffffffffffffffff) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 22:34:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x2000000, 0x0) 22:34:24 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) dup(r1) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r4}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_ADDRESS={0x8, 0x3}]}, 0x28}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000940)=@updpolicy={0xfc, 0x19, 0x8, 0x0, 0x0, {{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r4}, {0x0, 0x0, 0x0, 0x100000001}, {0x0, 0x0, 0x68}}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x0, 0xd4}, 0xe, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x4}]}]}, 0xfc}}, 0x0) 22:34:24 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed09000270fff0", 0x16}], 0x0, 0x0) 22:34:24 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$bpf(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='bpf\x00', 0x0, &(0x7f0000000380)={[{@mode={'mode', 0x3d, 0x9cc}}, {@mode={'mode', 0x3d, 0x1}}], [{@subj_user={'subj_user', 0x3d, 'fd'}}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x63, 0x36, 0x31, 0x61, 0x36, 0x33, 0x55], 0x2d, [0x2f, 0x65, 0x66, 0x63], 0x2d, [0x531a81ac105677f7, 0x37, 0x31, 0x62], 0x2d, [0x74, 0xf, 0x65, 0x63], 0x2d, [0x66, 0x64, 0x30, 0x61, 0x63, 0x35, 0x1a, 0x34]}}}]}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r1 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x400, 0x200d40) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000200)={0x1, 0xffff}) [ 2581.417664][T15851] FAT-fs (loop3): bogus logical sector size 18302 [ 2581.424385][T15851] FAT-fs (loop3): Can't find a valid FAT filesystem 22:34:24 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000040)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x35f4800000000, 0x0, 0x2, 0xe, 0x1, "45378681bb3d5c11e006418b88e51b018c672fc56fa2ebf4a556e989e80b5ea7bdcc1d61d9feda5ed821af63d65d8bfdfd727583e6eb9898608d8a6fe33330dd", "b2ba8998cbb7b23e6e21f2dc2e8b8b80259f2d048842934eb9839e6dc2362e22c11f7241f5f65703ea6633a63d94311725fb81b886a7befda0f6ccd25a2229e0", "31542bc326d9b47f8a0f6110c666b777886806fbcaddd38cf7d61ada51293c8b", [0x942, 0x8]}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) r3 = socket$nl_route(0x10, 0x3, 0x0) dup3(r3, r2, 0x0) [ 2581.566503][T15851] FAT-fs (loop3): bogus logical sector size 18302 [ 2581.566648][T15918] overlayfs: upper fs is r/o, try multi-lower layers mount [ 2581.614815][T15851] FAT-fs (loop3): Can't find a valid FAT filesystem 22:34:24 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) getresuid(&(0x7f0000000140)=0x0, &(0x7f0000000180), &(0x7f0000000200)) mount$fuse(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080)='fuse\x00', 0x80008, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'ro\xeft2\x9fe\x00', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'E\xaek\"\x83j\xfdZ'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x10000}}, {@max_read={'max_read', 0x3d, 0x9}}]}}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) fcntl$setflags(r2, 0x2, 0x1) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65312c75707065726469723d2e2f92b18260e232a6"]) [ 2581.977577][T16074] overlayfs: failed to resolve './`2': -2 22:34:25 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002a88}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:34:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x10004, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) socket$inet6_tcp(0xa, 0x1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x80000, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'lapb0\x00', 0x40000003}, 0x18) 22:34:25 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed0a000270fff0", 0x16}], 0x0, 0x0) 22:34:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x3000000, 0x0) 22:34:25 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000080)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f0000000280)={0x2, 0x4e1f, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000830704ac14140000"], 0x18}}], 0x2, 0x0) 22:34:25 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) keyctl$get_persistent(0x16, r2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) keyctl$get_persistent(0x16, r4, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r6 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r5, r6, 0x0, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000580)={{{@in, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000080)=0xe8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {r8, 0x0, 0x0, @in6={0xa, 0x4e21, 0xc9c, @dev={0xfe, 0x80, [], 0x2a}, 0x4}}}, 0x90) mount$fuse(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='fuse\x00', 0x1000000, &(0x7f00000007c0)={{'\x02!', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}], [{@fowner_gt={'fowner>', r7}}, {@smackfsroot={'smackfsroot', 0x3d, 'em1-}$lo\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@dont_hash='dont_hash'}, {@smackfsfloor={'sor\x00', 0x3d, 'fuse\x00'}}, {@fowner_gt={'fowner>', r4}}]}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f627533a75595b549032164c52c776f726b646972faffffffffffffff2c75707065726469723d"]) 22:34:25 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="2bbd32b0231c84c37a3185ab244d5af77137d515b8ecf393e72698391f92d98cf6e50938700a0c46adc04dd82d361b6063e0a125e26ea8b5488f165724072f9b4700329594b11295a11f8414d8ad4224364c8137d825fe687b", 0x59, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000200)={r0, 0x74, 0x5a}, &(0x7f0000000240)={'enc=', 'pkcs1', ' hash=', {'crct10dif-generic\x00'}}, &(0x7f00000002c0)="88ba0dc2135514113d8f2d74e4b1713929a54331355b6b2a27c849d5dce7d72caa94aa690f9c2c2348dddd7c5701d64db77a246ecfb7a8ab5b8c9f576de7a233e0c77de38c8fb5aaec9ee66d5629025bcd126a20ddd7d94a04dc65abe94ae1c82f3e9452e0bf9256e1134084ed6c74344a081ada", &(0x7f0000000340)=""/90) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$RTC_WIE_OFF(r1, 0x7010) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x4000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) [ 2582.475773][T16293] FAT-fs (loop3): bogus logical sector size 18302 [ 2582.512237][T16293] FAT-fs (loop3): Can't find a valid FAT filesystem 22:34:25 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed0b000270fff0", 0x16}], 0x0, 0x0) [ 2582.608448][T16293] FAT-fs (loop3): bogus logical sector size 18302 [ 2582.615014][T16293] FAT-fs (loop3): Can't find a valid FAT filesystem 22:34:25 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x193001, 0x0) bind$unix(r0, &(0x7f0000000140)=@file={0x0, './bus/file0\x00'}, 0x6e) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 2582.648654][ T23] audit: type=1804 audit(1574375665.609:100): pid=16387 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir455474171/syzkaller.wYNXD2/3710/bus" dev="sda1" ino=17480 res=1 22:34:25 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x400000) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x18) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f758e5f6b643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 2582.891801][T16608] fuse: Unknown parameter 'grou_kd' [ 2582.899099][ T23] audit: type=1800 audit(1574375665.659:101): pid=16387 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17480 res=0 22:34:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x4000000, 0x0) 22:34:26 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed0c000270fff0", 0x16}], 0x0, 0x0) [ 2583.328394][T16820] FAT-fs (loop3): bogus logical sector size 18302 [ 2583.335112][T16820] FAT-fs (loop3): Can't find a valid FAT filesystem 22:34:26 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002a90}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:34:26 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r0, &(0x7f00000005c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$getflags(r1, 0x40a) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000140)={0x8, 0x0, 0x19, 0x5}) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x10000000000004}, 0x1c) pipe(0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20ncci\x00', 0x400, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r5, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/cuse\x00', 0x2, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r7, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000d80), 0x4) r8 = syz_open_dev$amidi(&(0x7f0000000dc0)='/dev/amidi#\x00', 0xd9, 0x2000) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000e00)={0xffffffffffffffff}, 0xc) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r10, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r11, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) r12 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/vsock\x00', 0xd00, 0x0) r13 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) r14 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) r15 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r15, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) r16 = syz_open_dev$swradio(&(0x7f0000000e80)='/dev/swradio#\x00', 0x1, 0x2) r17 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r17, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) r18 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r18, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) sendmsg$unix(r2, &(0x7f0000000f80)={&(0x7f0000000640)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000c80)=[{&(0x7f00000006c0)="e725cb3f174ffa1799aebb6763263354764a613b13351be7c0229dc397d120396a907e6ffd73fc9e7b0557fdfe1fece8fe1f6c5afe661456cac50823d951eca60ef15e93b60a1f018f62e387049cdd9301844db3ba3db2c712b0e69a811a81fe145d0600d502b58aee4a5d9d8e3cf7cae6b05f63a33c38d2411cdae4534d7bea417dec5f7ec5752d0f13657387ea6a9bf1abc58db3a1d6ad2af46a6f5d5d8103a002eb8177f56f69e3a87f6c1c6e3c7408bcb20103201673361b57e0e957c78d8a835c1d3945053ab90695afffbd220c888ba76e3302b5e407e0ca520f03ef96f3f6c1d0e79d9ef63742b9792f2481f07abd2599", 0xf4}, {&(0x7f00000007c0)="21c898049e9a6625f69284db74c6b6d0cea8b29426ac0e86742179500574f41dc67a759112d83ac412b33e5bad794aab36b96437edfcee5d1ea2c47d0cc67c1a0ebc336c53085d769ddc5226ac847f5c55ce18d4ed9fde91e133a87f39da7ebbb2e4309b31880187ddc1609873177645adb60fa483d6ca4752ff8b5006c32eb484418aee6e9d4598acb9d4a2dc4f7f64368e6e8e6c765683384822da00c5701be46f202f94ac1df69f8d93dc76dca7e3e260127e835d06edd77b61c50547f7", 0xbf}, {&(0x7f0000000880)="a027eea482590eeb54d35f6540da97e930589330d3cd5067ed2c6a558933a8201b6147a2427e92fac73f3798829578c95184734e735b8efb19b4f8536be9ccfdef8f5d9763933818779b8a04f0ba6a178c609c1b9d3ba385f9eeb48e6d3245ac19b85cc23fbd61d4d953286bfb32cc7c823450e158731cd9a74de431bdbc9bc44ddd2be35e4d8cc0ffbc1007ba526fbffaaa11e61ec0f70eed20b31941980f959430135393d27907ffe89788d59555609f97fe58bb55fd27239baca8335e06cf53d33b54f603b1e27efb4e79c0cd2f899987ec8d8a", 0xd5}, {&(0x7f0000000980)="252ea14363d62ffb969268be63fd922aa6b5900ae571ab4652a733308ab0f723da4696b38e6ff69347acff9ede04023482629a08fc826836333db52a9c4c3fbe4bb7779b9d121bb3c315abe0acbe0fcd534daa30cab743bc858ee8320cdd703dbf55f2d86f30c06d33c1e1d1d076fb91e79a2ceec2d5cd747d5babccd4d79cf5ca799eaa1b63f1866e6d49f3e22ac526e11627f993a8ec4c41c8b71ae44b46ed7b48872a20df39ad46d54353d0ef67139b783581cfb4f4de7dc70d4f644ec74ae699e04ec7dc1b08c39845", 0xcb}, {&(0x7f00000004c0)="537ce962e769e91040c229badd21da07f3f258055c", 