ck_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x0, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 683.298101][T21416] FAT-fs (loop2): count of clusters too big (4294966676) [ 683.308247][T21419] bridge70: port 1(syz_tun) entered blocking state [ 683.314999][T21419] bridge70: port 1(syz_tun) entered disabled state [ 683.322304][T21419] device syz_tun entered promiscuous mode [ 683.330526][T21416] FAT-fs (loop2): Can't find a valid FAT filesystem [ 683.330615][T21409] device syz_tun left promiscuous mode 09:11:06 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pselect6(0x40, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, &(0x7f0000000180)={0x9, 0x4}, 0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={[0x10000000000]}, 0x8}) 09:11:06 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f800", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 683.369178][T21409] bridge419: port 1(syz_tun) entered disabled state 09:11:06 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f800", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 683.448991][T21424] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 683.475181][T21425] device syz_tun left promiscuous mode [ 683.487766][T21425] bridge131: port 1(syz_tun) entered disabled state 09:11:06 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001002250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 683.546552][T21425] bridge132: port 1(syz_tun) entered blocking state [ 683.553212][T21425] bridge132: port 1(syz_tun) entered disabled state [ 683.582898][T21429] FAT-fs (loop1): count of clusters too big (4294966676) [ 683.585300][T21425] device syz_tun entered promiscuous mode 09:11:06 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x0, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 683.635618][T21432] FAT-fs (loop2): count of clusters too big (4294966676) [ 683.639941][T21429] FAT-fs (loop1): Can't find a valid FAT filesystem [ 683.643019][T21432] FAT-fs (loop2): Can't find a valid FAT filesystem 09:11:06 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x0, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 683.746377][T21436] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 683.761371][T21432] FAT-fs (loop2): count of clusters too big (4294966676) [ 683.767496][T21436] bridge420: port 1(syz_tun) entered blocking state [ 683.775375][T21436] bridge420: port 1(syz_tun) entered disabled state [ 683.782519][T21429] FAT-fs (loop1): count of clusters too big (4294966676) [ 683.782945][T21436] device syz_tun entered promiscuous mode 09:11:07 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x7ffffff9, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 683.797151][T21432] FAT-fs (loop2): Can't find a valid FAT filesystem [ 683.825042][T21429] FAT-fs (loop1): Can't find a valid FAT filesystem [ 683.829554][T21441] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:11:07 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f800", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 683.883398][T21443] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 09:11:07 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f800", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:11:07 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001003250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 683.985731][T21444] device syz_tun left promiscuous mode [ 684.010081][T21444] bridge132: port 1(syz_tun) entered disabled state [ 684.066192][T21451] FAT-fs (loop2): count of clusters too big (4294966676) [ 684.066895][T21444] bridge133: port 1(syz_tun) entered blocking state [ 684.090611][T21444] bridge133: port 1(syz_tun) entered disabled state [ 684.100759][T21453] FAT-fs (loop1): count of clusters too big (4294966676) [ 684.107541][T21444] device syz_tun entered promiscuous mode [ 684.111520][T21453] FAT-fs (loop1): Can't find a valid FAT filesystem [ 684.114025][T21451] FAT-fs (loop2): Can't find a valid FAT filesystem [ 684.145234][T21445] device syz_tun left promiscuous mode [ 684.151905][T21445] bridge70: port 1(syz_tun) entered disabled state [ 684.207613][T21445] bridge71: port 1(syz_tun) entered blocking state [ 684.235724][T21445] bridge71: port 1(syz_tun) entered disabled state [ 684.244851][T21451] FAT-fs (loop2): count of clusters too big (4294966676) [ 684.248540][T21445] device syz_tun entered promiscuous mode [ 684.252278][T21451] FAT-fs (loop2): Can't find a valid FAT filesystem [ 684.264647][T21453] FAT-fs (loop1): count of clusters too big (4294966676) [ 684.274936][T21453] FAT-fs (loop1): Can't find a valid FAT filesystem [ 684.294505][ C0] net_ratelimit: 14 callbacks suppressed [ 684.294515][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 684.305983][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 684.308902][T21457] device syz_tun left promiscuous mode [ 684.311737][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 684.311816][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 684.329019][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 684.334789][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:11:07 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 684.353815][T21457] bridge420: port 1(syz_tun) entered disabled state [ 684.454480][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 684.460295][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 684.476644][T21457] bridge421: port 1(syz_tun) entered blocking state 09:11:07 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f800", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 684.501028][T21457] bridge421: port 1(syz_tun) entered disabled state 09:11:07 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf250200000005003000227fa8a24a000900aab9b2fb3c7d4afc8c2b01f01edbaaaaaaaaaa000008000600", @ANYRES32=0x0, @ANYBLOB="08003c000600000005002e0001000000050033000000000008000600", @ANYRES32=0x0, @ANYBLOB="0500330000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4c0c1}, 0x4804) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090200000000000000000100000008000a004e330000080008"], 0x3}}, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x4c, r2, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x13}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) pselect6(0x8f, &(0x7f0000000140), &(0x7f0000000180)={0x9}, 0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400), 0x8}) 09:11:07 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f800", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 684.562308][T21457] device syz_tun entered promiscuous mode [ 684.624096][T21462] device syz_tun left promiscuous mode [ 684.637870][T21462] bridge133: port 1(syz_tun) entered disabled state 09:11:07 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001004250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 684.700201][T21462] bridge134: port 1(syz_tun) entered blocking state [ 684.709975][T21466] FAT-fs (loop2): count of clusters too big (4294966676) [ 684.719596][T21462] bridge134: port 1(syz_tun) entered disabled state [ 684.757460][T21466] FAT-fs (loop2): Can't find a valid FAT filesystem [ 684.764799][T21462] device syz_tun entered promiscuous mode [ 684.774535][T21472] FAT-fs (loop1): count of clusters too big (4294966676) 09:11:08 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb02906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) 09:11:08 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001003250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 684.814860][T21472] FAT-fs (loop1): Can't find a valid FAT filesystem [ 684.867964][T21466] FAT-fs (loop2): count of clusters too big (4294966676) [ 684.885640][T21466] FAT-fs (loop2): Can't find a valid FAT filesystem 09:11:08 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 684.919843][T21477] device syz_tun left promiscuous mode [ 684.934649][T21477] bridge421: port 1(syz_tun) entered disabled state [ 684.958482][T21472] FAT-fs (loop1): count of clusters too big (4294966676) 09:11:08 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f800", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 684.976145][T21472] FAT-fs (loop1): Can't find a valid FAT filesystem [ 684.989792][T21482] FAT-fs (loop3): bogus logical sector size 524 [ 684.997923][T21477] bridge422: port 1(syz_tun) entered blocking state [ 685.004582][T21482] FAT-fs (loop3): Can't find a valid FAT filesystem [ 685.019146][T21477] bridge422: port 1(syz_tun) entered disabled state 09:11:08 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f800", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 685.031294][T21477] device syz_tun entered promiscuous mode [ 685.051147][T21485] device syz_tun left promiscuous mode [ 685.068681][T21485] bridge71: port 1(syz_tun) entered disabled state [ 685.089742][T21482] FAT-fs (loop3): bogus logical sector size 524 [ 685.119251][T21482] FAT-fs (loop3): Can't find a valid FAT filesystem [ 685.157554][T21485] bridge72: port 1(syz_tun) entered blocking state [ 685.168730][T21485] bridge72: port 1(syz_tun) entered disabled state [ 685.175427][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 685.175452][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 685.190388][T21485] device syz_tun entered promiscuous mode [ 685.198787][T21483] device syz_tun left promiscuous mode [ 685.204988][T21483] bridge422: port 1(syz_tun) entered disabled state [ 685.221198][T21493] FAT-fs (loop2): count of clusters too big (4294966676) [ 685.236875][T21497] FAT-fs (loop1): count of clusters too big (4294966676) [ 685.246438][T21493] FAT-fs (loop2): Can't find a valid FAT filesystem [ 685.273746][T21494] device syz_tun left promiscuous mode [ 685.289676][T21494] bridge134: port 1(syz_tun) entered disabled state [ 685.298942][T21497] FAT-fs (loop1): Can't find a valid FAT filesystem 09:11:08 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001005250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:11:08 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb03906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 685.377076][T21494] bridge135: port 1(syz_tun) entered blocking state [ 685.394213][T21493] FAT-fs (loop2): count of clusters too big (4294966676) [ 685.405601][T21497] FAT-fs (loop1): count of clusters too big (4294966676) [ 685.412651][T21497] FAT-fs (loop1): Can't find a valid FAT filesystem 09:11:08 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf250200000005003000227fa8a24a000900aab9b2fb3c7d4afc8c2b01f01edbaaaaaaaaaa000008000600", @ANYRES32=0x0, @ANYBLOB="08003c000600000005002e0001000000050033000000000008000600", @ANYRES32=0x0, @ANYBLOB="0500330000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4c0c1}, 0x4804) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090200000000000000000100000008000a004e330000080008"], 0x3}}, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x4c, r2, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x13}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) pselect6(0x8f, &(0x7f0000000140), &(0x7f0000000180)={0x9}, 0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400), 0x8}) [ 685.426515][T21494] bridge135: port 1(syz_tun) entered disabled state [ 685.433195][T21493] FAT-fs (loop2): Can't find a valid FAT filesystem [ 685.450384][T21494] device syz_tun entered promiscuous mode [ 685.479394][T21504] bridge423: port 1(syz_tun) entered blocking state [ 685.504597][T21504] bridge423: port 1(syz_tun) entered disabled state [ 685.522815][T21504] device syz_tun entered promiscuous mode 09:11:08 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f800", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 685.553602][T21505] FAT-fs (loop3): bogus logical sector size 524 [ 685.567846][T21505] FAT-fs (loop3): Can't find a valid FAT filesystem 09:11:08 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f800", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:11:08 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 685.635543][T21508] device syz_tun left promiscuous mode [ 685.643855][T21508] bridge423: port 1(syz_tun) entered disabled state [ 685.672103][T21505] FAT-fs (loop3): bogus logical sector size 524 [ 685.688640][T21505] FAT-fs (loop3): Can't find a valid FAT filesystem [ 685.713739][T21516] device syz_tun left promiscuous mode 09:11:08 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001006250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 685.738870][T21516] bridge135: port 1(syz_tun) entered disabled state 09:11:08 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:11:09 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb04906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 685.793317][T21517] FAT-fs (loop2): count of clusters too big (4294966676) [ 685.802466][T21516] bridge136: port 1(syz_tun) entered blocking state [ 685.809243][T21519] FAT-fs (loop1): count of clusters too big (4294966676) [ 685.814781][T21516] bridge136: port 1(syz_tun) entered disabled state [ 685.822613][T21517] FAT-fs (loop2): Can't find a valid FAT filesystem [ 685.845851][T21516] device syz_tun entered promiscuous mode [ 685.851729][T21519] FAT-fs (loop1): Can't find a valid FAT filesystem 09:11:09 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 685.907395][T21524] bridge424: port 1(syz_tun) entered blocking state [ 685.922249][T21524] bridge424: port 1(syz_tun) entered disabled state [ 685.941204][T21524] device syz_tun entered promiscuous mode [ 685.952216][T21517] FAT-fs (loop2): count of clusters too big (4294966676) [ 685.970804][T21526] bond0: (slave bridge73): Enslaving as an active interface with an up link [ 685.978363][T21517] FAT-fs (loop2): Can't find a valid FAT filesystem [ 685.992423][T21519] FAT-fs (loop1): count of clusters too big (4294966676) [ 685.999692][T21527] device syz_tun left promiscuous mode 09:11:09 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf250200000005003000227fa8a24a000900aab9b2fb3c7d4afc8c2b01f01edbaaaaaaaaaa000008000600", @ANYRES32=0x0, @ANYBLOB="08003c000600000005002e0001000000050033000000000008000600", @ANYRES32=0x0, @ANYBLOB="0500330000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4c0c1}, 0x4804) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r2 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x400000, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)={r4, r5, 0x2}) pselect6(0x8f, &(0x7f0000000140), &(0x7f0000000180)={0x9}, 0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400), 0x8}) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000fddbdf250200000005003000227fa8a24a000900aab9b2fb3c7d4afc8c2b01f01edbaaaaaaaaaa000008000600", @ANYRES32=0x0, @ANYBLOB="08003c000600000005002e0001000000050033000000000008000600", @ANYRES32=0x0, @ANYBLOB="0500330000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4c0c1}, 0x4804) recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) fgetxattr(r6, &(0x7f0000000280)=@known='com.apple.system.Security\x00', &(0x7f0000000340)=""/12, 0xc) [ 686.012750][T21527] bridge424: port 1(syz_tun) entered disabled state [ 686.019997][T21519] FAT-fs (loop1): Can't find a valid FAT filesystem [ 686.049799][T21535] FAT-fs (loop3): bogus logical sector size 524 [ 686.067795][T21535] FAT-fs (loop3): Can't find a valid FAT filesystem 09:11:09 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f800", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 686.123668][T21534] device syz_tun left promiscuous mode [ 686.145828][T21534] bridge136: port 1(syz_tun) entered disabled state 09:11:09 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001007250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 686.208025][T21534] bridge137: port 1(syz_tun) entered blocking state [ 686.227548][T21534] bridge137: port 1(syz_tun) entered disabled state [ 686.229049][T21535] FAT-fs (loop3): bogus logical sector size 524 [ 686.248616][T21534] device syz_tun entered promiscuous mode 09:11:09 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f800", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 686.271612][T21535] FAT-fs (loop3): Can't find a valid FAT filesystem [ 686.314670][T21543] bridge425: port 1(syz_tun) entered blocking state [ 686.321476][T21543] bridge425: port 1(syz_tun) entered disabled state [ 686.328866][T21543] device syz_tun entered promiscuous mode 09:11:09 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb05906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 686.424202][T21545] FAT-fs (loop2): count of clusters too big (4294966676) [ 686.434530][T21545] FAT-fs (loop2): Can't find a valid FAT filesystem 09:11:09 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:11:09 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100a250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:11:09 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf250200000005003000227fa8a24a000900aab9b2fb3c7d4afc8c2b01f01edbaaaaaaaaaa000008000600", @ANYRES32=0x0, @ANYBLOB="08003c000600000005002e0001000000050033000000000008000600", @ANYRES32=0x0, @ANYBLOB="0500330000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4c0c1}, 0x4804) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r2 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x400000, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)={r4, r5, 0x2}) pselect6(0x8f, &(0x7f0000000140), &(0x7f0000000180)={0x9}, 0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400), 0x8}) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000fddbdf250200000005003000227fa8a24a000900aab9b2fb3c7d4afc8c2b01f01edbaaaaaaaaaa000008000600", @ANYRES32=0x0, @ANYBLOB="08003c000600000005002e0001000000050033000000000008000600", @ANYRES32=0x0, @ANYBLOB="0500330000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4c0c1}, 0x4804) recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) fgetxattr(r6, &(0x7f0000000280)=@known='com.apple.system.Security\x00', &(0x7f0000000340)=""/12, 0xc) [ 686.575160][T21550] FAT-fs (loop1): count of clusters too big (4294966676) [ 686.592301][T21545] FAT-fs (loop2): count of clusters too big (4294966676) [ 686.599804][T21545] FAT-fs (loop2): Can't find a valid FAT filesystem [ 686.606562][T21550] FAT-fs (loop1): Can't find a valid FAT filesystem [ 686.627789][T21556] device syz_tun left promiscuous mode [ 686.633494][T21556] bridge137: port 1(syz_tun) entered disabled state [ 686.672931][T21557] FAT-fs (loop3): bogus logical sector size 524 [ 686.683101][T21556] bridge138: port 1(syz_tun) entered blocking state [ 686.699408][T21557] FAT-fs (loop3): Can't find a valid FAT filesystem [ 686.712749][T21556] bridge138: port 1(syz_tun) entered disabled state 09:11:09 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f800", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 686.733577][T21550] FAT-fs (loop1): count of clusters too big (4294966676) [ 686.753600][T21556] device syz_tun entered promiscuous mode [ 686.768278][T21550] FAT-fs (loop1): Can't find a valid FAT filesystem [ 686.783892][T21561] device syz_tun left promiscuous mode [ 686.811119][T21561] bridge425: port 1(syz_tun) entered disabled state 09:11:10 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 686.876751][T21561] bridge426: port 1(syz_tun) entered blocking state [ 686.904263][T21557] FAT-fs (loop3): bogus logical sector size 524 [ 686.924523][T21557] FAT-fs (loop3): Can't find a valid FAT filesystem [ 686.937611][T21561] bridge426: port 1(syz_tun) entered disabled state 09:11:10 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f800", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 686.968739][T21561] device syz_tun entered promiscuous mode [ 686.996239][T21571] device syz_tun left promiscuous mode [ 687.001883][T21571] bridge138: port 1(syz_tun) entered disabled state [ 687.019095][T21572] FAT-fs (loop2): count of clusters too big (4294966676) [ 687.054471][T21572] FAT-fs (loop2): Can't find a valid FAT filesystem 09:11:10 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb06906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 687.063331][T21571] bridge139: port 1(syz_tun) entered blocking state [ 687.073429][T21571] bridge139: port 1(syz_tun) entered disabled state [ 687.085696][T21571] device syz_tun entered promiscuous mode [ 687.103767][T21564] device syz_tun left promiscuous mode [ 687.109426][T21564] bridge426: port 1(syz_tun) entered disabled state 09:11:10 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00/\x00%\b\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 687.177867][T21577] FAT-fs (loop1): count of clusters too big (4294966676) [ 687.188406][T21572] FAT-fs (loop2): count of clusters too big (4294966676) [ 687.206047][T21572] FAT-fs (loop2): Can't find a valid FAT filesystem [ 687.214602][T21577] FAT-fs (loop1): Can't find a valid FAT filesystem [ 687.220617][T21581] FAT-fs (loop3): bogus logical sector size 524 09:11:10 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100c250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:11:10 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 687.227556][T21581] FAT-fs (loop3): Can't find a valid FAT filesystem [ 687.333064][T21584] __nla_validate_parse: 21 callbacks suppressed [ 687.333083][T21584] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 687.365505][T21577] FAT-fs (loop1): count of clusters too big (4294966676) 09:11:10 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f800", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 687.381467][T21581] FAT-fs (loop3): bogus logical sector size 524 [ 687.391786][T21577] FAT-fs (loop1): Can't find a valid FAT filesystem [ 687.394620][T21587] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 687.421447][T21581] FAT-fs (loop3): Can't find a valid FAT filesystem 09:11:10 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f800", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 687.437525][T21589] bridge427: port 1(syz_tun) entered blocking state [ 687.444295][T21589] bridge427: port 1(syz_tun) entered disabled state [ 687.452427][T21589] device syz_tun entered promiscuous mode [ 687.467837][T21591] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 687.507953][T21592] device syz_tun left promiscuous mode [ 687.513587][T21592] bridge72: port 1(syz_tun) entered disabled state [ 687.580037][T21592] bridge74: port 1(syz_tun) entered blocking state [ 687.599960][T21592] bridge74: port 1(syz_tun) entered disabled state 09:11:10 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb07906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 687.629613][T21592] device syz_tun entered promiscuous mode [ 687.647909][T21598] FAT-fs (loop2): count of clusters too big (4294966676) [ 687.657905][T21601] FAT-fs (loop1): count of clusters too big (4294966676) [ 687.672724][T21598] FAT-fs (loop2): Can't find a valid FAT filesystem 09:11:10 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100e250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:11:10 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100a250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 687.674509][T21593] device syz_tun left promiscuous mode [ 687.699040][T21593] bridge139: port 1(syz_tun) entered disabled state [ 687.706030][T21601] FAT-fs (loop1): Can't find a valid FAT filesystem [ 687.767659][T21593] bridge140: port 1(syz_tun) entered blocking state [ 687.774711][T21593] bridge140: port 1(syz_tun) entered disabled state [ 687.782416][T21593] device syz_tun entered promiscuous mode [ 687.824776][T21604] FAT-fs (loop3): bogus logical sector size 524 [ 687.831065][T21604] FAT-fs (loop3): Can't find a valid FAT filesystem 09:11:11 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 687.873973][T21610] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 687.895677][T21611] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 687.911425][T21601] FAT-fs (loop1): count of clusters too big (4294966676) [ 687.919196][T21598] FAT-fs (loop2): count of clusters too big (4294966676) [ 687.930979][T21601] FAT-fs (loop1): Can't find a valid FAT filesystem [ 687.942100][T21610] device syz_tun left promiscuous mode [ 687.942235][T21604] FAT-fs (loop3): bogus logical sector size 524 [ 687.950835][T21610] bridge74: port 1(syz_tun) entered disabled state [ 687.954089][T21598] FAT-fs (loop2): Can't find a valid FAT filesystem [ 687.968510][T21604] FAT-fs (loop3): Can't find a valid FAT filesystem 09:11:11 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 688.020067][T21610] bridge75: port 1(syz_tun) entered blocking state [ 688.027439][T21610] bridge75: port 1(syz_tun) entered disabled state [ 688.035330][T21610] device syz_tun entered promiscuous mode [ 688.044014][T21613] device syz_tun left promiscuous mode [ 688.052057][T21613] bridge427: port 1(syz_tun) entered disabled state 09:11:11 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f800", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:11:11 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f800", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:11:11 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb08906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 688.140415][T21613] bridge428: port 1(syz_tun) entered blocking state [ 688.147369][T21613] bridge428: port 1(syz_tun) entered disabled state [ 688.175073][T21613] device syz_tun entered promiscuous mode [ 688.193494][T21616] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 688.222663][T21617] device syz_tun left promiscuous mode [ 688.229674][T21617] bridge140: port 1(syz_tun) entered disabled state [ 688.266054][T21623] FAT-fs (loop2): count of clusters too big (4294966676) [ 688.273306][T21623] FAT-fs (loop2): Can't find a valid FAT filesystem [ 688.286598][T21617] bridge141: port 1(syz_tun) entered blocking state [ 688.293241][T21617] bridge141: port 1(syz_tun) entered disabled state [ 688.302541][T21627] FAT-fs (loop1): count of clusters too big (4294966676) [ 688.321398][T21627] FAT-fs (loop1): Can't find a valid FAT filesystem [ 688.325391][T21617] device syz_tun entered promiscuous mode [ 688.359441][T21620] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 688.392393][T21633] FAT-fs (loop3): bogus logical sector size 524 [ 688.409008][T21633] FAT-fs (loop3): Can't find a valid FAT filesystem [ 688.420599][T21621] device syz_tun left promiscuous mode [ 688.427019][T21623] FAT-fs (loop2): count of clusters too big (4294966676) [ 688.436858][T21623] FAT-fs (loop2): Can't find a valid FAT filesystem 09:11:11 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 688.465762][T21621] bridge75: port 1(syz_tun) entered disabled state [ 688.499283][T21627] FAT-fs (loop1): count of clusters too big (4294966676) [ 688.517477][T21621] bridge76: port 1(syz_tun) entered blocking state [ 688.524020][T21621] bridge76: port 1(syz_tun) entered disabled state [ 688.524471][T21627] FAT-fs (loop1): Can't find a valid FAT filesystem 09:11:11 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f800", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 688.566132][T21621] device syz_tun entered promiscuous mode [ 688.588541][T21639] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 688.610048][T21633] FAT-fs (loop3): bogus logical sector size 524 09:11:11 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001010250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 688.625840][T21633] FAT-fs (loop3): Can't find a valid FAT filesystem 09:11:11 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f800", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:11:11 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 688.675188][T21640] device syz_tun left promiscuous mode [ 688.683204][T21640] bridge141: port 1(syz_tun) entered disabled state 09:11:11 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb09906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 688.745427][T21640] bridge142: port 1(syz_tun) entered blocking state [ 688.752859][T21640] bridge142: port 1(syz_tun) entered disabled state [ 688.760520][T21640] device syz_tun entered promiscuous mode [ 688.767203][T21642] FAT-fs (loop2): count of clusters too big (4294966676) [ 688.780548][T21644] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 09:11:12 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 688.807557][T21642] FAT-fs (loop2): Can't find a valid FAT filesystem [ 688.838186][T21647] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 688.875968][T21649] device syz_tun left promiscuous mode [ 688.881943][T21649] bridge428: port 1(syz_tun) entered disabled state [ 688.900419][T21650] FAT-fs (loop1): count of clusters too big (4294966676) [ 688.919411][T21653] FAT-fs (loop3): bogus logical sector size 524 [ 688.920418][T21642] FAT-fs (loop2): count of clusters too big (4294966676) [ 688.925796][T21650] FAT-fs (loop1): Can't find a valid FAT filesystem [ 688.934409][T21642] FAT-fs (loop2): Can't find a valid FAT filesystem [ 688.950725][T21649] bridge429: port 1(syz_tun) entered blocking state [ 688.954498][T21653] FAT-fs (loop3): Can't find a valid FAT filesystem [ 688.962260][T21649] bridge429: port 1(syz_tun) entered disabled state [ 688.973464][T21649] device syz_tun entered promiscuous mode [ 688.982217][T21652] device syz_tun left promiscuous mode [ 688.988511][T21652] bridge76: port 1(syz_tun) entered disabled state 09:11:12 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f800", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 689.038438][T21652] bridge77: port 1(syz_tun) entered blocking state [ 689.057753][T21652] bridge77: port 1(syz_tun) entered disabled state [ 689.077491][T21652] device syz_tun entered promiscuous mode [ 689.110022][T21659] device syz_tun left promiscuous mode [ 689.131856][T21659] bridge142: port 1(syz_tun) entered disabled state [ 689.142194][T21653] FAT-fs (loop3): bogus logical sector size 524 09:11:12 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000103e250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 689.155743][T21650] FAT-fs (loop1): count of clusters too big (4294966676) 09:11:12 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00 \x00%\b\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 689.187401][T21653] FAT-fs (loop3): Can't find a valid FAT filesystem [ 689.194209][T21650] FAT-fs (loop1): Can't find a valid FAT filesystem 09:11:12 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb0a906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 689.266558][T21659] bridge143: port 1(syz_tun) entered blocking state [ 689.273402][T21659] bridge143: port 1(syz_tun) entered disabled state [ 689.296313][T21659] device syz_tun entered promiscuous mode 09:11:12 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 689.331949][T21670] device syz_tun left promiscuous mode [ 689.344493][ C1] net_ratelimit: 12 callbacks suppressed [ 689.344501][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 689.344698][T21670] bridge429: port 1(syz_tun) entered disabled state [ 689.350196][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 689.368711][T21668] FAT-fs (loop2): count of clusters too big (4294966676) 09:11:12 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f800", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 689.412120][T21674] FAT-fs (loop3): bogus logical sector size 524 [ 689.413553][T21668] FAT-fs (loop2): Can't find a valid FAT filesystem [ 689.425945][T21674] FAT-fs (loop3): Can't find a valid FAT filesystem [ 689.437203][T21670] bridge430: port 1(syz_tun) entered blocking state [ 689.443996][T21670] bridge430: port 1(syz_tun) entered disabled state [ 689.451611][T21670] device syz_tun entered promiscuous mode [ 689.473578][T21678] device syz_tun left promiscuous mode [ 689.493842][T21678] bridge143: port 1(syz_tun) entered disabled state [ 689.526337][T21678] bridge144: port 1(syz_tun) entered blocking state [ 689.533062][T21678] bridge144: port 1(syz_tun) entered disabled state [ 689.555181][T21678] device syz_tun entered promiscuous mode [ 689.573439][T21674] FAT-fs (loop3): bogus logical sector size 524 [ 689.584486][T21674] FAT-fs (loop3): Can't find a valid FAT filesystem [ 689.592918][T21668] FAT-fs (loop2): count of clusters too big (4294966676) [ 689.602596][T21668] FAT-fs (loop2): Can't find a valid FAT filesystem [ 689.621166][T21680] device syz_tun left promiscuous mode [ 689.634532][T21680] bridge77: port 1(syz_tun) entered disabled state 09:11:12 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:11:12 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb0b906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 689.676893][T21680] bridge78: port 1(syz_tun) entered blocking state [ 689.697886][T21680] bridge78: port 1(syz_tun) entered disabled state [ 689.702580][T21686] FAT-fs (loop1): count of clusters too big (4294966676) [ 689.711728][T21686] FAT-fs (loop1): Can't find a valid FAT filesystem [ 689.719050][T21680] device syz_tun entered promiscuous mode 09:11:12 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f800", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:11:12 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001048250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 689.783972][T21689] device syz_tun left promiscuous mode [ 689.800766][T21689] bridge144: port 1(syz_tun) entered disabled state 09:11:13 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 689.849950][T21689] bridge145: port 1(syz_tun) entered blocking state [ 689.866616][T21686] FAT-fs (loop1): count of clusters too big (4294966676) [ 689.880039][T21686] FAT-fs (loop1): Can't find a valid FAT filesystem [ 689.884264][T21692] FAT-fs (loop3): bogus logical sector size 524 [ 689.890681][T21689] bridge145: port 1(syz_tun) entered disabled state [ 689.907853][T21692] FAT-fs (loop3): Can't find a valid FAT filesystem [ 689.919623][T21689] device syz_tun entered promiscuous mode [ 689.948202][T21696] FAT-fs (loop2): count of clusters too big (4294966676) [ 689.962158][T21696] FAT-fs (loop2): Can't find a valid FAT filesystem [ 689.975909][T21700] bond0: (slave bridge79): Enslaving as an active interface with an up link [ 689.985757][T21701] device syz_tun left promiscuous mode 09:11:13 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x3, 0x0) flock(r0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f00000000c0)={0x0, 'veth0_to_bond\x00'}, 0x18) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000007d40), 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xfffffffffffffff7, 0x100) mknodat(r3, &(0x7f0000000080)='./bus\x00', 0xa6fe0d2a127b8fa6, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/297], 0x129) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) pselect6(0x40, &(0x7f0000000140), &(0x7f0000000000)={0x9, 0x0, 0x2}, 0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400), 0x8}) 09:11:13 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f800", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:11:13 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, 0x0, 0x0) [ 690.006724][T21701] bridge430: port 1(syz_tun) entered disabled state [ 690.066295][T21692] FAT-fs (loop3): bogus logical sector size 524 [ 690.072795][T21696] FAT-fs (loop2): count of clusters too big (4294966676) [ 690.082287][T21701] bridge431: port 1(syz_tun) entered blocking state [ 690.109800][T21696] FAT-fs (loop2): Can't find a valid FAT filesystem [ 690.119068][T21692] FAT-fs (loop3): Can't find a valid FAT filesystem [ 690.125733][T21701] bridge431: port 1(syz_tun) entered disabled state [ 690.133051][T21701] device syz_tun entered promiscuous mode [ 690.142414][T21708] FAT-fs (loop1): count of clusters too big (4294966676) [ 690.178480][T21708] FAT-fs (loop1): Can't find a valid FAT filesystem [ 690.197790][T21712] device syz_tun left promiscuous mode [ 690.203528][T21712] bridge145: port 1(syz_tun) entered disabled state 09:11:13 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f800", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 690.227484][T21712] bridge146: port 1(syz_tun) entered blocking state [ 690.247337][T21712] bridge146: port 1(syz_tun) entered disabled state [ 690.254961][T21712] device syz_tun entered promiscuous mode 09:11:13 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb0c906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) 09:11:13 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000104c250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:11:13 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, 0x0, 0x0) [ 690.382749][T21707] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 690.393775][T21708] FAT-fs (loop1): count of clusters