0x15}, {&(0x7f0000000a80)="0fcaf2b270381cce093b83d015f7546a186a0741cf2ab215a6755f8bc2cb93cf8962f6ec8f4904270ae9f1d2b320a0b9a548cf8431464f45313ba9df900ec69755dbe1843034b7687258bc4e5e0df93b250537ca83c9e530048e858825c8bc81c3f324a1dbfbc3480513602707f700d4a18a422f8b0264e40631a854121b4cae2663eb193b0628ac6b0319363199bc5290d2ebb61ee8bea7f25d56", 0x9b}, {&(0x7f0000000b40)="67aeab6d9c6bff2d25e2a7cac3f0c82adede85b24c21de019e1dc13392b3524b6bb12d", 0x23}, {&(0x7f0000000b80)="6afa9876460e2cb3e00ac099a88b32b924b7af5fea80c793cba16b9bb1e36ddb5f70e39d663fe5709ed10932f3a86860b3e2b3af9a4c6a9ef0549c2ebc5a7a857c1cdf3cdbcd46807057bd731892fe4293c9ac38a7b1896701d3b3f02e654832242e773fd5a6326f937d1e038e830d08d3ae0afb35f809a4ebf4b8b04e3979e2d7c518c94c30234168", 0x89}, {&(0x7f0000000c40)="f7f573e0dcec8ab49095f368f6916b000b79d8731f7acd9713828a", 0x1b}], 0x9, &(0x7f0000000ec0)=ANY=[@ANYBLOB="28000002790000000011d900000100000a", @ANYRES32, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="38000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r0, @ANYRESDEC=0x0, @ANYRES32=r11, @ANYRES32=r1, @ANYRES32=r12, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r13, @ANYRES32=r0, @ANYRES32=r14, @ANYBLOB="52000000000000000100000001000000", @ANYRES32=r15, @ANYRES32=r1, @ANYRES32=r16, @ANYRES32=r0, @ANYRES32=r17, @ANYRES32=r18], 0xbd, 0x24028088}, 0x20000000) r19 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r20 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r19, r20, 0x0, 0x1) setsockopt$packet_fanout_data(r19, 0x107, 0x16, &(0x7f00000001c0)={0x4, &(0x7f0000000180)=[{0x8, 0x0, 0x5, 0x8}, {0x100, 0xff, 0x20, 0xfffffffb}, {0xfff, 0x81, 0x5, 0x6e}, {0x8, 0xe8, 0x5, 0x1}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffcd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x1, 0x0, 0xda95, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0xffffffffffffffff, 0x0, 0x200, 0x6}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x2) r21 = socket$l2tp(0x18, 0x1, 0x1) r22 = mq_open(&(0x7f0000000000)='.d5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5, 0x51}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r22, 0x0, 0x0, 0x100000001, 0x0) mq_timedreceive(r22, &(0x7f0000000280)=""/204, 0x12f, 0x0, 0x0) r23 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(r23, 0x8934, &(0x7f0000000400)={'ip6gre0\x00', 0x50}) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}, 0xffffffffffffffff}, 0x1c) r24 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r24, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000500)=[@in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e23, 0x10001, @mcast1, 0x7}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e21, 0x7, @local, 0x1}, @in6={0xa, 0x4e20, 0x6, @empty, 0xbe1}, @in6={0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, [], 0x1d}, 0x1}, @in6={0xa, 0x4e22, 0x7, @remote, 0x5}], 0xac) close(r23) connect$l2tp(r21, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) 22:34:26 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='lowerdi/bus,workdir=./file1,upperdir=./file0,\x00\x00\x00\x00']) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r2 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r1, r2, 0x0, 0x1) readlinkat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)=""/150, 0x291) 22:34:26 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000080)=0x8) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/vga_arbiter\x00', 0x420000, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) syz_open_dev$midi(&(0x7f0000000340)='/dev/midi#\x00', 0x6, 0x80840) preadv(r1, &(0x7f0000001500)=[{&(0x7f0000001400)=""/101, 0x65}], 0x1, 0x3) io_setup(0x0, &(0x7f0000000280)) mount$fuse(0x0, 0x0, 0x0, 0x8888, &(0x7f0000001480)=ANY=[@ANYBLOB='f', @ANYRESHEX, @ANYBLOB=',rootmof', @ANYRESDEC]) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r7 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r6, r7, 0x0, 0x1) accept4$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0}, &(0x7f0000000640)=0x14, 0x80000) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000000680)={@rand_addr="58674502adbaa7b925a931a9ecd332d3", @rand_addr="275e184d9782a2be9e8eb37e600b8bfe", @remote, 0x0, 0x1, 0x4, 0x100, 0x6, 0x0, r8}) ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={@default, @null, 0x8, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000140)={0x2, 0x6}) [ 2583.509068][T16820] FAT-fs (loop3): bogus logical sector size 18302 [ 2583.547509][T16820] FAT-fs (loop3): Can't find a valid FAT filesystem 22:34:26 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed02000270fff0", 0x16}], 0x0, 0x0) 22:34:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x5000000, 0x0) [ 2583.913222][T16999] FAT-fs (loop3): bogus logical sector size 18302 [ 2583.927396][T16999] FAT-fs (loop3): Can't find a valid FAT filesystem 22:34:27 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff18, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c00071bab0925000900070007ab08000c000000f0007e93210001c000000000000000000000000000039915fa2c1ec28670e9889bb94b46fe0000000a0002", 0x43) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) mount$9p_unix(&(0x7f0000000080)='./bus\x00', &(0x7f0000000140)='.\x00', &(0x7f0000000180)='9p\x00', 0x100004, &(0x7f0000000380)={'trans=unix,', {[{@aname={'aname', 0x3d, 'lowerdir'}}, {@cache_none='cache=none'}, {@mmap='mmap'}], [{@permit_directio='permit_directio'}, {@obj_type={'obj_type', 0x3d, 'securityselfGPL&keyring\x81'}}]}}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 2584.028915][T16999] FAT-fs (loop3): bogus logical sector size 18302 [ 2584.049057][T16999] FAT-fs (loop3): Can't find a valid FAT filesystem 22:34:27 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed03000270fff0", 0x16}], 0x0, 0x0) 22:34:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x6000000, 0x0) 22:34:27 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000000200)="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", 0x1000, 0x4c000800, &(0x7f0000000140)={0x2, 0x4e24, @multicast2}, 0x10) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x73, &(0x7f00000001c0)=0x8) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r4 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r3, r4, 0x0, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x54, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @multicast1=0xac14140d}}, {0x14, 0x2, @in={0x2, 0x0, @dev}}}}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001300)={&(0x7f0000001240)={0x90, r6, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x48f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK={0x24, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x8820) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000001380)="20c3fc2356b72be7f62d941baf3d1229e957a0639e44cb82bc358dfe88387f89e4acee0a3d329b064d7ad0feaa5f6abcbd8970c1c48c29c6062be5edad06bdd946e52de645e01a1b10721a10d37111b1ee634ca0d1429762df8f57e0c44c55bfda51c1e6ba3bc89673f312f93ef9f736b3b34da21f182a7685b82fa3dfeb6e0c5503ce0a68e8a8070851b0682a4d133a9f7f8a1d4f8a1ec3df17666051f0c930f6253e899b930de4c484b0707bbb05ee85248ef3fdceac1b35d091b195563545450efe8953b9bd2a752ae1e92dc8fbaa51de2a4f06d619a949fc24697b305ac56a6175ae749db28f2b8da029940a", 0xee, 0x3, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) fcntl$dupfd(r7, 0x0, r7) recvfrom$inet(r0, &(0x7f0000000040)=""/6, 0xffffffffffffff1e, 0x300, 0x0, 0xfffffffffffffe3d) setsockopt$inet_mreqsrc(r0, 0x0, 0xd, &(0x7f0000000100)={@remote, @multicast2, @loopback}, 0xc) 22:34:27 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002a98}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:34:27 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@initdev, @in6=@empty}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f0000000040)=0xe8) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000080)=0x401) r3 = open(&(0x7f0000000200)='./file0\x00', 0x15984a, 0x0) syz_open_dev$evdev(&(0x7f0000000440)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r3, &(0x7f0000000080)=[{{}, 0x1, 0x0, 0x2}, {}], 0xff54) fchdir(r2) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x108) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getpeername$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000300)=0x1c) r6 = accept(r5, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r8 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r7, r8, 0x0, 0x1) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r7, 0xc0905664, &(0x7f0000000340)={0x0, 0x0, [], @bt={0x80000001, 0x8, 0x0, 0x7, 0x7, 0x101, 0x4, 0x1718ef99e817a2bf}}) getsockopt$inet_buf(r6, 0x0, 0x0, &(0x7f0000000580)=""/87, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x276) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600)={'#! ', './bus', [{0x20, '/dev/input/event#\x00'}], 0xa, "8efe9cdbf4c781ffabc42a66d867348542c0b0bce0b0ac2abdb10223d88ab1c4405870454b02556cc325e193aa77d6ba2b0c02343e7a3541065dfb27c9ed68ae0dcd6b3d0c45257fd318d08432e73589a20838d60f7d2c524ced0864239a0c54dd792706dffac450bf80891aea153243842fe35c2f5ff7264778be6a3d78a73416f806b02a21bc9a4458833fd4a579d26d818d6ac5d7bc68777b373f000b66683bec4d997fbeee407130fb210a22eff3c022487b66109d80397f247e"}, 0xd8) [ 2584.340801][T17062] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.4'. 22:34:27 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed04000270fff0", 0x16}], 0x0, 0x0) [ 2584.586725][T17138] FAT-fs (loop3): bogus logical sector size 18302 [ 2584.610572][T17125] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 2584.645186][T17138] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2584.727838][T17125] FAT-fs (loop1): Filesystem has been set read-only 22:34:27 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x400) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000280)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) accept4(r2, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000080)=0x80, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 2584.809087][T17125] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 17) [ 2584.949744][T17138] FAT-fs (loop3): bogus logical sector size 18302 [ 2584.977590][T17138] FAT-fs (loop3): Can't find a valid FAT filesystem 22:34:28 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed05000270fff0", 0x16}], 0x0, 0x0) 22:34:28 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0xff}, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6, 0x10d400) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x8000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r0, 0x10001) r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x2, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @local, 0x6}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4), 0x0) 22:34:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x7000000, 0x0) [ 2585.133082][T17288] overlayfs: upper fs is r/o, try multi-lower layers mount 22:34:28 executing program 1: ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast2, @local}, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r4, r5, 0x0, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r5, 0xc0405519, &(0x7f0000000180)={0x4, 0x6, 0x1, 0x80000001, 'syz0\x00', 0x10000}) 22:34:28 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vcs\x00', 0xa801, 0x0) r1 = add_key(&(0x7f0000000200)='rxrpc_s\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)="801142d1cfb600641cfba75ce6094c405a52f1cb7eb0f2ccd8e58ad7ebd7e18176d1ad06a6d373835b92f7cebaf410501abd3d1172f845eeb36ea69d950c5ca1cc28c0635a670ea60a7539d027056ee8844f281a2c5f9fdf1d29213d22d2ebf66a1de94edef01525affc94e604bce0c6ba5c28edec20144bea649752d733d323888c4d6c53ffa52ee533df20daa1422a9f61451bc74785cb0d67faa47e5662ee69c4156434cdce0560c346c9dfbd45625e745ca3e536a5a710f5f2709fa3f5060536bc6ffbcc7995c31226d072eb8e4f508368da9c3ab91f48692f346687ccbf5878d8a9", 0xe4, 0xfffffffffffffff9) keyctl$revoke(0x3, r1) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./bus\x00', &(0x7f0000000140)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x2) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6c6f7765f2e569723d2e2f6275732c776f00000000723d2e2f66696c65312c75707065726469723d2e2f66696c65302c00"]) [ 2585.500305][T17373] FAT-fs (loop3): bogus logical sector size 18302 [ 2585.506777][T17373] FAT-fs (loop3): Can't find a valid FAT filesystem 22:34:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002aa0}, @sack_perm, @mss, @mss, @mss], 0x12fb85) [ 2585.611774][T17412] overlayfs: unrecognized mount option "loweir=./bus" or missing value [ 2585.673419][T17373] FAT-fs (loop3): bogus logical sector size 18302 22:34:28 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed06000270fff0", 0x16}], 0x0, 0x0) [ 2585.780462][T17373] FAT-fs (loop3): Can't find a valid FAT filesystem 22:34:28 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x14000000, 0xa423}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_get$uid(0x3, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x9, &(0x7f0000000180)=0x0) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r2, r3}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000040)={'md4\x00'}}) r4 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r4, r5}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000040)={'md4\x00'}}) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000100)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) io_submit(r1, 0x1a2, &(0x7f0000000440)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)="1000004003ffffffffff600000000000b22025285db74192e7576d9062ec6e2fa5733f8ff248691861d03a71091d334252afb1af5b8f0274c2ed58338226131291198f3d70dcf797ac42d0eeed042c06b56b8af02f92b12ebe4c45948a362a76def2f4955f100a13131f474b140942110257e173cea102775e1b3873ebf98dac6421f6d449544114b8ce29f4028d1738b5be127a96f24c9d3c130e1a6c2eb5b3f12eb6a1f5051594545cbb895e65d83c08d2d6cd56694e5a6c00f54aceaf498f57b2a56634a23ae7", 0xc8, 0x1}]) r6 = socket$inet(0x2, 0x200000002, 0x0) dup2(r6, r0) lseek(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = syz_open_pts(0xffffffffffffffff, 0x1008000000000002) r8 = dup3(r7, 0xffffffffffffffff, 0x0) write$UHID_INPUT(r8, &(0x7f00000021c0)={0xd, "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", 0x1000}, 0x1006) getsockopt$ax25_int(r8, 0x101, 0xf3e77505e3edeb7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000180)=ANY=[@ANYBLOB="2eb3333affc69954ee032c88e4630658199190ecaeabce83a2c566af22b1584fe5b4454b99bb4b0b79d94e319e64caa767987491f0d311c4127254db8bcc0d71af5a1fd4b471dcc3432e4e5e37fb937b7851d4fd54f81572caa883d29b52353b11cb8250da"]) 22:34:28 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x3}}, {@max_read={'max_read', 0x3d, 0x1}}, {@blksize={'blksize', 0x3d, 0x1000}}]}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6c6f7717b06d55afd142e6145661e46970e309726b6469723d2e2f66696c65312c75707065726469723d2e2f66696c65302c00"]) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fsetxattr$security_ima(r1, &(0x7f0000000180)='security.ima\x00', &(0x7f00000001c0)=@md5={0x1, "f10113c60d7f13c048059adec0f365d5"}, 0x11, 0x1) 22:34:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x8000000, 0x0) 22:34:29 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') eventfd2(0x2e, 0x80800) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r1, r2, 0x0, 0x1) write$P9_RLOPEN(r2, &(0x7f0000000040)={0x18, 0xd, 0x2, {{0x1, 0x3, 0x1}, 0x9}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(&(0x7f0000000080)) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0xa) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000000)={0x6, 0x3432564e, 0x3f, 0x2, 0x0, @discrete={0x7, 0x8}}) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0) r3 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000002c0)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x492, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r3, r3, r4}, &(0x7f0000000240)=""/104, 0x68, &(0x7f0000000580)={&(0x7f0000000500)={'md5\x00'}}) r5 = request_key(&(0x7f0000000140)='.dead\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='bdevvboxnet0-posix_acl_access[\'+\x00', 0xfffffffffffffffd) keyctl$negate(0xd, r3, 0x3f, r5) [ 2586.098900][T17726] fuse: blksize only supported for fuseblk [ 2586.106838][T17726] overlayfs: unrecognized mount option "lowmUBVaip rkdir=./file1" or missing value 22:34:29 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed08000270fff0", 0x16}], 0x0, 0x0) 22:34:29 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x14000000, 0xa423}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_get$uid(0x3, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x9, &(0x7f0000000180)=0x0) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r2, r3}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000040)={'md4\x00'}}) r4 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r4, r5}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000040)={'md4\x00'}}) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000100)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) io_submit(r1, 0x1a2, &(0x7f0000000440)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)="1000004003ffffffffff600000000000b22025285db74192e7576d9062ec6e2fa5733f8ff248691861d03a71091d334252afb1af5b8f0274c2ed58338226131291198f3d70dcf797ac42d0eeed042c06b56b8af02f92b12ebe4c45948a362a76def2f4955f100a13131f474b140942110257e173cea102775e1b3873ebf98dac6421f6d449544114b8ce29f4028d1738b5be127a96f24c9d3c130e1a6c2eb5b3f12eb6a1f5051594545cbb895e65d83c08d2d6cd56694e5a6c00f54aceaf498f57b2a56634a23ae7", 0xc8, 0x1}]) r6 = socket$inet(0x2, 0x200000002, 0x0) dup2(r6, r0) lseek(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = syz_open_pts(0xffffffffffffffff, 0x1008000000000002) r8 = dup3(r7, 0xffffffffffffffff, 0x0) write$UHID_INPUT(r8, &(0x7f00000021c0)={0xd, "e52aac313baccb9b551156a2d7c12b7711c32a17d3c4c9ceef08c2046fe288a7036e513019e5e114cc4ae935d23a9990952824f5d0c1f52e2eb94e5301ba9dc9a02818038eaef46fc2c3ebbe46e4a6024c93823f66462ba3d68913fdeadd1087b0680daa3ddf6ed3dc2b61b4960f48c2edf5cdf23c7e8d3f2e6daa71e66b29bc19e377d7df4637d735194a52da503a0ac44383ba5b3da867e09ceae02a9bfc21e7f28814c2fab7da41344e207ca706dc37592abdb685e4b80eb6dc2b1dc550a1d16166d163a4a220a54d7844facbbb2648ee90aa05c3c03ee447d79e517df8ffe70c215bd0bf69e86a5f48d571b9337590d05e9947727c0d77d18a117f110252735ca6700a55fd26838935808cce7b7c222a75339e44230bdeb99bc39c0c1cc20de74fcb9744f4c4a988f36d31abcf5504d78a3e14f35f6cbd123fcff22890cc17c730c3ea9f74616dfe60064552ec25568a6211bdc39483a28bed0df0afc7d7c6d13d301e080c8846ea512a8ccae7a99da8dd3009feaf204d22e32c5ecc333e616159d55328d375e59194c5c9a0b3843afb283d1d26f59e03105e91aa552386468432a09be73220e942394f34c559797b74bfe7c5c2c639a40e4d2e81e1004b127540a0bdd6be2f95698e75e4f1203a47d61f506ac9364be9d98ae46536f74afe08c450ecb902e00f188c9f32aed0677455e10bbe82c763a464f10f64c403c35376b7a675546835209f0e2809e9c2bd191f784dda4b727bfac512497a07474e6d3e13233601df81abcdb6fbfb152483ec61baaee45a5d733c62107f63c55a046401a5ddef70cef8d5fc34de554c8ff48f7ae3d6dc1ed4eb70fe1e610355fd66ce1af8ff63b6641fb3dadfab8a9b0b1f26ca11f7287258ad4766e08340f8f2fd53e7e5f287bb73c186f0290f225687040c762776a02e5e65f1b9b713e8ef98ffe111b3e4e7b761dd3ed763ed8dafd67625fb300ac752c0ff9c0c04b75be292c3f0247bd0b3560f1c76aff38791037fcf2b812f1601934a8fc769f7198e0df685841489263a1495a8a8bab1a63cb12b3089a3e30aab15ae872437e52a6f0dbc4df2d0e8df4c6bcd47beefc179d85b70b42b319453e6efaff96a509420bec299f227c4b676c58038916897f15430ff52087dd97de207378053accaa31843a333e4f69586103424f44bd67eb355c1fbe078e62f07ebaae46c3e335372127dc5fa70a4579af715e531bda52761dc206aded4678079720603a577ef7e5fb5a81a525b7c96a4047d9d6bb80d7e0ce55cc0a4f73256ae9c515307f13fe54126786de425d7a674b05116104176faac5b9365b33fd2f5a710a5159d342abecede83ad421bbb712cd5b006671a958cec907311719eb3e0b5dc4fb51054e06656a7a2a066c0aac65ceb434ca3f242cb2b1d7a22179a85cbbeeacc2f0135d8dd4d1363a98d2543fa4973e19eb359e956d27f142c75f62c7aecaf47090236b9791847725bc6fde15cd4a119a4976a3f0f2d622973ad9000aae56f88b396fa1881ec0b0a5de9955fc8f864b36eacd635b88826e0a64897d605fa4a14f7786b037cf308bef61c7f860e38f1ae67fe8cb7802dbe85f9c0c082eed1a13e645370d0c95d63bba215ac8a637b8f968aef06329d62ba131b56b46bfcfa6a5e82016d5eeb6e7db45595d1acaaa5ec9886315d3dced9d0a15c44c043ac91e4ae7077139774607b76cbc017f636145beb84c1829a6030f4a895a56b8d141f743c9189a71387893f785804f85927a23ccd79c432ab686b621ec91706ef082b4ea4fa608ce2daca0d2e2e07ff51e6a8fdc22f1c8ee5ae53720f93b4547704fae580e5560e3c7b1ac2a38ffc294d3c96635e3b919339394843c8a171c7d12ceb9c0a11be25783694b177b399e7a495538e293a59d3ab44b176afed6894aa0e501d9b98981be3f2057bf6c9869403a34cb83ad57150c674301f39524a026f3608a3414287bc4e507355823c6f8640bb803a392fb8847023d1db3c39753e72414682c617de9bd0d5b6a55d46004d49f20d2f8f53cdd8eb11402f7895cd7c01b4964fd005c564b0b0e156969ccde818dda3a7cae02d1d3af95081e6549f28976fa81b5e90fbb0a62fea850ffaf0220132189c11a74996261f6de6001c50364f08c4f48fd46a0417ec8ee4d003efeead64b87d64b43cd6868f365e72e26dd9f5f9f74d135f64464cb38dd62051ae70c5a4daabebe700eb9b290b8ed4142db0090219e6186f8f71fa8fe1ebe42f621b8eed182ee8ad0401f0a3530fd48e4d1eb2637f1fbd2a7032b0f85715203c12ab8ff48131bc4ff28272b57119a76bc0b30fef5294c23c0b2bcadfbba37a00502b5e43d72148d9acc7cb7cb39dc830cd6f30262a09eecf29d1055c2edc3926cfd5076aa5f9f172ed145359fc974ca5ded652433d212607bed155df1aff269414548a39a644b6ce927de5de6e6750575c4fd7ea7fe10b1e51fde6975c0c23fc012a8b12fe3fa64e972e4e09eafea165ae5c1ffc9d761e1314a781959c223b96eefde0f4f45c7ac032a8d3f1bd304114c3329a3e4966eddcc8d44ae70bad2932f963100955e2d2d487347c2aa8356bc6bc3c84e418163c758f1372246884e6d80d87d7ab3fe660dda13ada65f200b4fb365223b93bbc29493ae6dbbbb1823edb8e9f045b60414edab955e1046b67a8d4908ab08ad90216125d2ffd8c7814a9a4940df0a653b1cf53cf456412228445ebc8e1584adfe13207ff24fe602e2a506218710483b5544347a3d515b7d2ddcaa1bb7ae3578841918a8ed00659d5f260d23ae17a9ffc77f79758844586fe53517097838a92dde8873e8be1cd5934f1a4bfdd9d0b5725b811c4a2c121b7729946993a736bd195c55684ea680304af4844a1b2e54e2c2b2ccaeceb00b9c2c515b70912efb27643c5624025e358b44853cc0efddc103ee514471af902cd9b68f102c95a91d2b825b473ce842e6367b0b7305ce8be6f9c812abe860bb632e00b69a0370e5c8f9ba0cebbcbe1b9276949c303a4e9e3b6db37a0716520c07512192364abb58399fca973a1b32106096eda8bb85745562e8a35c5e917fdf858091a4c29d6549e10098d6b205fc5cad546fe07b3a70756cf7079c88f3708f0c8527002b99e80cbd584a3737fb37953cd6dccf21add4d4b6e65894490840c008578737d5e208649d1cd34beb403c2226300297853a29cf6c661b426c13306575d81f6fd21712e0ec4366013883b95a71d5094acbf156e42de11cb873744983ec1ff9cfbee2278053b8b4e523388bd41dfd3c2ecaacc5d9d2958bbfa94f4bd0ac1c61c98ab295dd5c69020f1329818df9a2aa88ced03f4e6a4d1f8cb020afcd2384e65511ddeb908ba0c13a03dd32e8d4ccf0246008f35ef5184f81b8fed73b4aae4998bd8c7d784210042247d39396ba881bf43555d0ec58deede7b4729e79d31b2a346527594ca3a47a1723a792a701dc18d0124365e2c4a4fefed48c29a9f2fc747b302eaf92a100b2da211c91de4ab79d4aede483d852635c6f