too big (4294966676) [ 690.401933][T21707] FAT-fs (loop0): Filesystem has been set read-only [ 690.417248][T21707] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 17) [ 690.423124][T21708] FAT-fs (loop1): Can't find a valid FAT filesystem [ 690.501637][T21718] FAT-fs (loop2): count of clusters too big (4294966676) [ 690.517682][T21718] FAT-fs (loop2): Can't find a valid FAT filesystem 09:11:13 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, 0x0, 0x0) [ 690.578116][T21726] device syz_tun left promiscuous mode [ 690.584059][T21726] bridge146: port 1(syz_tun) entered disabled state [ 690.595353][T21723] FAT-fs (loop3): bogus logical sector size 524 [ 690.613985][T21718] FAT-fs (loop2): count of clusters too big (4294966676) 09:11:13 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f800", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 690.630378][T21718] FAT-fs (loop2): Can't find a valid FAT filesystem [ 690.634500][T21723] FAT-fs (loop3): Can't find a valid FAT filesystem [ 690.650370][T21726] bridge147: port 1(syz_tun) entered blocking state [ 690.657183][T21726] bridge147: port 1(syz_tun) entered disabled state [ 690.668650][T21726] device syz_tun entered promiscuous mode [ 690.683466][T21722] device syz_tun left promiscuous mode [ 690.692330][T21722] bridge431: port 1(syz_tun) entered disabled state [ 690.694487][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 690.704836][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:11:13 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, 0x0, 0x0) [ 690.750513][T21722] bridge432: port 1(syz_tun) entered blocking state [ 690.758251][T21722] bridge432: port 1(syz_tun) entered disabled state [ 690.780355][T21722] device syz_tun entered promiscuous mode 09:11:14 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f8e5", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 690.801888][T21732] device syz_tun left promiscuous mode [ 690.826684][T21732] bridge78: port 1(syz_tun) entered disabled state [ 690.833540][T21723] FAT-fs (loop3): bogus logical sector size 524 [ 690.840939][T21723] FAT-fs (loop3): Can't find a valid FAT filesystem [ 690.906750][T21732] bridge80: port 1(syz_tun) entered blocking state [ 690.925118][T21738] FAT-fs (loop1): count of clusters too big (4294966676) [ 690.932354][T21732] bridge80: port 1(syz_tun) entered disabled state 09:11:14 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb0d906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 690.961490][T21732] device syz_tun entered promiscuous mode [ 690.968078][T21738] FAT-fs (loop1): Can't find a valid FAT filesystem [ 690.979105][T21728] device syz_tun left promiscuous mode [ 690.986171][T21728] bridge432: port 1(syz_tun) entered disabled state [ 691.028791][T21738] FAT-fs (loop1): count of clusters too big (4294966676) 09:11:14 executing program 0: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027478f801", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 691.069027][T21740] device syz_tun left promiscuous mode [ 691.094262][T21740] bridge147: port 1(syz_tun) entered disabled state [ 691.108869][T21738] FAT-fs (loop1): Can't find a valid FAT filesystem 09:11:14 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001060250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 691.111369][T21748] FAT-fs (loop3): bogus logical sector size 524 [ 691.122018][T21748] FAT-fs (loop3): Can't find a valid FAT filesystem 09:11:14 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f8e6", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 691.206681][T21740] bridge148: port 1(syz_tun) entered blocking state [ 691.224335][T21740] bridge148: port 1(syz_tun) entered disabled state [ 691.232554][T21740] device syz_tun entered promiscuous mode 09:11:14 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f800", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 691.257995][T21748] FAT-fs (loop3): bogus logical sector size 524 [ 691.293977][T21748] FAT-fs (loop3): Can't find a valid FAT filesystem [ 691.301512][T21756] bridge433: port 1(syz_tun) entered blocking state [ 691.357697][T21756] bridge433: port 1(syz_tun) entered disabled state [ 691.390963][T21756] device syz_tun entered promiscuous mode 09:11:14 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) [ 691.414530][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 691.420393][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:11:14 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800004c1000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:11:14 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb0e906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 691.551578][T21763] FAT-fs (loop1): count of clusters too big (4294966676) [ 691.553545][T21762] device syz_tun left promiscuous mode [ 691.574537][T21763] FAT-fs (loop1): Can't find a valid FAT filesystem [ 691.597777][T21762] bridge148: port 1(syz_tun) entered disabled state 09:11:14 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f8e7", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:11:14 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001068250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 691.658085][T21762] bridge149: port 1(syz_tun) entered blocking state [ 691.674536][T21762] bridge149: port 1(syz_tun) entered disabled state [ 691.686163][T21762] device syz_tun entered promiscuous mode [ 691.734889][T21768] device syz_tun left promiscuous mode [ 691.740702][T21768] bridge80: port 1(syz_tun) entered disabled state 09:11:15 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) [ 691.794635][T21763] FAT-fs (loop1): count of clusters too big (4294966676) [ 691.804570][T21771] FAT-fs (loop3): bogus logical sector size 524 [ 691.814516][T21763] FAT-fs (loop1): Can't find a valid FAT filesystem [ 691.822279][T21768] bridge81: port 1(syz_tun) entered blocking state [ 691.833739][T21771] FAT-fs (loop3): Can't find a valid FAT filesystem 09:11:15 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f800", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 691.852847][T21768] bridge81: port 1(syz_tun) entered disabled state [ 691.866942][T21768] device syz_tun entered promiscuous mode [ 691.875756][T21773] device syz_tun left promiscuous mode [ 691.881552][T21773] bridge433: port 1(syz_tun) entered disabled state [ 691.946343][T21773] bridge434: port 1(syz_tun) entered blocking state [ 691.955812][T21773] bridge434: port 1(syz_tun) entered disabled state [ 691.963112][T21773] device syz_tun entered promiscuous mode [ 691.968945][T21771] FAT-fs (loop3): bogus logical sector size 524 09:11:15 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001060250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 691.994536][T21771] FAT-fs (loop3): Can't find a valid FAT filesystem [ 692.010402][T21781] device syz_tun left promiscuous mode [ 692.016463][T21781] bridge149: port 1(syz_tun) entered disabled state 09:11:15 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f8e8", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 692.057226][T21781] bridge150: port 1(syz_tun) entered blocking state [ 692.064386][T21781] bridge150: port 1(syz_tun) entered disabled state [ 692.077172][T21781] device syz_tun entered promiscuous mode 09:11:15 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000106c250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 692.103040][T21784] FAT-fs (loop1): count of clusters too big (4294966676) [ 692.123408][T21784] FAT-fs (loop1): Can't find a valid FAT filesystem 09:11:15 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb0f906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) 09:11:15 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) [ 692.217824][T21788] device syz_tun left promiscuous mode [ 692.233292][T21784] FAT-fs (loop1): count of clusters too big (4294966676) [ 692.247023][T21784] FAT-fs (loop1): Can't find a valid FAT filesystem [ 692.269378][T21788] bridge81: port 1(syz_tun) entered disabled state [ 692.326953][T21788] bridge82: port 1(syz_tun) entered blocking state [ 692.348234][T21788] bridge82: port 1(syz_tun) entered disabled state [ 692.372134][T21788] device syz_tun entered promiscuous mode [ 692.378021][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 692.378049][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 692.402821][T21796] FAT-fs (loop3): bogus logical sector size 524 [ 692.409350][T21795] __nla_validate_parse: 19 callbacks suppressed [ 692.409364][T21795] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 09:11:15 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f800", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 692.431837][T21796] FAT-fs (loop3): Can't find a valid FAT filesystem [ 692.470820][T21798] device syz_tun left promiscuous mode 09:11:15 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f8e9", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 692.489409][T21798] bridge434: port 1(syz_tun) entered disabled state [ 692.523299][T21796] FAT-fs (loop3): bogus logical sector size 524 09:11:15 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001068250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 692.541868][T21796] FAT-fs (loop3): Can't find a valid FAT filesystem [ 692.614504][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 692.620398][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 692.630771][T21798] bridge435: port 1(syz_tun) entered blocking state [ 692.639371][T21798] bridge435: port 1(syz_tun) entered disabled state [ 692.649370][T21798] device syz_tun entered promiscuous mode [ 692.661293][T21802] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 692.700609][T21804] device syz_tun left promiscuous mode 09:11:15 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb10906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 692.721100][T21808] FAT-fs (loop1): count of clusters too big (4294966676) [ 692.744525][T21808] FAT-fs (loop1): Can't find a valid FAT filesystem [ 692.751612][T21804] bridge150: port 1(syz_tun) entered disabled state [ 692.807769][T21804] bridge151: port 1(syz_tun) entered blocking state [ 692.821129][T21808] FAT-fs (loop1): count of clusters too big (4294966676) [ 692.822089][T21804] bridge151: port 1(syz_tun) entered disabled state [ 692.845461][T21804] device syz_tun entered promiscuous mode 09:11:16 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f8ea", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 692.873798][T21815] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 692.898441][T21808] FAT-fs (loop1): Can't find a valid FAT filesystem 09:11:16 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001074250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:11:16 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x0) [ 692.946950][T21817] device syz_tun left promiscuous mode 09:11:16 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f800", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 692.994686][T21817] bridge82: port 1(syz_tun) entered disabled state [ 693.030806][T21820] FAT-fs (loop3): bogus logical sector size 524 [ 693.059100][T21820] FAT-fs (loop3): Can't find a valid FAT filesystem [ 693.071402][T21817] bridge83: port 1(syz_tun) entered blocking state [ 693.090659][T21817] bridge83: port 1(syz_tun) entered disabled state [ 693.108366][T21817] device syz_tun entered promiscuous mode [ 693.118234][T21823] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 693.133160][T21827] device syz_tun left promiscuous mode [ 693.139568][T21827] bridge151: port 1(syz_tun) entered disabled state [ 693.196615][T21827] bridge152: port 1(syz_tun) entered blocking state [ 693.214605][T21827] bridge152: port 1(syz_tun) entered disabled state [ 693.221672][T21820] FAT-fs (loop3): bogus logical sector size 524 [ 693.222577][T21827] device syz_tun entered promiscuous mode [ 693.230477][T21820] FAT-fs (loop3): Can't find a valid FAT filesystem 09:11:16 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf250200000005003000227fa8a24a000900aab9b2fb3c7d4afc8c2b01f01edbaaaaaaaaaa000008000600", @ANYRES32=0x0, @ANYBLOB="08003c000600000005002e0001000000050033000000000008000600", @ANYRES32=0x0, @ANYBLOB="0500330000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4c0c1}, 0x4804) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r2 = socket$nl_generic(0x10, 0x3, 0x10) readlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)=""/227, 0xe3) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fddbdf250200000005003000227fa8a24a000900aab9b2fb3c7d4afc8c2b01f01edbaaaaaaaaaa000008000600", @ANYRES32=0x0, @ANYBLOB="08003c000600000005002e0001000000050033000000000008000600", @ANYRES32=0x0, @ANYBLOB="0500330000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4c0c1}, 0x4804) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x101c01, 0x0) r6 = open(0x0, 0x800000141042, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, 0x0, 0x0) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/qat_adf_ctl\x00', 0x10300, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r7, 0x4008550d, &(0x7f0000000800)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r6, &(0x7f0000000640)="c289eae0d4236f83333300760bdcec3009059d052718ff9beb70f7af58e26d6222ad0406b147cbcfa80739cd7490f6d71a1185938822543ab9c39dec8741722743c1d095e7f7a707f191643fd9610cfb93aac68575b3a24a498725ea251a71aea2ce93bd74cc3a97168673d9f9230d7f6c1d72757fb8a3", &(0x7f00000006c0)=""/160}, 0x20) r8 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10008000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r8, 0x400, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20040800) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x14, r8, 0x1, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40800) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)={0x14, r9, 0x9e06a2c5f40bff55}, 0x14}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x174, r9, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x68, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffeffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xd2a6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xa48}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_SOCK={0x84, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x401}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8921}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x4}, 0x4008000) pselect6(0x40, &(0x7f0000000140)={0x0, 0x9, 0x0, 0x40000000000000, 0x20000000, 0x0, 0x0, 0x2}, &(0x7f0000000180)={0x9, 0x0, 0x80000000, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400), 0x8}) r10 = open(0x0, 0x800000141042, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r10, 0x84, 0x11, 0x0, 0x0) ioctl$int_in(r10, 0x5452, &(0x7f0000000340)=0x3) [ 693.244604][T21825] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 09:11:16 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x0) [ 693.314348][T21835] FAT-fs (loop1): count of clusters too big (4294966676) [ 693.348627][T21835] FAT-fs (loop1): Can't find a valid FAT filesystem 09:11:16 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f8eb", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:11:16 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb11906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 693.375960][T21829] device syz_tun left promiscuous mode [ 693.390197][T21829] bridge435: port 1(syz_tun) entered disabled state [ 693.472426][T21841] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 693.497759][T21829] bridge436: port 1(syz_tun) entered blocking state [ 693.515124][T21829] bridge436: port 1(syz_tun) entered disabled state [ 693.527683][T21829] device syz_tun entered promiscuous mode [ 693.554887][T21835] FAT-fs (loop1): count of clusters too big (4294966676) [ 693.566338][T21840] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 693.581266][T21835] FAT-fs (loop1): Can't find a valid FAT filesystem [ 693.607303][T21842] device syz_tun left promiscuous mode [ 693.619074][T21842] bridge152: port 1(syz_tun) entered disabled state [ 693.664141][T21851] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 693.681273][T21849] FAT-fs (loop3): bogus logical sector size 524 [ 693.691936][T21842] bridge153: port 1(syz_tun) entered blocking state [ 693.709727][T21849] FAT-fs (loop3): Can't find a valid FAT filesystem [ 693.726439][T21842] bridge153: port 1(syz_tun) entered disabled state 09:11:16 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f800", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 693.757531][T21842] device syz_tun entered promiscuous mode 09:11:16 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f8ec", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 693.837902][T21849] FAT-fs (loop3): bogus logical sector size 524 [ 693.844261][T21849] FAT-fs (loop3): Can't find a valid FAT filesystem [ 693.863237][T21855] FAT-fs (loop1): count of clusters too big (4294966676) [ 693.870456][T21855] FAT-fs (loop1): Can't find a valid FAT filesystem 09:11:17 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x0) 09:11:17 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000107a250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:11:17 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb12906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 694.010807][T21859] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 694.028303][T21855] FAT-fs (loop1): count of clusters too big (4294966676) [ 694.059818][T21855] FAT-fs (loop1): Can't find a valid FAT filesystem [ 694.101770][T21862] device syz_tun left promiscuous mode [ 694.128184][T21862] bridge153: port 1(syz_tun) entered disabled state 09:11:17 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001074250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 694.153188][T21865] FAT-fs (loop3): bogus logical sector size 524 [ 694.164511][T21865] FAT-fs (loop3): Can't find a valid FAT filesystem 09:11:17 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f800", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 694.196976][T21862] bridge154: port 1(syz_tun) entered blocking state [ 694.228923][T21862] bridge154: port 1(syz_tun) entered disabled state [ 694.236949][T21862] device syz_tun entered promiscuous mode [ 