14d38095a5739d475c7aa67fdd54767a056eeb3098dfd8d1c21f32e76f0247f04118448273586856e641b83f540a643e72dc15804b78bac475f39e23291798aa45a2c10aa5fef2d5e4d7b8f529a66535d11c6149e9797f2fcce2804f2a5370345e98b0c02c7dd27135d414fe72f0740423920d68b64f6b8c05788c6693ee1b9abb5d4593a970dc3ee2528765fb739964f4fed7200d7e796a9f3d0d60834e638dd8c29d4e85011e4ba4f127fe765954a5b5bb5d1cc69f2376599d5a3e8c30714893f763c06061072c10cb0eee17eb2a2514acc584b04e169d4a33a330367bb725ff9462f5d50282a2e393293eec8ea1eaab8217cc108798a4a57eccdb00647ab9f07318993f7c59c395a93cbd681d0a967a56e3f13c832c48dcc0d0096870b0d51b754e70b12a849b6f376923f7f7d909f64d64e1d6e338d39166b725265b96ed21e36b12057148d66e5df04b7b734ed0957d47fde172be2473b9ac6fdb823abe3e11ec69a170a14511d5572d6c0d9f6b749acad7003f0087bb6f9381649e42d02764077330d5af3d93185968a9f8dfed16c4a7c768a2bb98304946a557182c0ce93e82b340074e384cc6bd6129483386c654a6ab3bb12fe8e86adafa93f218fdf5019c09292858acd8ef7aa6a78e3f846215856d630ae9c5fc4009693b2767ea55c469f9099693287b35d43ee0f7a5baf3328d37b2c536f2abd6e21e472c105ae982cdd26a5a20562122e71efb1486c28d9409c3114b608f297695958c5604cf0918c0c70c56c79170260d73bde297e47cae1c404cca0a96eed51a2dc8f6f6ad862fe767ee5b5e68f231096825d935b809b3c1b5d9a2cd76cae22652bed7d263b42612ed717eba0aaf2a3989c4520c402d29428010000000000000062fb3fdd073b91d4e2f6ff01000039ee78bd8ccb5bc3ce442fbeb9a1521314b82804293159fd7df4db66b78a06fe93e705bbc4e0d294a787c3cbf271b2acd15e7b4998c822f7724d3191e2265bd0d694dfb08063c9ff26a424884b46e26b5560d756c114ad1a7b92eee3f49dc2883b604ecc49c5ce92ce467778301326588a6577d44758e8d90710248d110dbf3d3d56877905e6e312bf498b32dd089e38b51634f7c5d2ac9f1547a342877815a3864ad70b68b196bde9d810512f411d5235633ef65088788dfa3f152df7cee3a0803f6ac7ae192301dec07ff870ff3d7cf1c09cc9093263b225d01222376531007af9e6fb96e5ccaa8274f70adc786db7f33a20a752717b56b9a03bfce15a1aacd78c4adf8bdf41de8aaf421684c27526088c54322b5eea9175ef9c574c1f873218cc6f5df233892d7d5b0b0649ffc5a1c4909f2967a8c1f15b419ecde0448f071fa71e553f4f12cfa5e35022e75ddc5509edddc3de82d9097759b27f7c24776702e0ff64559281f796f11c1a9c77a156f390d2d18d1759b6be0347eb5bb4df912e9cfafa0db3be3243bacb378ca0946cece695a8099d6d7a24fc8bcca4c09695e3208f17f00bf404f6eb7852dfe73c163a19fd4e890e0edd5c7a727984b6f47a952373b95200bba061756c699c218b52c265b22bcd5cb24fdf056621fdd2126cede171e435320ca34e56e4c82a2afc9a59d3bf4647877658b6f23a6484f37acd8e2e184926993b5d1bbe6cdba64f486b4fb41bb94a644140540894f8fc14e585bc8beae88eabf926add289c82eb8cea99743baed842d76eb5c5573f7a7f3f2693960d6bfed697b5619afd942f41689dbd281a35e32478ba3a388dada82a2f4164481aa6a8f3946a84ea6186b20ce388c202be42996ae90feec7258d4a4a276353df84c96b160ac003d81cf395c0e61b0f0a9e692c32fab307f754cae5de7716a00cb96160cd39c931f4885d612862cecf6ba76502c9d266f97e4cf6cf0a16f787788e5471458a0dc24d3f2a28caa0f7ee00cf8bb113bd9c2b086037d765b5ec9a849df6f482fc01b48261e44299b0bc88321d837b6e2d221ebf2996b4140cd82e531de27f8de445f31c64469a5a145b031cd2569d19e27369c31ec63a989f0c9aaba7cc9d36d652001d40004f83a90d6465854f31bf15d1ef6bff4c02d60b948a37e3f50d250d7f85f545f507014aae5a35908283168c034f654acbb9d0fc261671d612e3d74261653e69e5e9cf7c8fda298b4d6c879cbbb97eafe648ba70150599089d65c1fdc0d5af879a2d46a443ac6dd21b33f72510742db4faf7eeb1580580ffe26e2d5ff00", 0x1000}, 0x1006) getsockopt$ax25_int(r8, 0x101, 0xf3e77505e3edeb7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000180)=ANY=[@ANYBLOB="2eb3333affc69954ee032c88e4630658199190ecaeabce83a2c566af22b1584fe5b4454b99bb4b0b79d94e319e64caa767987491f0d311c4127254db8bcc0d71af5a1fd4b471dcc3432e4e5e37fb937b7851d4fd54f81572caa883d29b52353b11cb8250da"]) [ 2586.250388][T17785] FAT-fs (loop3): bogus logical sector size 18302 [ 2586.257938][T17785] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2586.380512][T17785] FAT-fs (loop3): bogus logical sector size 18302 22:34:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002aa8}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:34:29 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="b14daac983f55b2dc1c0af9ad9384857266f796843821eaa08bc9a8b65e9aa1063f0eab70315cef1ce6af48165da8ce1b8d69356dcb9c42d65dd85fa24bb4b"]) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 2586.503257][T17785] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2586.565020][T18047] fuse: Bad value for 'group_id' 22:34:29 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="055e14b7dd20"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000700)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 22:34:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x9000000, 0x0) 22:34:29 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x14000000, 0xa423}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_get$uid(0x3, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x9, &(0x7f0000000180)=0x0) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r2, r3}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000040)={'md4\x00'}}) r4 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r4, r5}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000040)={'md4\x00'}}) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000100)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) io_submit(r1, 0x1a2, &(0x7f0000000440)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)="1000004003ffffffffff600000000000b22025285db74192e7576d9062ec6e2fa5733f8ff248691861d03a71091d334252afb1af5b8f0274c2ed58338226131291198f3d70dcf797ac42d0eeed042c06b56b8af02f92b12ebe4c45948a362a76def2f4955f100a13131f474b140942110257e173cea102775e1b3873ebf98dac6421f6d449544114b8ce29f4028d1738b5be127a96f24c9d3c130e1a6c2eb5b3f12eb6a1f5051594545cbb895e65d83c08d2d6cd56694e5a6c00f54aceaf498f57b2a56634a23ae7", 0xc8, 0x1}]) r6 = socket$inet(0x2, 0x200000002, 0x0) dup2(r6, r0) lseek(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = syz_open_pts(0xffffffffffffffff, 0x1008000000000002) r8 = dup3(r7, 0xffffffffffffffff, 0x0) write$UHID_INPUT(r8, &(0x7f00000021c0)={0xd, "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", 0x1000}, 0x1006) getsockopt$ax25_int(r8, 0x101, 0xf3e77505e3edeb7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000180)=ANY=[@ANYBLOB="2eb3333affc69954ee032c88e4630658199190ecaeabce83a2c566af22b1584fe5b4454b99bb4b0b79d94e319e64caa767987491f0d311c4127254db8bcc0d71af5a1fd4b471dcc3432e4e5e37fb937b7851d4fd54f81572caa883d29b52353b11cb8250da"]) 22:34:29 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed0a000270fff0", 0x16}], 0x0, 0x0) 22:34:29 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x4) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x280000, 0x0) mkdirat(r0, &(0x7f0000000380)='./file1\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r2 = socket$inet(0x2, 0x5, 0x5) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) sendto(0xffffffffffffffff, &(0x7f00000000c0)="276fa75152db3812e5", 0x9, 0x40040, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x2, 0x1, 0x3, 0x4, {0xa, 0x4e22, 0x1ff, @mcast2, 0x3ff}}}, 0x80) [ 2586.828559][T18155] debugfs: File '18090' in directory 'proc' already present! [ 2586.868083][T18157] FAT-fs (loop3): bogus logical sector size 18302 [ 2586.913907][T18157] FAT-fs (loop3): Can't find a valid FAT filesystem 22:34:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0xa000000, 0x0) 22:34:30 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYRES64=r0], 0x1}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000004c0)={0x53, 0x8000000000000006, 0xc5, 0x1, @scatter={0x3, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/69, 0x45}, {&(0x7f00000001c0)=""/254, 0xfe}, {&(0x7f00000002c0)=""/89, 0x59}]}, &(0x7f0000000340)="3a1fadbfa2a2d80c6c70376c10df4cde396f9c6590c13a23286b8c2115b94848ec8ca1ed9aa4485bcfb4d6b9449c7cfeab566814e1494b4216b4ef7779972e9ef71738768dfa60876e51b8fbdc170a545ebb1b50b3379c00c8490c7cc9e86bb872317f085cca06b0c78328037ea67ea829a3f4a0c3593f9b5f551a9bf3f81924274353560d5bafba733b1785b83664ca48b40cecd8c5ae45aa5056e4bf8a46166003c680c4f5640d75cf99f976f56242709977783c0e007f9fa4569949e627555e8e3681d6", &(0x7f0000000440)=""/56, 0xe3, 0x0, 0xffffffffffffffff, &(0x7f0000000480)}) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:34:30 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed0b000270fff0", 0x16}], 0x0, 0x0) 22:34:30 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x14000000, 0xa423}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_get$uid(0x3, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x9, &(0x7f0000000180)=0x0) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r2, r3}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000040)={'md4\x00'}}) r4 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r4, r5}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000040)={'md4\x00'}}) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000100)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) io_submit(r1, 0x1a2, &(0x7f0000000440)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)="1000004003ffffffffff600000000000b22025285db74192e7576d9062ec6e2fa5733f8ff248691861d03a71091d334252afb1af5b8f0274c2ed58338226131291198f3d70dcf797ac42d0eeed042c06b56b8af02f92b12ebe4c45948a362a76def2f4955f100a13131f474b140942110257e173cea102775e1b3873ebf98dac6421f6d449544114b8ce29f4028d1738b5be127a96f24c9d3c130e1a6c2eb5b3f12eb6a1f5051594545cbb895e65d83c08d2d6cd56694e5a6c00f54aceaf498f57b2a56634a23ae7", 0xc8, 0x1}]) r6 = socket$inet(0x2, 0x200000002, 0x0) dup2(r6, r0) lseek(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = syz_open_pts(0xffffffffffffffff, 0x1008000000000002) r8 = dup3(r7, 0xffffffffffffffff, 0x0) write$UHID_INPUT(r8, &(0x7f00000021c0)={0xd, "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", 0x1000}, 0x1006) getsockopt$ax25_int(r8, 0x101, 0xf3e77505e3edeb7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000180)=ANY=[@ANYBLOB="2eb3333affc69954ee032c88e4630658199190ecaeabce83a2c566af22b1584fe5b4454b99bb4b0b79d94e319e64caa767987491f0d311c4127254db8bcc0d71af5a1fd4b471dcc3432e4e5e37fb937b7851d4fd54f81572caa883d29b52353b11cb8250da"]) 22:34:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002ab0}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:34:30 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) shmat(0x0, &(0x7f0000001000/0x4000)=nil, 0xc000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r1, r2, 0x0, 0x320f) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) keyctl$get_persistent(0x16, r3, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f0000000180)=@v3={0x3000000, [{0x0, 0xdc43}, {0x81, 0x7}], r3}, 0x18, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="734dd006139bd7cd1edc0c25cabe6b1f878f1ea7e6001e2ec2cb7129f35e71cfac534e170aff70bb43587302d286a2"]) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 2587.396997][T18419] FAT-fs (loop3): bogus logical sector size 18302 [ 2587.574013][T18419] FAT-fs (loop3): Can't find a valid FAT filesystem 22:34:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x150602, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0xe323b7693b7519c8, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r2, 0x0, 0x0, @in6={0xa, 0x4e23, 0x3f, @ipv4={[], [], @broadcast}, 0x400}}}, 0x90) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r4 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r3, r4, 0x0, 0x1) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) signalfd4(0xffffffffffffffff, &(0x7f0000000240), 0x8, 0x0) 