694.247767][T21861] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 694.287675][T21865] FAT-fs (loop3): bogus logical sector size 524 09:11:17 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8], 0x2}}, 0x0) 09:11:17 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f8ed", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 694.294144][T21865] FAT-fs (loop3): Can't find a valid FAT filesystem [ 694.315789][T21867] device syz_tun left promiscuous mode [ 694.327258][T21867] bridge436: port 1(syz_tun) entered disabled state [ 694.377645][T21867] bridge437: port 1(syz_tun) entered blocking state [ 694.385878][T21867] bridge437: port 1(syz_tun) entered disabled state [ 694.393632][T21867] device syz_tun entered promiscuous mode [ 694.399935][T21875] FAT-fs (loop1): count of clusters too big (4294966676) [ 694.412739][T21876] device syz_tun left promiscuous mode [ 694.418642][T21876] bridge83: port 1(syz_tun) entered disabled state [ 694.424657][T21875] FAT-fs (loop1): Can't find a valid FAT filesystem 09:11:17 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb13906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 694.454488][ C1] net_ratelimit: 8 callbacks suppressed [ 694.454498][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 694.465846][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 694.473865][T21876] bridge84: port 1(syz_tun) entered blocking state [ 694.482009][T21876] bridge84: port 1(syz_tun) entered disabled state [ 694.498029][T21876] device syz_tun entered promiscuous mode [ 694.516325][T21881] device syz_tun left promiscuous mode [ 694.523386][T21881] bridge154: port 1(syz_tun) entered disabled state [ 694.556315][T21886] FAT-fs (loop3): bogus logical sector size 524 [ 694.565726][T21875] FAT-fs (loop1): count of clusters too big (4294966676) [ 694.573132][T21886] FAT-fs (loop3): Can't find a valid FAT filesystem [ 694.574505][T21875] FAT-fs (loop1): Can't find a valid FAT filesystem [ 694.588626][T21881] bridge155: port 1(syz_tun) entered blocking state [ 694.595669][T21881] bridge155: port 1(syz_tun) entered disabled state [ 694.605008][T21881] device syz_tun entered promiscuous mode 09:11:17 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000400800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:11:17 executing program 0: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f8ec", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 694.661913][T21886] FAT-fs (loop3): bogus logical sector size 524 [ 694.669660][T21886] FAT-fs (loop3): Can't find a valid FAT filesystem 09:11:17 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f8ee", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:11:17 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8], 0x2}}, 0x0) 09:11:17 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f800", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 694.752725][T21892] device syz_tun left promiscuous mode [ 694.758568][T21892] bridge437: port 1(syz_tun) entered disabled state 09:11:17 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb14906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 694.826639][T21892] bridge438: port 1(syz_tun) entered blocking state [ 694.833324][T21892] bridge438: port 1(syz_tun) entered disabled state [ 694.854499][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 694.860325][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 694.881569][T21892] device syz_tun entered promiscuous mode [ 694.919192][T21905] FAT-fs (loop3): bogus logical sector size 524 09:11:18 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8], 0x2}}, 0x0) [ 694.927190][T21899] device syz_tun left promiscuous mode [ 694.932999][T21905] FAT-fs (loop3): Can't find a valid FAT filesystem [ 694.940366][T21902] FAT-fs (loop1): count of clusters too big (4294966676) [ 694.945120][T21899] bridge155: port 1(syz_tun) entered disabled state [ 694.954948][T21902] FAT-fs (loop1): Can't find a valid FAT filesystem [ 694.986690][T21899] bridge156: port 1(syz_tun) entered blocking state [ 694.993383][T21899] bridge156: port 1(syz_tun) entered disabled state [ 695.001560][T21899] device syz_tun entered promiscuous mode [ 695.010241][T21897] device syz_tun left promiscuous mode [ 695.019650][T21897] bridge438: port 1(syz_tun) entered disabled state 09:11:18 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8], 0x2}}, 0x0) 09:11:18 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000490800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 695.131742][T21905] FAT-fs (loop3): bogus logical sector size 524 [ 695.144936][T21905] FAT-fs (loop3): Can't find a valid FAT filesystem [ 695.164575][T21902] FAT-fs (loop1): count of clusters too big (4294966676) [ 695.171636][T21902] FAT-fs (loop1): Can't find a valid FAT filesystem 09:11:18 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f8ef", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:11:18 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb15906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 695.206280][T21915] device syz_tun left promiscuous mode [ 695.212039][T21915] bridge156: port 1(syz_tun) entered disabled state 09:11:18 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f8e3", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 695.288571][T21915] bridge157: port 1(syz_tun) entered blocking state [ 695.311239][T21915] bridge157: port 1(syz_tun) entered disabled state [ 695.322413][T21915] device syz_tun entered promiscuous mode [ 695.346653][T21921] bridge439: port 1(syz_tun) entered blocking state [ 695.381919][T21921] bridge439: port 1(syz_tun) entered disabled state 09:11:18 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB], 0x3}}, 0x0) [ 695.409634][T21921] device syz_tun entered promiscuous mode [ 695.432574][T21928] FAT-fs (loop3): bogus logical sector size 524 [ 695.456193][T21922] device syz_tun left promiscuous mode [ 695.461601][T21928] FAT-fs (loop3): Can't find a valid FAT filesystem [ 695.461802][T21922] bridge84: port 1(syz_tun) entered disabled state 09:11:18 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f8f0", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 695.552277][T21922] bridge85: port 1(syz_tun) entered blocking state [ 695.563366][T21922] bridge85: port 1(syz_tun) entered disabled state [ 695.582353][T21922] device syz_tun entered promiscuous mode [ 695.588309][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 695.588337][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:11:18 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f8e4", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 695.614530][T21928] FAT-fs (loop3): bogus logical sector size 524 [ 695.621797][T21928] FAT-fs (loop3): Can't find a valid FAT filesystem [ 695.627193][T21920] bridge439: port 1(syz_tun) entered blocking state [ 695.635020][T21920] bridge439: port 1(syz_tun) entered forwarding state [ 695.648266][T21920] bond0: (slave bridge439): Enslaving as an active interface with an up link 09:11:18 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8], 0x2}}, 0x0) [ 695.694656][T21936] device syz_tun left promiscuous mode [ 695.708306][T21936] bridge157: port 1(syz_tun) entered disabled state 09:11:18 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb16906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 695.749539][T21936] bridge158: port 1(syz_tun) entered blocking state [ 695.785711][T21936] bridge158: port 1(syz_tun) entered disabled state [ 695.795349][T21936] device syz_tun entered promiscuous mode 09:11:19 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f8e5", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:11:19 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f8f1", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 695.826764][T21941] device syz_tun left promiscuous mode [ 695.832501][T21941] bridge439: port 1(syz_tun) entered disabled state 09:11:19 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB], 0x3}}, 0x0) [ 695.964953][T21950] FAT-fs (loop3): bogus logical sector size 524 [ 695.998414][T21950] FAT-fs (loop3): Can't find a valid FAT filesystem 09:11:19 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010004b0800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 696.037958][T21949] device syz_tun left promiscuous mode [ 696.051304][T21949] bridge85: port 1(syz_tun) entered disabled state [ 696.076470][T21950] FAT-fs (loop3): bogus logical sector size 524 [ 696.094358][T21950] FAT-fs (loop3): Can't find a valid FAT filesystem 09:11:19 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f8e6", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 696.187715][T21949] bridge86: port 1(syz_tun) entered blocking state [ 696.214610][T21949] bridge86: port 1(syz_tun) entered disabled state 09:11:19 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f8f2", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:11:19 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb17906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 696.251571][T21949] device syz_tun entered promiscuous mode [ 696.290350][T21961] device syz_tun left promiscuous mode [ 696.304603][T21961] bridge158: port 1(syz_tun) entered disabled state 09:11:19 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000490800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 696.359430][T21961] bridge159: port 1(syz_tun) entered blocking state [ 696.397664][T21961] bridge159: port 1(syz_tun) entered disabled state [ 696.415219][T21961] device syz_tun entered promiscuous mode [ 696.438557][T21971] FAT-fs (loop3): bogus logical sector size 524 09:11:19 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f8f3", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 696.465552][T21971] FAT-fs (loop3): Can't find a valid FAT filesystem [ 696.482385][T21966] bridge440: port 1(syz_tun) entered blocking state [ 696.517853][T21966] bridge440: port 1(syz_tun) entered disabled state [ 696.534484][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 696.540269][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:11:19 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB], 0x3}}, 0x0) [ 696.577006][T21966] device syz_tun entered promiscuous mode [ 696.611639][T21967] bridge440: port 1(syz_tun) entered blocking state [ 696.618394][T21967] bridge440: port 1(syz_tun) entered forwarding state 09:11:19 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f8e7", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 696.636335][T21971] FAT-fs (loop3): bogus logical sector size 524 [ 696.647614][T21971] FAT-fs (loop3): Can't find a valid FAT filesystem [ 696.708577][T21967] bond0: (slave bridge440): Enslaving as an active interface with an up link [ 696.746333][T21979] device syz_tun left promiscuous mode 09:11:19 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb18906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 696.759821][T21979] bridge86: port 1(syz_tun) entered disabled state [ 696.774486][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 696.780488][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 696.806848][T21979] bridge87: port 1(syz_tun) entered blocking state [ 696.819395][T21979] bridge87: port 1(syz_tun) entered disabled state [ 696.833619][T21979] device syz_tun entered promiscuous mode [ 696.852641][T21984] bridge87: port 1(syz_tun) entered blocking state 09:11:20 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f8f4", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 696.859256][T21984] bridge87: port 1(syz_tun) entered forwarding state 09:11:20 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f8e8", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 696.908452][T21984] bond0: (slave bridge87): Enslaving as an active interface with an up link [ 696.924343][T21994] FAT-fs (loop3): bogus logical sector size 524 [ 696.930969][T21994] FAT-fs (loop3): Can't find a valid FAT filesystem [ 696.948178][T21966] device syz_tun left promiscuous mode [ 696.955399][T21966] bridge440: port 1(syz_tun) entered disabled state 09:11:20 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB], 0x3}}, 0x0) [ 696.998990][T21987] device syz_tun left promiscuous mode [ 697.009728][T21987] bridge159: port 1(syz_tun) entered disabled state [ 697.044799][T21994] FAT-fs (loop3): bogus logical sector size 524 [ 697.051239][T21994] FAT-fs (loop3): Can't find a valid FAT filesystem [ 697.059920][T21987] bridge160: port 1(syz_tun) entered blocking state [ 697.075370][T21987] bridge160: port 1(syz_tun) entered disabled state [ 697.087790][T21987] device syz_tun entered promiscuous mode 09:11:20 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000490800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:11:20 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f8f5", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:11:20 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e000000000000"], 0x3}}, 0x0) [ 697.169921][T22003] device syz_tun left promiscuous mode [ 697.184916][T22003] bridge87: port 1(syz_tun) entered disabled state 09:11:20 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb19906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 697.250478][T22003] bridge88: port 1(syz_tun) entered blocking state 09:11:20 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f8e9", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 697.297364][T22003] bridge88: port 1(syz_tun) entered disabled state [ 697.325513][T22003] device syz_tun entered promiscuous mode [ 697.378521][T22007] device syz_tun left promiscuous mode [ 697.384128][T22007] bridge160: port 1(syz_tun) entered disabled state [ 697.418956][T22013] FAT-fs (loop3): bogus logical sector size 524 [ 697.436748][T22013] FAT-fs (loop3): Can't find a valid FAT filesystem 09:11:20 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x0) [ 697.467149][T22007] bridge161: port 1(syz_tun) entered blocking state [ 697.484328][T22007] bridge161: port 1(syz_tun) entered disabled state 09:11:20 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f8f6", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 697.513261][T22013] FAT-fs (loop3): bogus logical sector size 524 [ 697.533302][T22007] device syz_tun entered promiscuous mode [ 697.554512][T22013] FAT-fs (loop3): Can't find a valid FAT filesystem [ 697.582709][T22014] bridge441: port 1(syz_tun) entered blocking state [ 697.593636][T22014] bridge441: port 1(syz_tun) entered disabled state [ 697.628774][T22014] device syz_tun entered promiscuous mode 09:11:20 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f8ea", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 697.672237][T22011] bridge441: port 1(syz_tun) entered blocking state [ 697.679045][T22011] bridge441: port 1(syz_tun) entered forwarding state 09:11:20 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e000000000000"], 0x3}}, 0x0) [ 697.717419][T22011] bond0: (slave bridge441): Enslaving as an active interface with an up link [ 697.753578][T22023] __nla_validate_parse: 16 callbacks suppressed 09:11:20 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb1a906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 697.753592][T22023] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 697.808939][T22024] device syz_tun left promiscuous mode 09:11:21 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f8f7", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 697.887953][T22024] bridge88: port 1(syz_tun) entered disabled state 09:11:21 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f8eb", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 697.981352][T22024] bridge89: port 1(syz_tun) entered blocking state [ 697.988770][T22024] bridge89: port 1(syz_tun) entered disabled state [ 698.002357][T22024] device syz_tun entered promiscuous mode [ 698.017989][T22038] FAT-fs (loop3): bogus logical sector size 524 [ 698.024858][T22038] FAT-fs (loop3): Can't find a valid FAT filesystem [ 698.032459][T22014] device syz_tun left promiscuous mode [ 698.048643][T22014] bridge441: port 1(syz_tun) entered disabled state [ 698.131736][T22038] FAT-fs (loop3): bogus logical sector size 524 [ 698.146384][T22038] FAT-fs (loop3): Can't find a valid FAT filesystem [ 698.199498][T22035] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 698.218944][T22036] device syz_tun left promiscuous mode 09:11:21 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010004b0800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:11:21 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e000000000000"], 0x3}}, 0x0) 09:11:21 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f8f8", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 698.257585][T22036] bridge161: port 1(syz_tun) entered disabled state 09:11:21 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f8ec", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:11:21 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb1b906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 698.356474][T22036] bridge162: port 1(syz_tun) entered blocking state [ 698.378916][T22036] bridge162: port 1(syz_tun) entered disabled state [ 698.386364][T22036] device syz_tun entered promiscuous mode [ 698.394112][T22052] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 698.419935][T22056] device syz_tun left promiscuous mode [ 698.425638][T22056] bridge89: port 1(syz_tun) entered disabled state [ 698.445632][T22054] FAT-fs (loop3): bogus logical sector size 524 [ 698.451952][T22054] FAT-fs (loop3): Can't find a valid FAT filesystem 09:11:21 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f8f9", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:11:21 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e000000000000"], 0x3}}, 0x0) 09:11:21 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f8ed", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 698.485595][T22056] bridge90: port 1(syz_tun) entered blocking state [ 698.508993][T22056] bridge90: port 1(syz_tun) entered disabled state [ 698.526063][T22056] device syz_tun entered promiscuous mode [ 698.564152][T22058] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 698.595936][T22062] bridge442: port 1(syz_tun) entered blocking state 09:11:21 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000490800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 