22:34:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffd26, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000320019010000000000000000020000000c0000000800014004000001d0674cc14432dc0f35d1df8cff76db993515eb438bdc3bd5cae8a22af6e7190c44352af59466"], 0x20}}, 0x0) [ 2587.755214][T18419] FAT-fs (loop3): bogus logical sector size 18302 [ 2587.767504][T18419] FAT-fs (loop3): Can't find a valid FAT filesystem 22:34:30 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d303030303089ad15fd473030303030303030303030303034303030302c757365", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:34:30 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed0f000270fff0", 0x16}], 0x0, 0x0) 22:34:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0xc000000, 0x0) [ 2587.943833][T18702] openvswitch: netlink: Key type 256 is out of range max 29 22:34:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000080)={0x7ee4}) write$P9_RSYMLINK(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0) pwritev(r0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r2 = socket(0x10, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x8, 0x4, &(0x7f0000000540)=[{&(0x7f00000001c0)="eab54ebdcb832cdd7d41a7fa260150466dedc73755ba52708dc827e204e28b90115b57591eb7697029fa16544a9e287c3f34314217c23ca648474860e7af9e4339d983e7492b6c715b1b831ea95cdb374c6a584a9e7173f7a117741bffd885e834930cbb613c148a835c2ec8372a4d73", 0x70, 0x80000000}, {&(0x7f0000000280)="dac97bff3404e2781e70d5438719648692acf3d9b70cdf03c8366732b3c0a087ba92fda2d408745d4edebd47b3f1d5fad60ef63f95c9e231977f5c4673ac8b611320c376179df13deafaaffce95ffab62df0b7f34b6e5153a6e43224cc6219d0095a5d88edb98e1b01ae43163eb4b20afce20a0fa5db1bded9a5f86ed07b7b", 0x7f, 0x7}, {&(0x7f0000000400)="4c694d45da2c71618cc3f0ec68f67848ad92ff6e9605b710cecb17e5ef56f5b527ffb28943350110bb846e1273251a977a078af286f815cfa1e7b6f476dcb8efe1771b4c3c96767d57f7fc7fe460aff9abbf03c1ee9f", 0x56, 0x1}, {&(0x7f0000000480)="cf71df043aca10d6f3c71567986571b4b75e2d9f83278b25df897f67e090b8de82aa6664f8b9d63cfd58e86e0458a078c1aa845ac737a8b7eca38ae0e54a8711004e86a6d979be98aaa34d3718c3c8927c42785f0ea7350613a6412757d0f18a2e72bde0efda7b0c0c555689e8b176ebdce710474a2eed5b9d9546c364abb3e9f1d49a3b83c31802de83", 0x8a, 0x800}], 0x1041000, &(0x7f00000005c0)=ANY=[@ANYBLOB='byat=,defcoot,\x00'/27]) r3 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000001b40)={r4}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e23, 0x8001, @remote, 0x5}}, 0x0, 0x0, 0xffffffc1}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000300)={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) ioctl$sock_ifreq(0xffffffffffffffff, 0x4405, &(0x7f0000000240)={'bond05A\xdd\x12\x17t?\x11\x00', @ifru_names='vlan0\x00'}) [ 2588.104860][T18761] fuse: Bad value for 'rootmode' [ 2588.123147][T18815] FAT-fs (loop3): bogus logical sector size 18302 [ 2588.130085][T18815] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2588.228391][T18815] FAT-fs (loop3): bogus logical sector size 18302 22:34:31 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed10000270fff0", 0x16}], 0x0, 0x0) [ 2588.327660][T18815] FAT-fs (loop3): Can't find a valid FAT filesystem 22:34:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x10000000, 0x0) 22:34:31 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x4240a4b8) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSACCEPT(r4, 0x89e3) splice(r1, 0x0, r3, 0x0, 0x20001000010005, 0x0) 22:34:31 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000180)={0x0, 0xfb, 0x17, 0x3, 0x9, "751a0d477a4f90ee3d4b2d13986ef922", 'c6'}, 0x17, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id?', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) r2 = dup2(r0, r1) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000200)=""/48) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 2588.639275][T19030] FAT-fs (loop3): bogus logical sector size 18302 [ 2588.681931][T19030] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2588.790193][T19039] fuse: Unknown parameter 'group_id?00000000000000000000' [ 2588.801324][T19039] overlayfs: failed to resolve './file1': -2 [ 2588.844261][T19030] FAT-fs (loop3): bogus logical sector size 18302 [ 2588.858494][T19030] FAT-fs (loop3): Can't find a valid FAT filesystem 22:34:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002ab8}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:34:31 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="2e00000014008105e00f80ecdb4cb92e0a02022c14000000160002008e7948f328995a017c7b5851060000000003", 0x2e}], 0x1, 0x0, 0x0, 0xa15}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r2 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r1, r2, 0x0, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@empty, 0xfffffffd, 0x1, 0x2, 0xc, 0x3, 0xc2}, 0x20) 22:34:31 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed14000270fff0", 0x16}], 0x0, 0x0) 22:34:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x20000000, 0x0) 22:34:31 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r1 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r0, r1, 0x0, 0x1) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000040)=0x88) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r3 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r2, r3, 0x0, 0x1) mkdirat(r2, &(0x7f0000000180)='./bus\x00', 0x4) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:34:32 executing program 5: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bond_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r4 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$IP_VS_SO_GET_INFO(r4, 0x0, 0x481, &(0x7f0000000040), &(0x7f00000000c0)=0xc) dup(r3) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 22:34:32 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed3d000270fff0", 0x16}], 0x0, 0x0) [ 2589.362998][T19351] FAT-fs (loop3): bogus logical sector size 18302 [ 2589.390917][T19351] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2589.407210][T19346] overlayfs: failed to resolve './file0': -2 22:34:32 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0xf, &(0x7f0000000900)=ANY=[@ANYRES16], &(0x7f0000000b40)='PL \x00L\xf7\xd1*\xf1\x1c\xe9)7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL=\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccX\xddgw3\xff>\f\xb7\x82yc\xf1\xcf\x85\xc3\x92\\i\xb3\xbc\xd2\x85\xaa\xe8$X5S\xce\x8dsL\xe4\xc5\'S\xe4\x81\xc8\x90\f\x8f\xae\x8a\xf5(yd\xc2\xe8\np\x0fMO\b1r}9+\x9f\x16\xa2\x98\x83\xd2\x7f\x17Q\x90\xc7\xe1\x97\x85v@\x98m\xf2\r\x83\x11\x16\xb1\x03\x96[,R(\xa2E\xe0\x1bp\xbb\x18\xe2I\xecb\xc75m<1\xff\xf97cC\xa1\xa8\xad6\x80\x05\x04+Y\xafP\x17\x83\xba\t\x90x\xd4\xdf<\xb7&\xa1\xa3\x14]\t\xcf\xf6\x00\xc9\xe0\xac\x16p\x8e\xfb\xfd\x86\x96\xa0\xfe\n\x92<\'\xeeC\xdb\xa2\xcf\"\xac\xb9\xc7\xf3\x84\x03\xd5]\x91\xd2u\x0f\xf3\r\xe5b?L\xd2\x13\bT\x85B\xea\x82\x12vFX\x85\x8bs\x1e\xdeY\x92I<\xfaww\x85%\x16\a<\xf1eK\xcbZ;i\xc7\xa0Em-\xf9\xb5E\x03r\x9bH%\x0f}\xcf\xbf\x13\xe2l\xae\xa9j\'\xba}E', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10}, 0xffffffffffffff07) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_dev$radio(&(0x7f00000003c0)='/dev/radio#\x00', 0x2, 0x2) getsockopt$inet6_dccp_int(r1, 0x21, 0x6, &(0x7f0000000440), &(0x7f0000000480)=0x4) r2 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000240)=0x60) r3 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x80, 0x525540) getsockopt$inet6_mreq(r0, 0x29, 0xe, &(0x7f0000000640)={@ipv4={[], [], @loopback}, 0x0}, &(0x7f0000000680)=0x14) socket$alg(0x26, 0x5, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) keyctl$get_persistent(0x16, r6, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000880)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xd40290}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)=@migrate={0x15c, 0x21, 0x200, 0x70bd2b, 0x25dfdbfb, {{@in6=@dev={0xfe, 0x80, [], 0x2b}, @in6=@mcast1, 0x4e22, 0x6, 0x4e20, 0x8, 0x2, 0x120, 0x10, 0x3a, r4, r6}, 0x6e6bb8, 0x1}, [@algo_auth_trunc={0x10c, 0x14, {{'sha256-ni\x00'}, 0x600, 0x80, "327d6826fa17dbb101a57dc3777e25b3065f8f09ffcaf34c9d1322367e41c6cc8199eac6fdf436640066f1e66401974095a2f343ef0a5a1345a1b5ec862487afbb862af98a0e49114be5670b44b86d6a84f1531797116b3b64f125930f71e755697b0b2f76f487178522a72fd1667e5d820d1f5e9e5ed798ae5866a4ea82462ecadb9899abbe87d7d01e36c0ea8956b8ceef9c45c5e6f01c044fee76b5ed40081441c9a48d143eeca11698edcfe92f6cfa19d3730c55311d6f8726740dcdd170"}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40890}, 0x20000000) bind$nfc_llcp(r2, &(0x7f0000000300)={0x27, 0x1, 0x2, 0x6, 0x69, 0xf9, "861f83488a8dfdbd58c3fcce4c0d8875fb267bb32dc4f3771033ae204e45aa40fd72379019338d33cfce25c731739c60715d0d820a331219520192970b7ecf", 0xf}, 0x60) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r7 = open(&(0x7f0000000200)='./file0\x00', 0x1080, 0x0) fchdir(r7) io_setup(0x1ff, &(0x7f00000004c0)) io_submit(0x0, 0x0, 0x0) r8 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0xff, 0x8000) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000940)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r8, &(0x7f0000000d40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000980)={0x158, r9, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x38000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER={0xd8, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x9, @remote, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2000, @local, 0x933d}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x51}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x27}, 0x66c}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0xc55}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfb8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10001}]}, @TIPC_NLA_BEARER={0x3c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x6}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x5, @loopback, 0x5}}}}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x4}, 0x8c0) r10 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r10, &(0x7f0000000580)=ANY=[@ANYBLOB="a7724bdef64346bc14b7b0f781d1d3abf9d1a51c4bfce1e77551a8bd678625f508300200000040847bc2fdffe8cd918b035041291559f3ee3aacfb33c6af9680d512f4d8a5c51817c3ff01a1f62ac71e85445d8f244f6be479ffffffffff8756ea7d486588272169d8b90f1d7106f5776f7894ee47382b8811e658a49a0eba9b9d6a05995f5ed199fcf8722be75fa42c080601d48e793d1429196b4d9182f7c46359a074285b251aca195af3b2887cc79d0cede7cc0b7e"], 0xb7) sendfile(r10, r10, &(0x7f0000000000), 0x8080fffffffe) socket$bt_bnep(0x1f, 0x3, 0x4) 22:34:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002ac0}, @sack_perm, @mss, @mss, @mss], 0x12fb85) [ 2589.612694][T19351] FAT-fs (loop3): bogus logical sector size 18302 22:34:32 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r1 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r0, r1, 0x0, 0x1) write$P9_RLOCK(r1, &(0x7f0000000100)={0x8, 0x35, 0x1}, 0x8) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000400)}, 0x10) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) sendto$inet(r3, 0x0, 0xffffff55, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfddc) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) setsockopt(0xffffffffffffffff, 0x3f, 0x0, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="e1673725d7d9a4e62e503564ee7c6b9adec423f489f102e4a0f01e19f0d5680eedff8fb40f3207ca486aa3019c4bf0f87ed658b548bd099449d015fb36a9880e1e7df7eb9bd0131f3e27927502d4e9372899c207896cf75ffe09fe", 