698.616435][T22062] bridge442: port 1(syz_tun) entered disabled state [ 698.641837][T22062] device syz_tun entered promiscuous mode [ 698.668275][T22063] bridge442: port 1(syz_tun) entered blocking state [ 698.674958][T22063] bridge442: port 1(syz_tun) entered forwarding state [ 698.688722][T22063] bond0: (slave bridge442): Enslaving as an active interface with an up link [ 698.701867][T22065] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:11:21 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb1c906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 698.759436][T22066] device syz_tun left promiscuous mode [ 698.766916][T22066] bridge162: port 1(syz_tun) entered disabled state [ 698.797762][T22066] bridge163: port 1(syz_tun) entered blocking state [ 698.816355][T22066] bridge163: port 1(syz_tun) entered disabled state [ 698.833815][T22066] device syz_tun entered promiscuous mode [ 698.834112][T22079] FAT-fs (loop3): bogus logical sector size 524 [ 698.853274][T22062] device syz_tun left promiscuous mode 09:11:22 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f8ee", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:11:22 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f8fa", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 698.865209][T22062] bridge442: port 1(syz_tun) entered disabled state [ 698.874956][T22079] FAT-fs (loop3): Can't find a valid FAT filesystem [ 698.928649][T22073] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 698.998031][T22078] device syz_tun left promiscuous mode [ 699.005941][T22078] bridge90: port 1(syz_tun) entered disabled state 09:11:22 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a00"], 0x3}}, 0x0) 09:11:22 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250200000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 699.048431][T22079] FAT-fs (loop3): bogus logical sector size 524 [ 699.063854][T22079] FAT-fs (loop3): Can't find a valid FAT filesystem [ 699.078844][T22078] bridge91: port 1(syz_tun) entered blocking state [ 699.108484][T22078] bridge91: port 1(syz_tun) entered disabled state [ 699.128741][T22078] device syz_tun entered promiscuous mode [ 699.151223][T22081] bridge91: port 1(syz_tun) entered blocking state [ 699.157840][T22081] bridge91: port 1(syz_tun) entered forwarding state [ 699.209659][T22081] bond0: (slave bridge91): Enslaving as an active interface with an up link 09:11:22 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb1d906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) 09:11:22 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f8ef", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 699.279654][T22089] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:11:22 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f8fb", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:11:22 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010004b0800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 699.353915][T22090] device syz_tun left promiscuous mode [ 699.387874][T22090] bridge163: port 1(syz_tun) entered disabled state [ 699.436860][T22090] bridge164: port 1(syz_tun) entered blocking state [ 699.443629][T22090] bridge164: port 1(syz_tun) entered disabled state [ 699.455410][T22090] device syz_tun entered promiscuous mode [ 699.463753][T22094] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 699.505090][T22098] FAT-fs (loop3): bogus logical sector size 524 09:11:22 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f8f0", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 699.551208][T22098] FAT-fs (loop3): Can't find a valid FAT filesystem [ 699.564781][T22095] bridge443: port 1(syz_tun) entered blocking state [ 699.585497][T22095] bridge443: port 1(syz_tun) entered disabled state 09:11:22 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a00"], 0x3}}, 0x0) [ 699.600775][T22095] device syz_tun entered promiscuous mode [ 699.622886][T22105] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 699.646565][T22098] FAT-fs (loop3): bogus logical sector size 524 [ 699.656218][T22098] FAT-fs (loop3): Can't find a valid FAT filesystem [ 699.668365][T22108] device syz_tun left promiscuous mode [ 699.674560][T22108] bridge91: port 1(syz_tun) entered disabled state [ 699.744475][ C1] net_ratelimit: 18 callbacks suppressed [ 699.744505][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 699.755938][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 699.770029][T22108] bridge92: port 1(syz_tun) entered blocking state 09:11:22 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250300000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 699.795101][T22108] bridge92: port 1(syz_tun) entered disabled state [ 699.844949][T22108] device syz_tun entered promiscuous mode 09:11:23 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb1e906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 699.886582][T22111] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:11:23 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f8fc", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:11:23 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f8f1", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 699.959659][T22113] device syz_tun left promiscuous mode [ 699.983778][T22113] bridge164: port 1(syz_tun) entered disabled state [ 700.056871][T22113] bridge165: port 1(syz_tun) entered blocking state [ 700.067309][T22113] bridge165: port 1(syz_tun) entered disabled state [ 700.076071][T22113] device syz_tun entered promiscuous mode [ 700.086128][T22105] bridge92: port 1(syz_tun) entered blocking state [ 700.092850][T22105] bridge92: port 1(syz_tun) entered forwarding state [ 700.100953][T22123] FAT-fs (loop3): bogus logical sector size 524 09:11:23 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a00"], 0x3}}, 0x0) [ 700.134496][T22123] FAT-fs (loop3): Can't find a valid FAT filesystem [ 700.155637][T22105] bond0: (slave bridge92): Enslaving as an active interface with an up link 09:11:23 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f8fd", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 700.198351][T22120] device syz_tun left promiscuous mode [ 700.221973][T22123] FAT-fs (loop3): bogus logical sector size 524 [ 700.238665][T22120] bridge443: port 1(syz_tun) entered disabled state [ 700.253084][T22123] FAT-fs (loop3): Can't find a valid FAT filesystem [ 700.300994][T22120] bridge444: port 1(syz_tun) entered blocking state [ 700.344627][T22120] bridge444: port 1(syz_tun) entered disabled state 09:11:23 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250200000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 700.385751][T22120] device syz_tun entered promiscuous mode 09:11:23 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f8f2", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:11:23 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb21906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 700.439146][T22134] device syz_tun left promiscuous mode [ 700.452693][T22134] bridge165: port 1(syz_tun) entered disabled state [ 700.506951][T22134] bridge166: port 1(syz_tun) entered blocking state [ 700.525065][T22134] bridge166: port 1(syz_tun) entered disabled state [ 700.550568][T22134] device syz_tun entered promiscuous mode 09:11:23 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f800", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 700.609074][T22144] FAT-fs (loop3): bogus logical sector size 524 [ 700.626473][T22144] FAT-fs (loop3): Can't find a valid FAT filesystem [ 700.638728][T22141] device syz_tun left promiscuous mode 09:11:23 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250400000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:11:23 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f00"], 0x3}}, 0x0) [ 700.667930][T22141] bridge92: port 1(syz_tun) entered disabled state [ 700.736959][T22141] bridge93: port 1(syz_tun) entered blocking state [ 700.743654][T22144] FAT-fs (loop3): bogus logical sector size 524 [ 700.746860][T22141] bridge93: port 1(syz_tun) entered disabled state [ 700.759776][T22144] FAT-fs (loop3): Can't find a valid FAT filesystem [ 700.770195][T22141] device syz_tun entered promiscuous mode 09:11:24 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a00"], 0x3}}, 0x0) [ 700.797068][T22151] device syz_tun left promiscuous mode [ 700.804682][T22151] bridge444: port 1(syz_tun) entered disabled state 09:11:24 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb22906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) 09:11:24 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f8f3", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 700.859875][T22151] bridge445: port 1(syz_tun) entered blocking state [ 700.884650][T22155] FAT-fs (loop2): count of clusters too big (4294966676) [ 700.891726][T22155] FAT-fs (loop2): Can't find a valid FAT filesystem [ 700.929447][T22151] bridge445: port 1(syz_tun) entered disabled state [ 700.936293][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 700.936328][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 700.936374][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 700.936397][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 700.936442][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 700.936470][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 700.972777][T22151] device syz_tun entered promiscuous mode [ 700.994189][T22156] bridge445: port 1(syz_tun) entered blocking state [ 701.001023][T22156] bridge445: port 1(syz_tun) entered forwarding state [ 701.025481][T22156] bond0: (slave bridge445): Enslaving as an active interface with an up link [ 701.037835][T22158] device syz_tun left promiscuous mode [ 701.043567][T22158] bridge166: port 1(syz_tun) entered disabled state [ 701.088883][T22158] bridge167: port 1(syz_tun) entered blocking state [ 701.095763][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 701.095802][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 701.107632][T22158] bridge167: port 1(syz_tun) entered disabled state [ 701.115231][T22158] device syz_tun entered promiscuous mode [ 701.128067][T22162] device syz_tun left promiscuous mode [ 701.132589][T22165] FAT-fs (loop3): bogus logical sector size 524 [ 701.133806][T22162] bridge93: port 1(syz_tun) entered disabled state [ 701.140377][T22155] FAT-fs (loop2): count of clusters too big (4294966676) [ 701.169644][T22165] FAT-fs (loop3): Can't find a valid FAT filesystem [ 701.170917][T22155] FAT-fs (loop2): Can't find a valid FAT filesystem 09:11:24 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f00"], 0x3}}, 0x0) [ 701.189288][T22162] bridge94: port 1(syz_tun) entered blocking state [ 701.203386][T22162] bridge94: port 1(syz_tun) entered disabled state [ 701.210984][T22162] device syz_tun entered promiscuous mode [ 701.221869][T22156] device syz_tun left promiscuous mode [ 701.236283][T22156] bridge445: port 1(syz_tun) entered disabled state 09:11:24 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x16}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 701.274529][T22165] FAT-fs (loop3): bogus logical sector size 524 [ 701.305532][T22165] FAT-fs (loop3): Can't find a valid FAT filesystem 09:11:24 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f8f4", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:11:24 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f00"], 0x3}}, 0x0) 09:11:24 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb23906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) 09:11:24 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250500000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 701.419627][T22176] device syz_tun left promiscuous mode [ 701.434092][T22176] bridge167: port 1(syz_tun) entered disabled state [ 701.525901][T22176] bridge168: port 1(syz_tun) entered blocking state [ 701.532865][T22176] bridge168: port 1(syz_tun) entered disabled state [ 701.572484][T22176] device syz_tun entered promiscuous mode [ 701.609416][T22188] FAT-fs (loop2): count of clusters too big (4294966676) [ 701.609869][T22181] device syz_tun left promiscuous mode 09:11:24 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f8f5", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:11:24 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f00"], 0x3}}, 0x0) [ 701.616769][T22189] FAT-fs (loop3): bogus logical sector size 524 [ 701.631092][T22188] FAT-fs (loop2): Can't find a valid FAT filesystem [ 701.635371][T22189] FAT-fs (loop3): Can't find a valid FAT filesystem [ 701.658369][T22181] bridge94: port 1(syz_tun) entered disabled state [ 701.706790][T22181] bridge95: port 1(syz_tun) entered blocking state [ 701.717311][T22181] bridge95: port 1(syz_tun) entered disabled state [ 701.725193][T22181] device syz_tun entered promiscuous mode [ 701.751224][T22192] bridge446: port 1(syz_tun) entered blocking state [ 701.782665][T22188] FAT-fs (loop2): count of clusters too big (4294966676) [ 701.790472][T22189] FAT-fs (loop3): bogus logical sector size 524 [ 701.797517][T22188] FAT-fs (loop2): Can't find a valid FAT filesystem [ 701.801779][T22192] bridge446: port 1(syz_tun) entered disabled state [ 701.827822][T22189] FAT-fs (loop3): Can't find a valid FAT filesystem 09:11:25 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf250200000005003000227fa8a24a000900aab9b2fb3c7d4afc8c2b01f01edbaaaaaaaaaa000008000600", @ANYRES32=0x0, @ANYBLOB="08003c000600000005002e0001000000050033000000000008000600", @ANYRES32=0x0, @ANYBLOB="0500330000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4c0c1}, 0x4804) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r2 = socket$nl_generic(0x10, 0x3, 0x10) readlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)=""/227, 0xe3) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fddbdf250200000005003000227fa8a24a000900aab9b2fb3c7d4afc8c2b01f01edbaaaaaaaaaa000008000600", @ANYRES32=0x0, @ANYBLOB="08003c000600000005002e0001000000050033000000000008000600", @ANYRES32=0x0, @ANYBLOB="0500330000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4c0c1}, 0x4804) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x101c01, 0x0) r6 = open(0x0, 0x800000141042, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, 0x0, 0x0) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/qat_adf_ctl\x00', 0x10300, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r7, 0x4008550d, &(0x7f0000000800)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r6, &(0x7f0000000640)="c289eae0d4236f83333300760bdcec3009059d052718ff9beb70f7af58e26d6222ad0406b147cbcfa80739cd7490f6d71a1185938822543ab9c39dec8741722743c1d095e7f7a707f191643fd9610cfb93aac68575b3a24a498725ea251a71aea2ce93bd74cc3a97168673d9f9230d7f6c1d72757fb8a3", &(0x7f00000006c0)=""/160}, 0x20) r8 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10008000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r8, 0x400, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20040800) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x14, r8, 0x1, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40800) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)={0x14, r9, 0x9e06a2c5f40bff55}, 0x14}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x174, r9, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x68, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffeffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xd2a6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xa48}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_SOCK={0x84, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x401}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8921}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x4}, 0x4008000) pselect6(0x40, &(0x7f0000000140)={0x0, 0x9, 0x0, 0x40000000000000, 0x20000000, 0x0, 0x0, 0x2}, &(0x7f0000000180)={0x9, 0x0, 0x80000000, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400), 0x8}) r10 = open(0x0, 0x800000141042, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r10, 0x84, 0x11, 0x0, 0x0) ioctl$int_in(r10, 0x5452, &(0x7f0000000340)=0x3) [ 701.847889][T22192] device syz_tun entered promiscuous mode 09:11:25 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x18}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 701.889625][T22199] device syz_tun left promiscuous mode [ 701.906584][T22199] bridge168: port 1(syz_tun) entered disabled state 09:11:25 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb24906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) 09:11:25 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250600000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 701.967221][T22199] bridge169: port 1(syz_tun) entered blocking state [ 701.978170][T22199] bridge169: port 1(syz_tun) entered disabled state 09:11:25 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f8f6", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 702.013367][T22199] device syz_tun entered promiscuous mode 09:11:25 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f0000"], 0x3}}, 0x0) [ 702.137897][T22206] device syz_tun left promiscuous mode [ 702.156992][T22206] bridge446: port 1(syz_tun) entered disabled state [ 702.192158][T22210] FAT-fs (loop3): bogus logical sector size 524 [ 702.237061][T22206] bridge447: port 1(syz_tun) entered blocking state [ 702.238903][T22210] FAT-fs (loop3): Can't find a valid FAT filesystem [ 702.253687][T22206] bridge447: port 1(syz_tun) entered disabled state [ 702.278130][T22206] device syz_tun entered promiscuous mode 09:11:25 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x3c}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 702.351548][T22221] device syz_tun left promiscuous mode [ 702.388012][T22210] FAT-fs (loop3): bogus logical sector size 524 [ 702.410396][T22221] bridge447: port 1(syz_tun) entered disabled state [ 702.422372][T22210] FAT-fs (loop3): Can't find a valid FAT filesystem 09:11:25 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f8f7", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:11:25 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb25906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 702.488571][T22222] device syz_tun left promiscuous