0x5b, 0x4000000, &(0x7f00000002c0)={0xa, 0x4e24, 0xe8, @rand_addr="0d4e2dfd4433600e053f35ec2db0847d"}, 0x1c) sendto$inet(r2, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) [ 2589.683620][T19351] FAT-fs (loop3): Can't find a valid FAT filesystem 22:34:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x21180000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x75}, @SEG6_ATTR_ALGID={0x8, 0x6, 0xff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x14, 0x2, [@IFLA_BR_NF_CALL_IPTABLES={0x8}, @IFLA_BR_MCAST_ROUTER={0x8}]}}}]}, 0x44}}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) setsockopt$inet_dccp_int(r1, 0x21, 0x11, &(0x7f0000000000)=0x21e, 0x4) 22:34:32 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x20100000, 0x0) 22:34:32 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed88050270fff0", 0x16}], 0x0, 0x0) 22:34:32 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="a7724bdef64346bc14b7b0f781d1d3abf9d1a51c4bfce1e77551a8bd678625f508300200000040847bc2fdffe8cd918b035041291559f3ee3a46069062af9680d512f4d8a5c51817c3ff01a1f60100008044"], 0x52) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) setresuid(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, &(0x7f0000000180)) setresuid(0x0, 0x0, 0x0) geteuid() mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r3 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r3, 0x0, 0x0) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000380)="b94bc5202726d0ae47047de2f1571708dd3952bbec1ec9214da69e5aa65b2e396b78df9acd043adc4a76f8fa6da592eac8084f568079fdaa5bc245db2e3783db76f0d064cfdea1d1fb1a6f5fa80fdf9b548ce6af20e19573da444bcb1720fc95a9b4f94d14af7cf7e5f90ddcd74bbea341c80412d2daf39312443e3437cac0ffcc2e8169492c94558f6276abde319e7f01790c5560ff1faf18c7ec3c7cc1a0a4266d476718d5eb7bc33ecc0a373abf8dcb5a22fd14ce612177ee2ad0e130") r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 2589.940998][T19586] netlink: 'syz-executor.5': attribute type 36 has an invalid length. [ 2589.997651][T19586] netlink: 'syz-executor.5': attribute type 22 has an invalid length. 22:34:33 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x4, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000040)=0x8) write(r0, &(0x7f0000000080)="240000001a005f0414f9f407000904000a020000000000000000000008001f0000000000", 0x24) 22:34:33 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x23000000, 0x0) 22:34:33 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) recvmmsg(r1, &(0x7f00000001c0), 0x1d5, 0x0, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="bcb07c2df01e0a7d57b4874008cd7c5c6d9464391f62c5ad3ffc8cb9a3bed3b5f934d70475bdb98d0268e8a0b53fb626d868c49880f6c69c6ef60f5923ce54cac8f3bb73a0722d9092fb4d4c0c029b5b2ccaee7bcdb2ad1d3364c6acf69a154cb2efe8340e50c2d76142834cf6ff92342f9b3b19f86e0949876480841eaf7b232b5bde8eef25940527196aa78834c058e78e25e8c456675b068035d86c880c6058ff09e4a59032ef393fa9f888bd731604499a2b9c44d3f0e88ffbc70746d0b68b2bb6b9912cc1c730e38d28265fcbcc7813d9fa1527440e02a9be8d3ddfdda628ed26725205f59e86545c1bc4e6904da7061c5606", 0xf5}, {&(0x7f0000000280)="1a1fc4fa38890e37fe41bd8c246ce475b1eb8dfbcbc924834026baa29e8895b75f13d1c26d08a55ed6baf3f05b5e02a918d3f4e08c96d04a0e9c086ecbb00fe1ed81d7310f3614d7b2f766ece258ccc8", 0x50}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="a7fbf24c90bda40ee947923b242691459f2128e4a635fd393343881196b32b96c613ea7f03e7ba4d986c073232b3b578523d5a4f61d1b6a31a6a3fdd6d4f467c74e50d3438dcb98e95c973dc133b0fc79673692375298fb34d4117cdf9f6d7b6f3cae81f6b57600dde714e813efd7ba3f5be8819ab97", 0x76}], 0x4) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fulp\x00', 0x8a400, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000000200), &(0x7f0000000080)=0x80) [ 2590.292473][T19660] FAT-fs (loop0): bogus number of directory entries (517) 22:34:33 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r4 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r3, r4, 0x0, 0x1) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x7fff}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r7 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r6, r7, 0x0, 0x1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000140)={r5, 0x0, r6}) memfd_create(&(0x7f00000000c0)='\x00', 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 2590.341993][T19660] FAT-fs (loop0): Can't find a valid FAT filesystem 22:34:33 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@empty}}, &(0x7f0000000080)=0xe8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000140)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1f}}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e20, 0x6, @ipv4={[], [], @rand_addr=0x5}, 0x24a6aab4}, @in6={0xa, 0x4e21, 0x28, @dev={0xfe, 0x80, [], 0x13}, 0x1ff}], 0x58) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r1, r2, 0x0, 0x1) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'groepgid'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:34:33 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401edfa050270fff0", 0x16}], 0x0, 0x0) [ 2590.569675][T19949] FAT-fs (loop3): bogus logical sector size 18302 [ 2590.619889][T19949] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2590.831999][T20129] fuse: Unknown parameter 'groepgid' 22:34:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002ac8}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:34:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x20, 0x600000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_AD_USER_PORT_KEY={0x8}]}}}]}, 0x3c}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r4 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r3, r4, 0x0, 0x1) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) write$P9_RMKNOD(r2, &(0x7f00000000c0)={0x14, 0x13, 0x2, {0x40, 0x1, 0x2}}, 0x14) 22:34:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r2, 0x10e, 0x9, &(0x7f0000000180)=""/123, &(0x7f0000000340)=0x7b) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x6, 0x400) ioctl$VIDIOC_S_MODULATOR(r3, 0x40445637, &(0x7f0000000040)={0x646, "d5388b2e3c19e5d71275c9fc0bdffa446660e4de9f63c763b6759c81d6bc80dc", 0x100, 0x5, 0x200, 0x2, 0x6}) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x37, 0x4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff01000000000000000000000000ffe2e000000100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000538a3bf600000000000100bdb500000000000000000000000000000000000000000000000000000000000000c900000056a32a9b6bbdbc30deab1f5ab68e000000000000003ed0510059000000f3ff0000000000000000000000008a0800ecff000000004000f900000000000000000100000000000000"], 0xb8}}, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 2590.882228][T20132] FAT-fs (loop0): bogus number of directory entries (517) [ 2590.889670][T19949] FAT-fs (loop3): bogus logical sector size 18302 [ 2590.908364][T20129] overlayfs: failed to resolve './file1': -2 [ 2590.946997][T19949] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2590.954403][T20132] FAT-fs (loop0): Can't find a valid FAT filesystem 22:34:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x2e040000, 0x0) 22:34:34 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed00840270fff0", 0x16}], 0x0, 0x0) 22:34:34 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) rmdir(&(0x7f0000000280)='./file0\x00') mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65312c75707065736469726aee4319d9c49d3d2e2f66696c65302c00"]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x8000, 0xa8) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000180), &(0x7f00000001c0)=0x4) syz_open_dev$usbfs(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x9, 0x8000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r3 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r2, r3, 0x0, 0x1) ioctl$PPPIOCDISCONN(r3, 0x7439) [ 2591.461416][T20251] FAT-fs (loop0): bogus number of FAT structure 22:34:34 executing program 5: [ 2591.523452][T20251] FAT-fs (loop0): Can't find a valid FAT filesystem 22:34:34 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'}) [ 2591.658803][T20356] overlayfs: unrecognized mount option "uppesdirjCĝ=./file0" or missing value 22:34:34 executing program 1: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socketpair(0x10, 0x6, 0x20, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r7}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000014000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000200ffffffff0800030000000000"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r11}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r11}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_ADDRESS={0x8, 0x3}]}, 0x28}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) r14 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r15}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r15}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r15}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_ADDRESS={0x8, 0x3}]}, 0x28}}, 0x0) r16 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r16, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r16, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) r18 = socket$nl_route(0x10, 0x3, 0x0) r19 = socket$netlink(0x10, 0x3, 0x0) r20 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r20, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r19, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r21}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r21}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r18, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r21}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_ADDRESS={0x8, 0x3}]}, 0x28}}, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000003c0)={@remote, @rand_addr, 0x0}, &(0x7f0000000480)=0xc) r23 = socket$nl_route(0x10, 0x3, 0x0) r24 = socket$netlink(0x10, 0x3, 0x0) r25 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r25, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r25, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r24, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r26}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r26}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r23, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r26}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_ADDRESS={0x8, 0x3}]}, 0x28}}, 0x0) r27 = socket$nl_route(0x10, 0x3, 0x0) r28 = socket$netlink(0x10, 0x3, 0x0) r29 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r29, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r29, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r28, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r30}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r30}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r27, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r30}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_ADDRESS={0x8, 0x3}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'netpci0\x00', r30}) r32 = socket$nl_route(0x10, 0x3, 0x0) r33 = socket$netlink(0x10, 0x3, 0x0) r34 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r34, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r34, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r33, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r35}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r35}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r32, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r35}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_ADDRESS={0x8, 