mode [ 702.518082][T22222] bridge169: port 1(syz_tun) entered disabled state [ 702.621773][T22222] bridge170: port 1(syz_tun) entered blocking state [ 702.645779][T22222] bridge170: port 1(syz_tun) entered disabled state 09:11:25 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x5d}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:11:25 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250500000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 702.675311][T22222] device syz_tun entered promiscuous mode 09:11:25 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250700000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:11:25 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f8f8", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 702.774540][T22232] FAT-fs (loop3): bogus logical sector size 524 [ 702.784518][T22232] FAT-fs (loop3): Can't find a valid FAT filesystem [ 702.812544][T22237] __nla_validate_parse: 15 callbacks suppressed 09:11:26 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f0000"], 0x3}}, 0x0) [ 702.812558][T22237] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 702.842330][T22236] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 702.890693][T22238] bridge449: port 1(syz_tun) entered blocking state [ 702.894108][T22232] FAT-fs (loop3): bogus logical sector size 524 [ 702.901834][T22238] bridge449: port 1(syz_tun) entered disabled state [ 702.903828][T22232] FAT-fs (loop3): Can't find a valid FAT filesystem [ 702.941291][T22238] device syz_tun entered promiscuous mode [ 702.970027][T22239] device syz_tun left promiscuous mode [ 702.976548][T22239] bridge95: port 1(syz_tun) entered disabled state 09:11:26 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb26906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 703.037058][T22239] bridge96: port 1(syz_tun) entered blocking state [ 703.060164][T22239] bridge96: port 1(syz_tun) entered disabled state 09:11:26 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x2}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:11:26 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f8f9", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 703.090536][T22239] device syz_tun entered promiscuous mode [ 703.121777][T22246] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 703.147182][T22252] FAT-fs (loop3): bogus logical sector size 524 [ 703.160199][T22252] FAT-fs (loop3): Can't find a valid FAT filesystem [ 703.177157][T22249] device syz_tun left promiscuous mode 09:11:26 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800003e1000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 703.207063][T22249] bridge170: port 1(syz_tun) entered disabled state [ 703.276795][T22249] bridge171: port 1(syz_tun) entered blocking state [ 703.283590][T22249] bridge171: port 1(syz_tun) entered disabled state [ 703.291190][T22249] device syz_tun entered promiscuous mode [ 703.300806][T22237] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 09:11:26 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f0000"], 0x3}}, 0x0) [ 703.342732][T22258] FAT-fs (loop2): invalid media value (0x74) [ 703.354001][T22252] FAT-fs (loop3): bogus logical sector size 524 [ 703.354475][T22260] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 703.377411][T22258] FAT-fs (loop2): Can't find a valid FAT filesystem [ 703.379284][T22252] FAT-fs (loop3): Can't find a valid FAT filesystem 09:11:26 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250a00000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 703.429231][T22260] device syz_tun left promiscuous mode [ 703.437312][T22260] bridge96: port 1(syz_tun) entered disabled state [ 703.490201][T22260] bridge97: port 1(syz_tun) entered blocking state [ 703.492162][T22258] FAT-fs (loop2): invalid media value (0x74) [ 703.498878][T22260] bridge97: port 1(syz_tun) entered disabled state [ 703.513324][T22258] FAT-fs (loop2): Can't find a valid FAT filesystem [ 703.513981][T22260] device syz_tun entered promiscuous mode 09:11:26 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb27906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 703.534379][T22268] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 703.555538][T22271] device syz_tun left promiscuous mode [ 703.563555][T22271] bridge171: port 1(syz_tun) entered disabled state [ 703.617343][T22271] bridge172: port 1(syz_tun) entered blocking state [ 703.645250][T22271] bridge172: port 1(syz_tun) entered disabled state [ 703.659907][T22275] FAT-fs (loop3): bogus logical sector size 524 09:11:26 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f8fa", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:11:26 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x3}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:11:26 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250700000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 703.669246][T22271] device syz_tun entered promiscuous mode [ 703.683672][T22275] FAT-fs (loop3): Can't find a valid FAT filesystem [ 703.698539][T22272] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 09:11:26 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYBLOB="000e00000000000008000a000f000000"], 0x2}}, 0x0) [ 703.743835][T22273] device syz_tun left promiscuous mode [ 703.755397][T22273] bridge449: port 1(syz_tun) entered disabled state [ 703.826972][T22273] bridge450: port 1(syz_tun) entered blocking state [ 703.846118][T22273] bridge450: port 1(syz_tun) entered disabled state [ 703.860117][T22275] FAT-fs (loop3): bogus logical sector size 524 [ 703.873391][T22275] FAT-fs (loop3): Can't find a valid FAT filesystem 09:11:27 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f8fb", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 703.902405][T22287] FAT-fs (loop2): invalid media value (0x02) [ 703.912855][T22273] device syz_tun entered promiscuous mode [ 703.922267][T22287] FAT-fs (loop2): Can't find a valid FAT filesystem [ 703.940615][T22285] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:11:27 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb28906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 703.969102][T22286] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 703.989638][T22289] device syz_tun left promiscuous mode [ 704.004632][T22289] bridge172: port 1(syz_tun) entered disabled state [ 704.070805][T22289] bridge173: port 1(syz_tun) entered blocking state [ 704.083609][T22289] bridge173: port 1(syz_tun) entered disabled state [ 704.092531][T22289] device syz_tun entered promiscuous mode [ 704.104205][T22290] device syz_tun left promiscuous mode [ 704.114928][T22290] bridge97: port 1(syz_tun) entered disabled state 09:11:27 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYBLOB="000e00000000000008000a000f000000"], 0x2}}, 0x0) [ 704.143458][T22287] FAT-fs (loop2): invalid media value (0x02) [ 704.154464][T22287] FAT-fs (loop2): Can't find a valid FAT filesystem [ 704.176435][T22290] bridge98: port 1(syz_tun) entered blocking state [ 704.182986][T22290] bridge98: port 1(syz_tun) entered disabled state 09:11:27 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x4}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 704.214672][T22290] device syz_tun entered promiscuous mode [ 704.239024][T22301] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 704.274596][T22301] device syz_tun left promiscuous mode [ 704.280467][T22301] bridge173: port 1(syz_tun) entered disabled state [ 704.284562][T22297] FAT-fs (loop3): bogus logical sector size 524 [ 704.307913][T22297] FAT-fs (loop3): Can't find a valid FAT filesystem 09:11:27 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250b00000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:11:27 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250a00000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 704.326945][T22301] bridge174: port 1(syz_tun) entered blocking state [ 704.340218][T22301] bridge174: port 1(syz_tun) entered disabled state [ 704.362057][T22301] device syz_tun entered promiscuous mode 09:11:27 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f8fc", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:11:27 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYBLOB="000e00000000000008000a000f000000"], 0x2}}, 0x0) [ 704.400019][T22297] FAT-fs (loop3): bogus logical sector size 524 [ 704.420240][T22307] device syz_tun left promiscuous mode [ 704.426026][T22307] bridge450: port 1(syz_tun) entered disabled state [ 704.431038][T22297] FAT-fs (loop3): Can't find a valid FAT filesystem [ 704.476790][T22307] bridge451: port 1(syz_tun) entered blocking state [ 704.483663][T22307] bridge451: port 1(syz_tun) entered disabled state [ 704.493476][T22307] device syz_tun entered promiscuous mode [ 704.505300][T22304] FAT-fs (loop2): invalid media value (0x00) [ 704.515510][T22312] device syz_tun left promiscuous mode [ 704.515571][T22304] FAT-fs (loop2): Can't find a valid FAT filesystem [ 704.521408][T22312] bridge98: port 1(syz_tun) entered disabled state 09:11:27 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb29906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 704.575813][T22312] bridge99: port 1(syz_tun) entered blocking state [ 704.587750][T22312] bridge99: port 1(syz_tun) entered disabled state [ 704.610035][T22312] device syz_tun entered promiscuous mode [ 704.680803][T22304] FAT-fs (loop2): invalid media value (0x00) [ 704.698155][T22319] device syz_tun left promiscuous mode [ 704.703834][T22319] bridge174: port 1(syz_tun) entered disabled state [ 704.707208][T22322] FAT-fs (loop3): bogus logical sector size 524 09:11:27 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250c00000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:11:27 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f0000"], 0x3}}, 0x0) [ 704.728107][T22322] FAT-fs (loop3): Can't find a valid FAT filesystem [ 704.737762][T22304] FAT-fs (loop2): Can't find a valid FAT filesystem 09:11:27 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f8fd", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 704.806847][T22319] bridge175: port 1(syz_tun) entered blocking state [ 704.819332][T22319] bridge175: port 1(syz_tun) entered disabled state [ 704.827791][T22319] device syz_tun entered promiscuous mode 09:11:28 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x5}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 704.906522][T22327] device syz_tun left promiscuous mode [ 704.912321][T22327] bridge451: port 1(syz_tun) entered disabled state [ 704.927442][T22322] FAT-fs (loop3): bogus logical sector size 524 [ 704.944243][T22322] FAT-fs (loop3): Can't find a valid FAT filesystem 09:11:28 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 704.976981][T22327] bridge452: port 1(syz_tun) entered blocking state [ 704.985891][T22327] bridge452: port 1(syz_tun) entered disabled state [ 705.000609][T22327] device syz_tun entered promiscuous mode [ 705.012139][T22333] device syz_tun left promiscuous mode [ 705.018106][T22333] bridge99: port 1(syz_tun) entered disabled state 09:11:28 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb2a906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 705.072475][T22330] bridge452: port 1(syz_tun) entered blocking state [ 705.079277][T22330] bridge452: port 1(syz_tun) entered forwarding state [ 705.094478][ C0] net_ratelimit: 12 callbacks suppressed [ 705.094499][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 705.103228][T22330] bond0: (slave bridge452): Enslaving as an active interface with an up link [ 705.106351][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 705.120876][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 705.126645][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 705.131778][T22338] device syz_tun left promiscuous mode [ 705.132487][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 705.143811][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 705.145175][T22338] bridge175: port 1(syz_tun) entered disabled state [ 705.188591][T22339] FAT-fs (loop2): bogus number of FAT structure [ 705.203645][T22343] FAT-fs (loop3): bogus logical sector size 524 [ 705.209560][T22339] FAT-fs (loop2): Can't find a valid FAT filesystem [ 705.215764][T22343] FAT-fs (loop3): Can't find a valid FAT filesystem [ 705.226518][T22338] bridge176: port 1(syz_tun) entered blocking state 09:11:28 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000e1000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:11:28 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250d00000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:11:28 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f800", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 705.233160][T22338] bridge176: port 1(syz_tun) entered disabled state [ 705.241460][T22338] device syz_tun entered promiscuous mode [ 705.254477][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 705.260276][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 705.314922][T22343] FAT-fs (loop3): bogus logical sector size 524 [ 705.340589][T22339] FAT-fs (loop2): bogus number of FAT structure [ 705.352471][T22343] FAT-fs (loop3): Can't find a valid FAT filesystem 09:11:28 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 705.384572][T22339] FAT-fs (loop2): Can't find a valid FAT filesystem [ 705.404357][T22352] device syz_tun left promiscuous mode [ 705.418835][T22352] bridge452: port 1(syz_tun) entered disabled state 09:11:28 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb2b906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 705.477969][T22352] bridge453: port 1(syz_tun) entered blocking state [ 705.492476][T22352] bridge453: port 1(syz_tun) entered disabled state [ 705.499446][T22355] FAT-fs (loop1): count of clusters too big (4294966676) [ 705.509868][T22352] device syz_tun entered promiscuous mode [ 705.528793][T22355] FAT-fs (loop1): Can't find a valid FAT filesystem [ 705.549785][T22357] bridge101: port 1(syz_tun) entered blocking state 09:11:28 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x6}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 705.600026][T22357] bridge101: port 1(syz_tun) entered disabled state [ 705.611498][T22357] device syz_tun entered promiscuous mode [ 705.632435][T22364] device syz_tun left promiscuous mode [ 705.645706][T22364] bridge176: port 1(syz_tun) entered disabled state 09:11:28 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250f00000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 705.706689][T22364] bridge177: port 1(syz_tun) entered blocking state [ 705.718404][T22355] FAT-fs (loop1): count of clusters too big (4294966676) [ 705.728897][T22355] FAT-fs (loop1): Can't find a valid FAT filesystem [ 705.740772][T22369] FAT-fs (loop2): invalid media value (0x0a) 09:11:28 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250d00000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 705.752335][T22364] bridge177: port 1(syz_tun) entered disabled state [ 705.752361][T22369] FAT-fs (loop2): Can't find a valid FAT filesystem [ 705.759057][T22367] FAT-fs (loop3): bogus logical sector size 524 [ 705.786738][T22367] FAT-fs (loop3): Can't find a valid FAT filesystem [ 705.796586][T22364] device syz_tun entered promiscuous mode 09:11:29 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 705.922582][T22373] device syz_tun left promiscuous mode [ 705.948639][T22369] FAT-fs (loop2): invalid media value (0x0a) [ 705.960283][T22367] FAT-fs (loop3): bogus logical sector size 524 09:11:29 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x3c}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 705.979020][T22369] FAT-fs (loop2): Can't find a valid FAT filesystem [ 705.987450][T22373] bridge453: port 1(syz_tun) entered disabled state [ 705.994172][T22367] FAT-fs (loop3): Can't find a valid FAT filesystem [ 706.046699][T22373] bridge454: port 1(syz_tun) entered blocking state [ 706.053868][T22373] bridge454: port 1(syz_tun) entered disabled state [ 706.086062][T22373] device syz_tun entered promiscuous mode 09:11:29 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x7}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 706.128472][T22381] device syz_tun left promiscuous mode [ 706.143839][T22381] bridge177: port 1(syz_tun) entered disabled state 09:11:29 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb2c906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 706.206879][T22381] bridge178: port 1(syz_tun) entered blocking state [ 706.224560][T22381] bridge178: port 1(syz_tun) entered disabled state [ 706.246863][T22381] device syz_tun entered promiscuous mode [ 706.263545][T22383] device syz_tun left promiscuous mode [ 706.304797][T22389] FAT-fs (loop2): invalid media value (0x01) [ 706.340885][T22383] bridge101: port 1(syz_tun) entered disabled state 09:11:29 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x2}}, 0x0) [ 706.352158][T22389] FAT-fs (loop2): Can't find a valid FAT filesystem 09:11:29 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x5d}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 706.426514][T22383] bridge102: port 1(syz_tun) entered blocking state [ 706.443044][T22383] bridge102: port 1(syz_tun) entered disabled state [ 706.461508][T22383] device syz_tun entered promiscuous mode [ 706.482533][T22397] device syz_tun left promiscuous mode [ 706.494482][T22394] FAT-fs (loop3): bogus logical sector size 524 [ 706.497684][T22397] bridge178: port 1(syz_tun) entered disabled state [ 706.507962][T22389] FAT-fs (loop2): invalid media value (0x01) [ 706.513985][T22389] FAT-fs (loop2): Can't find a valid FAT filesystem 09:11:29 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000251000000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:11:29 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250c00000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 706.547675][T22394] FAT-fs (loop3): Can't find a valid FAT filesystem [ 706.557104][T22397] bridge179: port 1(syz_tun) entered blocking state [ 706.563810][T22397] bridge179: port 1(syz_tun) entered disabled state [ 706.574153][T22397] device syz_tun entered promiscuous mode [ 706.676924][T22394] FAT-fs (loop3): bogus logical sector size 524 [ 706.718915][T22394] FAT-fs (loop3): Can't find a valid FAT filesystem [ 706.751323][T22406] device syz_tun left promiscuous mode 09:11:29 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x8}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:11:29 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x2}}, 0x0) [ 706.763673][T22406] bridge454: port 1(syz_tun) entered disabled state 09:11:30 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x2}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:11:30 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb2d906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 706.827118][T22406] bridge455: port 1(syz_tun) entered blocking state [ 706.838684][T22406] bridge455: port 1(syz_tun) entered disabled state [ 706.854152][T22406] device syz_tun entered promiscuous mode [ 706.875400][T22407] bridge455: port 1(syz_tun) entered blocking state [ 706.882078][T22407] bridge455: port 1(syz_tun) entered forwarding state [ 706.911684][T22407] bond0: (slave bridge455): Enslaving as an active interface with an up link [ 706.934477][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 706.940246][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 706.948896][T22410] device syz_tun left promiscuous mode [ 706.963541][T22410] bridge102: port 1(syz_tun) entered disabled state [ 706.990045][T22413] FAT-fs (loop2): invalid media value (0x04) [ 707.003668][T22413] FAT-fs (loop2): Can't find a valid FAT filesystem [ 707.018343][T22418] FAT-fs (loop1): invalid media value (0x74) [ 707.026891][T22410] bridge103: port 1(syz_tun) entered blocking state [ 707.031081][T22418] FAT-fs (loop1): Can't find a valid FAT filesystem [ 707.033506][T22410] bridge103: port 1(syz_tun) entered disabled state [ 707.034243][T22410] device syz_tun entered promiscuous mode [ 707.072421][T22414] bridge103: port 1(syz_tun) entered blocking state [ 707.079181][T22414] bridge103: port 1(syz_tun) entered forwarding state [ 707.108235][T22414] bond0: (slave bridge103): Enslaving as an active interface with an up link [ 707.117230][T22415] device syz_tun left promiscuous mode [ 707.126812][T22415] bridge179: port 1(syz_tun) entered disabled state [ 707.144509][T22425] FAT-fs (loop3): bogus logical sector size 524 [ 707.151316][T22425] FAT-fs (loop3): Can't find a valid FAT filesystem 09:11:30 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x2}}, 0x0) [ 707.151335][T22413] FAT-fs (loop2): invalid media value (0x04) [ 707.168732][T22413] FAT-fs (loop2): Can't find a valid FAT filesystem [ 707.177344][T22418] FAT-fs (loop1): invalid media value (0x74) [ 707.183491][T22418] FAT-fs (loop1): Can't find a valid FAT filesystem 09:11:30 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x9}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 707.217574][T22415] bridge180: port 1(syz_tun) entered blocking state [ 707.227933][T22415] bridge180: port 1(syz_tun) entered disabled state [ 707.241049][T22415] device syz_tun entered promiscuous mode 09:11:30 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000251300000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:11:30 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x2}}, 0x0) [ 707.338425][T22425] FAT-fs (loop3): bogus logical sector size 524 09:11:30 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x3}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 707.386885][T22425] FAT-fs (loop3): Can't find a valid FAT filesystem 09:11:30 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb2e906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 707.457526][T22431] device syz_tun left promiscuous mode [ 707.486952][T22431] bridge103: port 1(syz_tun) entered disabled state [ 707.559978][T22431] bridge104: port 1(syz_tun) entered blocking state [ 707.573438][T22431] bridge104: port 1(syz_tun) entered disabled state [ 707.585119][T22431] device syz_tun entered promiscuous mode [ 707.607005][T22436] FAT-fs (loop2): invalid media value (0x02) [ 707.623175][T22433] device syz_tun left promiscuous mode [ 707.627676][T22436] FAT-fs (loop2): Can't find a valid FAT filesystem [ 707.630106][T22433] bridge455: port 1(syz_tun) entered disabled state [ 707.635434][T22443] FAT-fs (loop1): invalid media value (0x02) [ 707.648221][T22443] FAT-fs (loop1): Can't find a valid FAT filesystem 09:11:30 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000251000000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 707.698125][T22433] bridge456: port 1(syz_tun) entered blocking state [ 707.706759][T22433] bridge456: port 1(syz_tun) entered disabled state [ 707.714294][T22433] device syz_tun entered promiscuous mode [ 707.732297][T22442] device syz_tun left promiscuous mode [ 707.739964][T22442] bridge180: port 1(syz_tun) entered disabled state [ 707.750074][T22447] FAT-fs (loop3): bogus logical sector size 524 [ 707.750679][T22436] FAT-fs (loop2): invalid media value (0x02) [ 707.764892][T22436] FAT-fs (loop2): Can't find a valid FAT filesystem [ 707.770286][T22447] FAT-fs (loop3): Can't find a valid FAT filesystem [ 707.780172][T22443] FAT-fs (loop1): invalid media value (0x02) [ 707.788618][T22442] bridge181: port 1(syz_tun) entered blocking state [ 707.799188][T22442] bridge181: port 1(syz_tun) entered disabled state [ 707.806557][T22443] FAT-fs (loop1): Can't find a valid FAT filesystem [ 707.807486][T22442] device syz_tun entered promiscuous mode 09:11:31 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xa}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 707.848649][T22454] __nla_validate_parse: 23 callbacks suppressed [ 707.848664][T22454] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 09:11:31 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000251400000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:11:31 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x3}}, 0x0) [ 707.932800][T22455] device syz_tun left promiscuous mode [ 707.942590][T22455] bridge104: port 1(syz_tun) entered disabled state [ 707.945643][T22447] FAT-fs (loop3): bogus logical sector size 524 09:11:31 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x4}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 707.987371][T22447] FAT-fs (loop3): Can't find a valid FAT filesystem [ 708.019600][T22455] bridge105: port 1(syz_tun) entered blocking state 09:11:31 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb2f906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 708.035756][T22455] bridge105: port 1(syz_tun) entered disabled state [ 708.052286][T22455] device syz_tun entered promiscuous mode [ 708.063433][T22459] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 708.129144][T22454] bridge105: port 1(syz_tun) entered blocking state [ 708.135917][T22454] bridge105: port 1(syz_tun) entered forwarding state [ 708.154819][T22461] FAT-fs (loop2): invalid media value (0x00) [ 708.167617][T22461] FAT-fs (loop2): Can't find a valid FAT filesystem [ 708.186958][T22454] bond0: (slave bridge105): Enslaving as an active interface with an up link [ 708.204547][T22462] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 708.240373][T22463] device syz_tun left promiscuous mode [ 708.257716][T22463] bridge456: port 1(syz_tun) entered disabled state 09:11:31 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x2}}, 0x0) [ 708.288962][T22469] FAT-fs (loop1): invalid media value (0x00) [ 708.297004][T22471] FAT-fs (loop3): bogus logical sector size 524 [ 708.303458][T22469] FAT-fs (loop1): Can't find a valid FAT filesystem [ 708.310189][T22461] FAT-fs (loop2): invalid media value (0x00) [ 708.324621][T22461] FAT-fs (loop2): Can't find a valid FAT filesystem [ 708.344623][T22471] FAT-fs (loop3): Can't find a valid FAT filesystem [ 708.360119][T22463] bridge457: port 1(syz_tun) entered blocking state [ 708.378463][T22463] bridge457: port 1(syz_tun) entered disabled state [ 708.395743][T22463] device syz_tun entered promiscuous mode [ 708.405330][T22465] device syz_tun left promiscuous mode [ 708.410948][T22465] bridge181: port 1(syz_tun) entered disabled state [ 708.448455][T22469] FAT-fs (loop1): invalid media value (0x00) [ 708.467035][T22469] FAT-fs (loop1): Can't find a valid FAT filesystem [ 708.481745][T22471] FAT-fs (loop3): bogus logical sector size 524 [ 708.488728][T22465] bridge182: port 1(syz_tun) entered blocking state 09:11:31 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xc}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 708.505399][T22471] FAT-fs (loop3): Can't find a valid FAT filesystem [ 708.519196][T22465] bridge182: port 1(syz_tun) entered disabled state [ 708.538572][T22465] device syz_tun entered promiscuous mode 09:11:31 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x5}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 708.569125][T22466] bridge457: port 1(syz_tun) entered blocking state [ 708.575842][T22466] bridge457: port 1(syz_tun) entered forwarding state [ 708.589775][T22466] bond0: (slave bridge457): Enslaving as an active interface with an up link 09:11:31 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb30906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 708.655937][T22477] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 09:11:31 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x3}}, 0x0) [ 708.699336][T22478] device syz_tun left promiscuous mode [ 708.728829][T22478] bridge105: port 1(syz_tun) entered disabled state [ 708.743118][T22482] FAT-fs (loop2): invalid media value (0x61) [ 708.758138][T22482] FAT-fs (loop2): Can't find a valid FAT filesystem [ 708.811171][T22478] bridge106: port 1(syz_tun) entered blocking state [ 708.837543][T22478] bridge106: port 1(syz_tun) entered disabled state [ 708.861506][T22478] device syz_tun entered promiscuous mode [ 708.871544][T22487] FAT-fs (loop1): bogus number of FAT structure [ 708.883061][T22487] FAT-fs (loop1): Can't find a valid FAT filesystem [ 708.895776][T22482] FAT-fs (loop2): invalid media value (0x61) [ 708.907848][T22482] FAT-fs (loop2): Can't find a valid FAT filesystem [ 708.921208][T22459] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 708.949519][T22491] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 708.965621][T22493] FAT-fs (loop3): bogus logical sector size 524 [ 708.982726][T22493] FAT-fs (loop3): Can't find a valid FAT filesystem 09:11:32 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000251500000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 709.015547][T22487] FAT-fs (loop1): bogus number of FAT structure [ 709.024545][T22487] FAT-fs (loop1): Can't find a valid FAT filesystem 09:11:32 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xe}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:11:32 executing program 0: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb2f906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 709.080081][T22494] device syz_tun left promiscuous mode [ 709.110363][T22494] bridge182: port 1(syz_tun) entered disabled state 09:11:32 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x6}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 709.204494][T22493] FAT-fs (loop3): bogus logical sector size 524 [ 709.215728][T22494] bridge183: port 1(syz_tun) entered blocking state [ 709.228921][T22493] FAT-fs (loop3): Can't find a valid FAT filesystem [ 709.241190][T22494] bridge183: port 1(syz_tun) entered disabled state 09:11:32 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x3}}, 0x0) [ 709.256540][T22494] device syz_tun entered promiscuous mode [ 709.266953][T22500] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 09:11:32 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb31906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 709.311848][T22505] FAT-fs (loop2): invalid media value (0x2e) [ 709.324726][T22505] FAT-fs (loop2): Can't find a valid FAT filesystem [ 709.344839][T22502] device syz_tun left promiscuous mode [ 709.371856][T22507] FAT-fs (loop0): bogus logical sector size 524 [ 709.382692][T22502] bridge457: port 1(syz_tun) entered disabled state [ 709.389493][T22507] FAT-fs (loop0): Can't find a valid FAT filesystem [ 709.447771][T22502] bridge458: port 1(syz_tun) entered blocking state [ 709.454467][T22502] bridge458: port 1(syz_tun) entered disabled state [ 709.464401][T22502] device syz_tun entered promiscuous mode [ 709.472425][T22511] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 709.494151][T22512] device syz_tun left promiscuous mode [ 709.501345][T22512] bridge183: port 1(syz_tun) entered disabled state [ 709.551302][T22514] FAT-fs (loop1): invalid media value (0x0a) [ 709.559942][T22512] bridge184: port 1(syz_tun) entered blocking state [ 709.566842][T22505] FAT-fs (loop2): invalid media value (0x2e) [ 709.572962][T22514] FAT-fs (loop1): Can't find a valid FAT filesystem [ 709.579810][T22505] FAT-fs (loop2): Can't find a valid FAT filesystem [ 709.586705][T22512] bridge184: port 1(syz_tun) entered disabled state [ 709.594377][T22512] device syz_tun entered promiscuous mode 09:11:32 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x3}}, 0x0) [ 709.602795][T22500] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 09:11:32 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x3}}, 0x0) 09:11:32 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xf}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:11:32 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000251600000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 709.684592][T22514] FAT-fs (loop1): invalid media value (0x0a) [ 709.690977][T22519] FAT-fs (loop3): bogus logical sector size 524 [ 709.721918][T22514] FAT-fs (loop1): Can't find a valid FAT filesystem [ 709.745028][T22519] FAT-fs (loop3): Can't find a valid FAT filesystem [ 709.783724][T22524] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 09:11:33 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x7}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 709.825336][T22525] device syz_tun left promiscuous mode [ 709.843005][T22525] bridge184: port 1(syz_tun) entered disabled state [ 709.857438][T22519] FAT-fs (loop3): bogus logical sector size 524 [ 709.871961][T22519] FAT-fs (loop3): Can't find a valid FAT filesystem [ 709.917142][T22525] bridge185: port 1(syz_tun) entered blocking state [ 709.924159][T22525] bridge185: port 1(syz_tun) entered disabled state [ 709.932979][T22525] device syz_tun entered promiscuous mode [ 709.941503][T22524] device syz_tun left promiscuous mode [ 709.948446][T22524] bridge106: port 1(syz_tun) entered disabled state 09:11:33 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x3}}, 0x0) [ 709.972791][T22532] FAT-fs (loop2): invalid media value (0x73) [ 709.983331][T22532] FAT-fs (loop2): Can't find a valid FAT filesystem 09:11:33 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb32906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 710.016799][T22524] bridge107: port 1(syz_tun) entered blocking state [ 710.038609][T22537] FAT-fs (loop1): invalid media value (0x01) [ 710.040525][T22524] bridge107: port 1(syz_tun) entered disabled state [ 710.053670][T22532] FAT-fs (loop2): invalid media value (0x73) [ 710.057551][T22537] FAT-fs (loop1): Can't find a valid FAT filesystem [ 710.064509][T22532] FAT-fs (loop2): Can't find a valid FAT filesystem [ 710.073991][T22524] device syz_tun entered promiscuous mode 09:11:33 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x3}}, 0x0) [ 710.123037][T22533] device syz_tun left promiscuous mode [ 710.134467][ C1] net_ratelimit: 18 callbacks suppressed [ 710.134476][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 710.141707][T22533] bridge458: port 1(syz_tun) entered disabled state [ 710.146326][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:11:33 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x10}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 710.185452][T22537] FAT-fs (loop1): invalid media value (0x01) [ 710.191542][T22537] FAT-fs (loop1): Can't find a valid FAT filesystem [ 710.262063][T22533] bridge459: port 1(syz_tun) entered blocking state [ 710.277676][T22533] bridge459: port 1(syz_tun) entered disabled state [ 710.288876][T22533] device syz_tun entered promiscuous mode [ 710.297511][T22548] FAT-fs (loop3): bogus logical sector size 524 09:11:33 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x8}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 710.313808][T22548] FAT-fs (loop3): Can't find a valid FAT filesystem [ 710.321774][T22542] device syz_tun left promiscuous mode [ 710.334622][T22542] bridge185: port 1(syz_tun) entered disabled state [ 710.377269][T22553] FAT-fs (loop2): bogus number of reserved sectors [ 710.393929][T22553] FAT-fs (loop2): Can't find a valid FAT filesystem [ 710.395764][T22542] bridge186: port 1(syz_tun) entered blocking state [ 710.413411][T22548] FAT-fs (loop3): bogus logical sector size 524 [ 710.421183][T22548] FAT-fs (loop3): Can't find a valid FAT filesystem [ 710.424897][T22542] bridge186: port 1(syz_tun) entered disabled state [ 710.439791][T22542] device syz_tun entered promiscuous mode [ 710.452728][T22549] device syz_tun left promiscuous mode [ 710.462190][T22549] bridge107: port 1(syz_tun) entered disabled state 09:11:33 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb33906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) 09:11:33 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x3}}, 0x0) [ 710.509947][T22549] bridge108: port 1(syz_tun) entered blocking state [ 710.516753][T22557] FAT-fs (loop1): invalid media value (0x04) [ 710.522905][T22553] FAT-fs (loop2): bogus number of reserved sectors [ 710.524551][T22549] bridge108: port 1(syz_tun) entered disabled state [ 710.530689][T22557] FAT-fs (loop1): Can't find a valid FAT filesystem [ 710.543393][T22549] device syz_tun entered promiscuous mode [ 710.551795][T22553] FAT-fs (loop2): Can't find a valid FAT filesystem 09:11:33 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000251800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 710.678251][T22562] device syz_tun left promiscuous mode [ 710.690594][T22562] bridge186: port 1(syz_tun) entered disabled state [ 710.709296][T22557] FAT-fs (loop1): invalid media value (0x04) 09:11:33 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000251500000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 