0x3}]}, 0x28}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000940)={{{@in=@multicast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@remote}}, &(0x7f0000000a40)=0xe8) accept4(r1, &(0x7f0000000b40)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000bc0)=0x80, 0x800) r38 = socket$nl_route(0x10, 0x3, 0x0) r39 = socket$netlink(0x10, 0x3, 0x0) r40 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r40, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r40, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r39, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r41}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r41}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r38, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r41}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_ADDRESS={0x8, 0x3}]}, 0x28}}, 0x0) r42 = socket$nl_route(0x10, 0x3, 0x0) r43 = socket$netlink(0x10, 0x3, 0x0) r44 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r44, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r44, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r43, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r45}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r45}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r42, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r45}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_ADDRESS={0x8, 0x3}]}, 0x28}}, 0x0) r46 = socket$nl_route(0x10, 0x3, 0x0) r47 = socket$netlink(0x10, 0x3, 0x0) r48 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r48, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r48, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r47, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r49}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r49}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r46, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r49}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_ADDRESS={0x8, 0x3}]}, 0x28}}, 0x0) r50 = socket$nl_route(0x10, 0x3, 0x0) r51 = socket$netlink(0x10, 0x3, 0x0) r52 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r52, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r52, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r51, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r53}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r53}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r50, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r53}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_ADDRESS={0x8, 0x3}]}, 0x28}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000c00)={{{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000d00)=0xe8) r55 = socket$nl_route(0x10, 0x3, 0x0) r56 = socket$netlink(0x10, 0x3, 0x0) r57 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r57, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r57, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r56, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r58}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r58}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r55, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r58}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_ADDRESS={0x8, 0x3}]}, 0x28}}, 0x0) r59 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r59, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="fe8719c177ab"}, 0x0, {}, 'dummy0\x00'}) getsockopt$inet_IP_XFRM_POLICY(r59, 0x0, 0x11, &(0x7f0000001200)={{{@in=@initdev, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@remote}}, &(0x7f0000001300)=0xe8) r61 = socket$nl_route(0x10, 0x3, 0x0) r62 = socket$netlink(0x10, 0x3, 0x0) r63 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r63, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r63, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r62, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r64}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r64}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r61, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r64}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_ADDRESS={0x8, 0x3}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001340)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000009f00)={'team0\x00', 0x0}) getpeername$packet(r0, &(0x7f0000009f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000009f80)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f000000a900)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f000000a8c0)={&(0x7f0000009fc0)={0x900, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [{{0x8, 0x1, r7}, {0x84, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r11}}, {0x8}}}]}}, {{0x8, 0x1, r15}, {0xb8, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r17}, {0x48, 0x2, [{0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0xfffb, 0x5, 0x5, 0x52fa}, {0x7, 0x99, 0x7f, 0xc6}]}}}]}}, {{0x8, 0x1, r21}, {0xf4, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r22}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}]}}, {{0x8, 0x1, r26}, {0xf8, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r31}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x34, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r35}}, {0x8}}}]}}, {{0x8, 0x1, r36}, {0x23c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1ff}}, {0x8, 0x6, r37}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xcf5b}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r41}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xa0}}, {0x8, 0x6, r45}}}, {0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x44, 0x4, [{0x0, 0x3f, 0x7}, {0x9, 0xa8, 0x3, 0x5}, {0x6, 0x81, 0x1, 0xa00000}, {0x81, 0xe8, 0x5, 0x8000}, {0xb008, 0x5, 0x40, 0x200}, {0x3f, 0xdd, 0x3f, 0x3}, {0x2, 0x3, 0x8, 0x8001}, {0x6, 0x7, 0x4, 0x8}]}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r49}, {0x17c, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r53}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r54}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r58}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x77}}, {0x8, 0x6, r60}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r64}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r65}}}]}}, {{0x8, 0x1, r66}, {0x184, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x10000000}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r67}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xe32d}}, {0x8}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}]}}]}, 0x900}, 0x1, 0x0, 0x0, 0x4040}, 0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) recvfrom$ax25(r0, &(0x7f0000000180)=""/230, 0xe6, 0x0, &(0x7f00000000c0)={{0x3, @default}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x710000) 22:34:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x3b040000, 0x0) 22:34:34 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed009e0270fff0", 0x16}], 0x0, 0x0) [ 2591.885770][T20456] device lo entered promiscuous mode 22:34:34 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lstat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000380)) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mkdir(&(0x7f0000000080)='./file0\x00', 0x2) mount$9p_virtio(&(0x7f0000000180)='user_id', &(0x7f0000000200)='./bus/file0\x00', &(0x7f0000000280)='9p\x00', 0x4004017, &(0x7f0000000400)={'trans=virtio,', {[{@uname={'uname', 0x3d, '}vboxnet1cgroupself'}}, {@mmap='mmap'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'user_id'}}, {@smackfsdef={'smackfsdef', 0x3d, '+bdevppp1('}}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@obj_user={'obj_user', 0x3d, 'vmnet0vmnet1'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@subj_user={'subj_user', 0x3d, 'workdir'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}}) [ 2591.942406][T20495] FAT-fs (loop0): bogus number of FAT structure [ 2591.950736][T20495] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2592.041789][T20495] FAT-fs (loop0): bogus number of FAT structure [ 2592.060486][T20495] FAT-fs (loop0): Can't find a valid FAT filesystem 22:34:35 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002ad0}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:34:35 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed009f0270fff0", 0x16}], 0x0, 0x0) 22:34:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x3c040000, 0x0) 22:34:35 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$unix(r1, &(0x7f0000000140)="24c8385939070000008bad2beba5005cf47d12e27903d3f8168b9f62f35cc5f4ec", 0xd635455c3de76378, 0xffffffffffffffee, 0x0, 0xfffffffffffffec0) recvmmsg(r1, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000740)=""/190, 0xbe}, {&(0x7f0000000440)=""/64, 0x40}], 0x2}}], 0x1, 0x0, 0x0) 22:34:35 executing program 1: 22:34:35 executing program 1: 22:34:35 executing program 5: [ 2592.704301][T20909] FAT-fs (loop0): bogus number of FAT structure 22:34:35 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r2 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r1, r2, 0x0, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x14, r4, 0x101, 0x0, 0x0, {0x11}}, 0x14}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x99770db2cab4190f}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)={0xf0, r4, 0xc01, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_PORT={0xfffffcf1, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xbd}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}]}, @IPVS_CMD_ATTR_DEST={0x0, 0x2, [@IPVS_DEST_ATTR_PORT={0x0, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x0, 0x7, 0x8000}, @IPVS_DEST_ATTR_ADDR={0x0, 0x1, @ipv6=@empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0xf0}, 0x1, 0x0, 0x0, 0x800}, 0x40) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:34:35 executing program 1: [ 2592.836892][T20909] FAT-fs (loop0): Can't find a valid FAT filesystem 22:34:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x3d040000, 0x0) 22:34:35 executing program 5: mknod(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004a40)=[{{0x0, 0xfffffffffffffcdd, 0x0, 0xfffffffffffffeb7}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x2eb, &(0x7f0000003c80)=ANY=[@ANYBLOB="1400000000040000000000000100000000000000000000008000080000000077f98945b208d3302521e26734edd1ff000000000007000000442400000000000000000000ac1414aa000000000000000000000000ac1414aa00000000071700e00000017f000001ac1e000100000000e000000101863700000000000dde03c58d56a8a2cb4bf42b000df37faf5ae3ab0fa44ae55e4101811a0012f18662"], 0x9d}}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 2592.882634][T20923] overlayfs: upper fs is r/o, try multi-lower layers mount 22:34:36 executing program 1: [ 2593.421262][T21004] EXT4-fs: Warning: mounting with data=journal disables delayed allocation and O_DIRECT support! [ 2593.485456][T21004] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2593.502732][T21004] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 2593.512844][T21004] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2593.538693][T21004] EXT4-fs (loop5): corrupt root inode, run e2fsck [ 2593.547594][T21004] EXT4-fs (loop5): mount failed 22:34:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002ad8}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:34:36 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed00a00270fff0", 0x16}], 0x0, 0x0) 22:34:36 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) lsetxattr$security_smack_entry(&(0x7f0000000080)='./bus\x00', &(0x7f0000000140)='security.SMACK64IPOUT\x00', &(0x7f0000000180)='upperdir', 0x8, 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:34:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x3e040000, 0x0) 22:34:36 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x41, 0x0) write$nbd(r2, &(0x7f0000000080)={0x1000000, 0x0, 0x0, 0x0, 0x0, "82b0cfc4336aa6771538be0633e8bd3410000000000000005616b17333ad88f7e4a258981e458e96afda2a87223ba7f4"}, 0x40) 22:34:36 executing program 5: mknod(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004a40)=[{{0x0, 0xfffffffffffffcdd, 0x0, 0xfffffffffffffeb7}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x2eb, &(0x7f0000003c80)=ANY=[@ANYBLOB="1400000000040000000000000100000000000000000000008000080000000077f98945b208d3302521e26734edd1ff000000000007000000442400000000000000000000ac1414aa000000000000000000000000ac1414aa00000000071700e00000017f000001ac1e000100000000e000000101863700000000000dde03c58d56a8a2cb4bf42b000df37faf5ae3ab0fa44ae55e4101811a0012f18662"], 0x9d}}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 2593.970057][T21168] dlm: dev_write no op 34bde833 10 [ 2594.039913][T21163] FAT-fs (loop0): bogus number of FAT structure [ 2594.089786][T21163] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2594.159028][T21169] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2594.179783][T21169] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 2594.190960][T21169] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2594.211212][T21169] EXT4-fs (loop5): corrupt root inode, run e2fsck [ 2594.225389][T21163] FAT-fs (loop0): bogus number of FAT structure [ 2594.227785][T21169] EXT4-fs (loop5): mount failed 22:34:37 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) eventfd(0xc5) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r1 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r0, r1, 0x0, 0x1) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0) connect$bt_l2cap(r2, &(0x7f0000000140)={0x1f, 0x9, {0x2e, 0xd5, 0x2d, 0x6, 0x0, 0x3}, 0x5, 0x4}, 0xe) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66690765312c75707065eb85b6a163597fba6b7c54ff0f56"]) [ 2594.257517][T21163] FAT-fs (loop0): Can't find a valid FAT filesystem 22:34:37 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x3f000000, 0x0) 22:34:37 executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pause() tkill(r0, 0x1000000000013) 22:34:37 executing program 5: mknod(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004a40)=[{{0x0, 0xfffffffffffffcdd, 0x0, 0xfffffffffffffeb7}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x2eb, &(0x7f0000003c80)=ANY=[@ANYBLOB="1400000000040000000000000100000000000000000000008000080000000077f98945b208d3302521e26734edd1ff000000000007000000442400000000000000000000ac1414aa000000000000000000000000ac1414aa00000000071700e00000017f000001ac1e000100000000e000000101863700000000000dde03c58d56a8a2cb4bf42b000df37faf5ae3ab0fa44ae55e4101811a0012f18662"], 0x9d}}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 22:34:37 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed00a10270fff0", 0x16}], 0x0, 0x0) [ 2594.554233][T21400] overlayfs: unrecognized mount option "uppe녶cYk|TV" or missing value 22:34:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x81) bind(r3, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) sendfile(r2, r4, 0x0, 0x200fff) [ 2594.645953][T21399] FAT-fs (loop3): bogus logical sector size 18302 [ 2594.710986][T21399] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2594.863655][T21619] FAT-fs (loop0): bogus number of FAT structure [ 2594.877488][T21619] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2594.890439][T21399] FAT-fs (loop3): bogus logical sector size 18302 [ 2594.930576][T21399] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2595.023499][T21619] FAT-fs (loop0): bogus number of FAT structure [ 2595.052832][T21619] FAT-fs (loop0): Can't find a valid FAT filesystem 22:34:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0xfe1a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp={0x20002ae0}, @sack_perm, @mss, @mss, @mss], 0x12fb85) 22:34:38 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10011, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r2 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r1, r2, 0x0, 0x1) fsmount(r1, 0x1, 0x9) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 22:34:38 executing program 5: mknod(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004a40)=[{{0x0, 0xfffffffffffffcdd, 0x0, 0xfffffffffffffeb7}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x2eb, &(0x7f0000003c80)=ANY=[@ANYBLOB="1400000000040000000000000100000000000000000000008000080000000077f98945b208d3302521e26734edd1ff000000000007000000442400000000000000000000ac1414aa000000000000000000000000ac1414aa00000000071700e00000017f000001ac1e000100000000e000000101863700000000000dde03c58d56a8a2cb4bf42b000df37faf5ae3ab0fa44ae55e4101811a0012f18662"], 0x9d}}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 22:34:38 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000680)="deb843943256917e4733fd2d2abc602f71f0", 0x12, 0x4}, {0x0, 0x0, 0x1ca22705}], 0x3f040000, 0x0) 22:34:38 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) ftruncate(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x600) sendfile(r0, r1, 0x0, 0x10000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x13, 0xffffffffffffffff, 0xbdb41000) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x139) msgget$private(0x0, 0x0) 22:34:38 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xffff7ffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed00a20270fff0", 0x16}], 0x0, 0x0) [ 2595.367859][ T23] audit: type=1804 audit(1574375678.329:102): pid=21834 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir455474171/syzkaller.wYNXD2/3735/file0" dev="sda1" ino=17488 res=1 [ 2595.370485][T21836] overlayfs: upper fs is r/o, try multi-lower layers mount [ 2595.453913][T21840] FAT-fs (loop0): bogus number of FAT structure [ 2595.460781][T21840] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2595.525346][T21832] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2595.577659][T21832] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 2595.588382][T21832] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2595.650318][T21832] EXT4-fs (loop5): corrupt root inode, run e2fsck [ 2595.691115][T21832] EXT4-fs (loop5): mount failed [ 2595.705511][ T23] audit: type=1800 audit(1574375678.329:103): pid=21834 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=17488 res=0 [ 2595.746264][T21834] ------------[ cut here ]------------ [ 2595.751793][T21834] WARNING: CPU: 0 PID: 21834 at lib/iov_iter.c:1162 iov_iter_pipe+0x25b/0x2f0 [ 2595.760642][T21834] Kernel panic - not syncing: panic_on_warn set ... [ 2595.767240][T21834] CPU: 0 PID: 21834 Comm: syz-executor.1 Not tainted 5.4.0-rc8-next-20191120-syzkaller #0 [ 2595.777124][T21834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2595.787355][T21834] Call Trace: [ 2595.790658][T21834] dump_stack+0x197/0x210 [ 2595.794991][T21834] ? iov_iter_pipe+0x1d0/0x2f0 [ 2595.799769][T21834] panic+0x2e3/0x75c [ 2595.803688][T21834] ? add_taint.cold+0x16/0x16 [ 2595.808379][T21834] ? printk+0xba/0xed [ 2595.812362][T21834] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 2595.817821][T21834] ? __warn.cold+0x14/0x35 [ 2595.822250][T21834] ? iov_iter_pipe+0x25b/0x2f0 [ 2595.827015][T21834] __warn.cold+0x2f/0x35 [ 2595.831261][T21834] ? report_bug.cold+0x63/0xb2 [ 2595.836024][T21834] ? iov_iter_pipe+0x25b/0x2f0 [ 2595.840792][T21834] report_bug+0x289/0x300 [ 2595.845126][T21834] do_error_trap+0x11b/0x200 [ 2595.849728][T21834] do_invalid_op+0x37/0x50 [ 2595.854151][T21834] ? iov_iter_pipe+0x25b/0x2f0 [ 2595.858918][T21834] invalid_op+0x23/0x30 [ 2595.863077][T21834] RIP: 0010:iov_iter_pipe+0x25b/0x2f0 [ 2595.868496][T21834] Code: 83 c0 03 38 d0 7c 04 84 d2 75 33 44 89 63 24 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 bc 2a 2e fe 0f 0b e8 b5 2a 2e fe <0f> 0b e9 53 fe ff ff 4c 89 f7 e8 36 b2 6a fe e9 f5 fd ff ff e8 cc [ 2595.888123][T21834] RSP: 0018:ffff8880536cf988 EFLAGS: 00010246 [ 2595.894218][T21834] RAX: 0000000000040000 RBX: ffff8880536cfa18 RCX: ffffc90008156000 [ 2595.902216][T21834] RDX: 0000000000040000 RSI: ffffffff8345d08b RDI: 0000000000000004 [ 2595.910195][T21834] RBP: ffff8880536cf9c0 R08: ffff88802f73e000 R09: 0000000000000000 [ 2595.918258][T21834] R10: fffffbfff13916b0 R11: ffffffff89c8b587 R12: ffff888061b0ac00 [ 2595.926238][T21834] R13: 0000000000000010 R14: ffff888061b0acc8 R15: ffff888061b0acd0 [ 2595.934246][T21834] ? iov_iter_pipe+0x25b/0x2f0 [ 2595.939027][T21834] ? iov_iter_pipe+0x25b/0x2f0 [ 2595.943809][T21834] generic_file_splice_read+0xa7/0x800 [ 2595.949296][T21834] ? fsnotify_first_mark+0x210/0x210 [ 2595.954630][T21834] ? add_to_pipe+0x350/0x350 [ 2595.959237][T21834] ? security_file_permission+0x8f/0x380 [ 2595.964882][T21834] ? rw_verify_area+0x126/0x360 [ 2595.969743][T21834] ? add_to_pipe+0x350/0x350 [ 2595.974348][T21834] do_splice_to+0x127/0x180 [ 2595.978887][T21834] splice_direct_to_actor+0x2d3/0x970 [ 2595.984268][T21834] ? generic_pipe_buf_nosteal+0x10/0x10 [ 2595.989827][T21834] ? do_splice_to+0x180/0x180 [ 2595.994530][T21834] ? rw_verify_area+0x126/0x360 [ 2595.999388][T21834] do_splice_direct+0x1da/0x2a0 [ 2596.004249][T21834] ? splice_direct_to_actor+0x970/0x970 [ 2596.009810][T21834] ? rcu_read_lock_any_held+0xcd/0xf0 [ 2596.015208][T21834] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2596.021460][T21834] ? __this_cpu_preempt_check+0x35/0x190 [ 2596.027106][T21834] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2596.033366][T21834] ? __sb_start_write+0x1e5/0x460 [ 2596.038529][T21834] do_sendfile+0x597/0xd00 [ 2596.042981][T21834] ? do_compat_pwritev64+0x1c0/0x1c0 [ 2596.048299][T21834] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2596.053379][ T4008] kobject: 'loop2' (00000000adfb2c85): kobject_uevent_env [ 2596.053787][T21834] __x64_sys_sendfile64+0x1dd/0x220 [ 2596.066129][T21834] ? __ia32_sys_sendfile+0x230/0x230 [ 2596.071441][T21834] ? do_syscall_64+0xc0/0x790 [ 2596.076156][T21834] do_syscall_64+0xfa/0x790 [ 2596.076672][ T4008] kobject: 'loop2' (00000000adfb2c85): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2596.080670][T21834] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2596.080683][T21834] RIP: 0033:0x45a639 [ 2596.080699][T21834] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2596.080707][T21834] RSP: 002b:00007fe754106c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2596.080721][T21834] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a639 [ 2596.080728][T21834] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2596.080742][T21834] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2596.152718][T21834] R10: 0000000000010000 R11: 0000000000000246 R12: 00007fe7541076d4 [ 2596.160732][T21834] R13: 00000000004c83bf R14: 00000000004de7f0 R15: 00000000ffffffff [ 2596.170988][T21834] Kernel Offset: disabled [ 2596.175591][T21834] Rebooting in 86400 seconds..