710.729882][T22557] FAT-fs (loop1): Can't find a valid FAT filesystem [ 710.748102][T22562] bridge187: port 1(syz_tun) entered blocking state [ 710.755980][T22562] bridge187: port 1(syz_tun) entered disabled state [ 710.763500][T22562] device syz_tun entered promiscuous mode [ 710.778728][T22563] FAT-fs (loop3): bogus logical sector size 524 09:11:33 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x23}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:11:33 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x9}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:11:34 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x3}}, 0x0) [ 710.807729][T22563] FAT-fs (loop3): Can't find a valid FAT filesystem [ 710.821818][T22569] device syz_tun left promiscuous mode [ 710.842784][T22569] bridge459: port 1(syz_tun) entered disabled state [ 710.907144][T22569] bridge460: port 1(syz_tun) entered blocking state [ 710.913904][T22569] bridge460: port 1(syz_tun) entered disabled state [ 710.925430][T22569] device syz_tun entered promiscuous mode [ 710.932305][T22563] FAT-fs (loop3): bogus logical sector size 524 [ 710.938984][T22563] FAT-fs (loop3): Can't find a valid FAT filesystem [ 710.966829][T22568] bridge460: port 1(syz_tun) entered blocking state [ 710.973492][T22568] bridge460: port 1(syz_tun) entered forwarding state [ 710.983220][T22575] FAT-fs (loop1): invalid media value (0x02) 09:11:34 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb34906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 711.012256][T22575] FAT-fs (loop1): Can't find a valid FAT filesystem [ 711.021846][T22580] FAT-fs (loop2): bogus number of reserved sectors [ 711.036152][T22580] FAT-fs (loop2): Can't find a valid FAT filesystem [ 711.041536][T22568] bond0: (slave bridge460): Enslaving as an active interface with an up link 09:11:34 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000251b00000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 711.082504][T22574] device syz_tun left promiscuous mode [ 711.089271][T22574] bridge108: port 1(syz_tun) entered disabled state [ 711.096013][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 711.101847][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 711.150049][T22580] FAT-fs (loop2): bogus number of reserved sectors [ 711.158569][T22574] bridge109: port 1(syz_tun) entered blocking state [ 711.168767][T22574] bridge109: port 1(syz_tun) entered disabled state [ 711.175803][T22575] FAT-fs (loop1): invalid media value (0x02) [ 711.183934][T22580] FAT-fs (loop2): Can't find a valid FAT filesystem [ 711.183941][T22574] device syz_tun entered promiscuous mode [ 711.203689][T22575] FAT-fs (loop1): Can't find a valid FAT filesystem [ 711.223996][T22583] device syz_tun left promiscuous mode [ 711.244493][T22591] FAT-fs (loop3): bogus logical sector size 524 09:11:34 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x3}}, 0x0) 09:11:34 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xa}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 711.250912][T22591] FAT-fs (loop3): Can't find a valid FAT filesystem [ 711.266112][T22583] bridge187: port 1(syz_tun) entered disabled state [ 711.319670][T22583] bridge188: port 1(syz_tun) entered blocking state [ 711.334486][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 711.335489][T22583] bridge188: port 1(syz_tun) entered disabled state [ 711.340249][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 711.340309][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 711.348788][T22583] device syz_tun entered promiscuous mode 09:11:34 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x3}}, 0x0) 09:11:34 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x48}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 711.352823][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 711.352873][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 711.361576][T22590] device syz_tun left promiscuous mode [ 711.364387][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 711.394870][T22590] bridge460: port 1(syz_tun) entered disabled state [ 711.461180][T22590] bridge461: port 1(syz_tun) entered blocking state [ 711.468001][T22590] bridge461: port 1(syz_tun) entered disabled state [ 711.482007][T22590] device syz_tun entered promiscuous mode [ 711.511098][T22596] device syz_tun left promiscuous mode [ 711.524568][T22596] bridge109: port 1(syz_tun) entered disabled state [ 711.544907][T22591] FAT-fs (loop3): bogus logical sector size 524 [ 711.554006][T22591] FAT-fs (loop3): Can't find a valid FAT filesystem [ 711.569068][T22605] FAT-fs (loop1): invalid media value (0x00) [ 711.584493][T22605] FAT-fs (loop1): Can't find a valid FAT filesystem [ 711.593645][T22596] bridge110: port 1(syz_tun) entered blocking state [ 711.604842][T22596] bridge110: port 1(syz_tun) entered disabled state [ 711.618416][T22596] device syz_tun entered promiscuous mode [ 711.640734][T22593] device syz_tun left promiscuous mode [ 711.654224][T22593] bridge461: port 1(syz_tun) entered disabled state [ 711.668357][T22608] FAT-fs (loop2): bogus number of reserved sectors 09:11:34 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb35906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) 09:11:34 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x3}}, 0x0) [ 711.685259][T22608] FAT-fs (loop2): Can't find a valid FAT filesystem [ 711.693586][T22605] FAT-fs (loop1): invalid media value (0x00) [ 711.699942][T22605] FAT-fs (loop1): Can't find a valid FAT filesystem [ 711.709082][T22603] device syz_tun left promiscuous mode [ 711.718903][T22603] bridge188: port 1(syz_tun) entered disabled state [ 711.780448][T22603] bridge189: port 1(syz_tun) entered blocking state [ 711.790621][T22603] bridge189: port 1(syz_tun) entered disabled state [ 711.801204][T22608] FAT-fs (loop2): bogus number of reserved sectors [ 711.808715][T22603] device syz_tun entered promiscuous mode [ 711.824647][T22608] FAT-fs (loop2): Can't find a valid FAT filesystem 09:11:35 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xc}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 711.858239][T22615] device syz_tun left promiscuous mode [ 711.863865][T22615] bridge110: port 1(syz_tun) entered disabled state 09:11:35 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000251e00000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:11:35 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x3}}, 0x0) [ 711.932498][T22616] FAT-fs (loop3): bogus logical sector size 524 [ 711.956558][T22615] bridge111: port 1(syz_tun) entered blocking state 09:11:35 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x4c}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 711.984513][T22616] FAT-fs (loop3): Can't find a valid FAT filesystem [ 712.016500][T22615] bridge111: port 1(syz_tun) entered disabled state [ 712.030841][T22615] device syz_tun entered promiscuous mode [ 712.056637][T22624] device syz_tun left promiscuous mode [ 712.063300][T22624] bridge189: port 1(syz_tun) entered disabled state 09:11:35 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000251300000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 712.108188][T22624] bridge190: port 1(syz_tun) entered blocking state [ 712.125997][T22624] bridge190: port 1(syz_tun) entered disabled state [ 712.145554][T22624] device syz_tun entered promiscuous mode [ 712.152096][T22622] FAT-fs (loop1): invalid media value (0x61) [ 712.160540][T22622] FAT-fs (loop1): Can't find a valid FAT filesystem [ 712.160775][T22616] FAT-fs (loop3): bogus logical sector size 524 [ 712.186342][T22623] bridge462: port 1(syz_tun) entered blocking state [ 712.193872][T22616] FAT-fs (loop3): Can't find a valid FAT filesystem 09:11:35 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a00", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x3}}, 0x0) [ 712.218029][T22623] bridge462: port 1(syz_tun) entered disabled state [ 712.238163][T22623] device syz_tun entered promiscuous mode [ 712.262754][T22634] device syz_tun left promiscuous mode [ 712.272897][T22634] bridge111: port 1(syz_tun) entered disabled state [ 712.294856][T22630] FAT-fs (loop2): bogus number of reserved sectors [ 712.301401][T22630] FAT-fs (loop2): Can't find a valid FAT filesystem [ 712.308612][T22622] FAT-fs (loop1): invalid media value (0x61) 09:11:35 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb36906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 712.317010][T22622] FAT-fs (loop1): Can't find a valid FAT filesystem [ 712.325978][T22634] bridge112: port 1(syz_tun) entered blocking state [ 712.333313][T22634] bridge112: port 1(syz_tun) entered disabled state [ 712.362138][T22634] device syz_tun entered promiscuous mode 09:11:35 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xe}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 712.387054][T22640] device syz_tun left promiscuous mode [ 712.397994][T22640] bridge190: port 1(syz_tun) entered disabled state [ 712.481946][T22630] FAT-fs (loop2): bogus number of reserved sectors [ 712.496833][T22630] FAT-fs (loop2): Can't find a valid FAT filesystem 09:11:35 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000252500000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:11:35 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a00", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x3}}, 0x0) [ 712.592768][T22646] FAT-fs (loop1): invalid media value (0x2e) [ 712.602581][T22644] FAT-fs (loop3): bogus logical sector size 524 [ 712.607270][T22646] FAT-fs (loop1): Can't find a valid FAT filesystem 09:11:35 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000251e00000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 712.647607][T22644] FAT-fs (loop3): Can't find a valid FAT filesystem [ 712.662957][T22651] bridge192: port 1(syz_tun) entered blocking state [ 712.678632][T22646] FAT-fs (loop1): invalid media value (0x2e) [ 712.684783][T22646] FAT-fs (loop1): Can't find a valid FAT filesystem 09:11:35 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x68}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 712.691626][T22651] bridge192: port 1(syz_tun) entered disabled state [ 712.699420][T22651] device syz_tun entered promiscuous mode 09:11:35 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a00", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x3}}, 0x0) [ 712.747128][T22652] device syz_tun left promiscuous mode [ 712.764638][T22652] bridge462: port 1(syz_tun) entered disabled state 09:11:36 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xf}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 712.797916][T22644] FAT-fs (loop3): bogus logical sector size 524 [ 712.806778][T22652] bridge463: port 1(syz_tun) entered blocking state [ 712.818530][T22660] FAT-fs (loop2): bogus number of reserved sectors [ 712.825606][T22644] FAT-fs (loop3): Can't find a valid FAT filesystem [ 712.825913][T22660] FAT-fs (loop2): Can't find a valid FAT filesystem [ 712.834772][T22652] bridge463: port 1(syz_tun) entered disabled state 09:11:36 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb37906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 712.866217][T22652] device syz_tun entered promiscuous mode [ 712.891411][T22655] device syz_tun left promiscuous mode [ 712.900656][T22655] bridge112: port 1(syz_tun) entered disabled state [ 712.962570][T22660] FAT-fs (loop2): bogus number of reserved sectors [ 712.971690][T22655] bridge113: port 1(syz_tun) entered blocking state [ 712.981516][T22660] FAT-fs (loop2): Can't find a valid FAT filesystem [ 712.984994][T22655] bridge113: port 1(syz_tun) entered disabled state [ 713.010682][T22655] device syz_tun entered promiscuous mode [ 713.026608][T22663] __nla_validate_parse: 19 callbacks suppressed [ 713.026621][T22663] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 713.052543][T22672] FAT-fs (loop1): invalid media value (0x73) [ 713.079461][T22672] FAT-fs (loop1): Can't find a valid FAT filesystem [ 713.086652][T22674] FAT-fs (loop3): bogus logical sector size 524 [ 713.093318][T22657] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 09:11:36 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x6c}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 713.124463][T22674] FAT-fs (loop3): Can't find a valid FAT filesystem [ 713.131502][T22666] device syz_tun left promiscuous mode [ 713.145472][T22666] bridge192: port 1(syz_tun) entered disabled state [ 713.196896][T22666] bridge193: port 1(syz_tun) entered blocking state [ 713.203634][T22666] bridge193: port 1(syz_tun) entered disabled state [ 713.215309][T22666] device syz_tun entered promiscuous mode 09:11:36 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000252f00000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 713.250279][T22674] FAT-fs (loop3): bogus logical sector size 524 [ 713.265299][T22672] FAT-fs (loop1): invalid media value (0x73) [ 713.271829][T22674] FAT-fs (loop3): Can't find a valid FAT filesystem [ 713.290039][T22672] FAT-fs (loop1): Can't find a valid FAT filesystem 09:11:36 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a0000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x3}}, 0x0) 09:11:36 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a00", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x3}}, 0x0) [ 713.379012][T22682] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 09:11:36 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x10}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:11:36 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb38906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 713.432119][T22679] FAT-fs (loop2): bogus number of reserved sectors [ 713.454487][T22679] FAT-fs (loop2): Can't find a valid FAT filesystem [ 713.462459][T22685] device syz_tun left promiscuous mode [ 713.474276][T22685] bridge463: port 1(syz_tun) entered disabled state [ 713.513758][T22679] FAT-fs (loop2): bogus number of reserved sectors [ 713.525009][T22679] FAT-fs (loop2): Can't find a valid FAT filesystem [ 713.534314][T22685] bridge464: port 1(syz_tun) entered blocking state [ 713.541179][T22685] bridge464: port 1(syz_tun) entered disabled state [ 713.552208][T22685] device syz_tun entered promiscuous mode [ 713.572082][T22686] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 713.607588][T22687] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 713.628192][T22689] device syz_tun left promiscuous mode [ 713.634065][T22689] bridge113: port 1(syz_tun) entered disabled state [ 713.662535][T22693] FAT-fs (loop1): bogus number of reserved sectors 09:11:36 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x74}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 713.690160][T22693] FAT-fs (loop1): Can't find a valid FAT filesystem [ 713.770338][T22689] bridge114: port 1(syz_tun) entered blocking state [ 713.781286][T22689] bridge114: port 1(syz_tun) entered disabled state [ 713.810538][T22689] device syz_tun entered promiscuous mode [ 713.818390][T22693] FAT-fs (loop1): bogus number of reserved sectors [ 713.825315][T22693] FAT-fs (loop1): Can't find a valid FAT filesystem [ 713.831955][T22690] device syz_tun left promiscuous mode [ 713.835392][T22699] FAT-fs (loop3): bogus logical sector size 524 [ 713.837683][T22690] bridge193: port 1(syz_tun) entered disabled state [ 713.847348][T22699] FAT-fs (loop3): Can't find a valid FAT filesystem 09:11:37 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x23}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 713.889674][T22690] bridge194: port 1(syz_tun) entered blocking state [ 713.907778][T22690] bridge194: port 1(syz_tun) entered disabled state 09:11:37 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000252500000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 713.947867][T22703] FAT-fs (loop2): bogus number of reserved sectors [ 713.951691][T22690] device syz_tun entered promiscuous mode [ 713.954871][T22699] FAT-fs (loop3): bogus logical sector size 524 [ 713.974125][T22703] FAT-fs (loop2): Can't find a valid FAT filesystem [ 713.986583][T22699] FAT-fs (loop3): Can't find a valid FAT filesystem 09:11:37 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000254900000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:11:37 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a0000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x3}}, 0x0) [ 714.027877][T22709] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 714.056080][T22709] device syz_tun left promiscuous mode [ 714.062089][T22709] bridge114: port 1(syz_tun) entered disabled state 09:11:37 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb39906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) 09:11:37 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x78}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 714.138339][T22709] bridge115: port 1(syz_tun) entered blocking state [ 714.158571][T22707] FAT-fs (loop1): bogus number of reserved sectors [ 714.173115][T22707] FAT-fs (loop1): Can't find a valid FAT filesystem [ 714.212021][T22709] bridge115: port 1(syz_tun) entered disabled state [ 714.227208][T22709] device syz_tun entered promiscuous mode [ 714.243339][T22715] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 09:11:37 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x3}}, 0x0) [ 714.270480][T22716] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 714.302180][T22707] FAT-fs (loop1): bogus number of reserved sectors [ 714.317442][T22707] FAT-fs (loop1): Can't find a valid FAT filesystem [ 714.333333][T22718] device syz_tun left promiscuous mode [ 714.364072][T22725] FAT-fs (loop3): bogus logical sector size 524 [ 714.374051][T22726] FAT-fs (loop2): bogus number of reserved sectors [ 714.391136][T22718] bridge194: port 1(syz_tun) entered disabled state [ 714.397981][T22726] FAT-fs (loop2): Can't find a valid FAT filesystem 09:11:37 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x48}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 714.414495][T22725] FAT-fs (loop3): Can't find a valid FAT filesystem [ 714.447405][T22718] bridge195: port 1(syz_tun) entered blocking state [ 714.462260][T22718] bridge195: port 1(syz_tun) entered disabled state [ 714.476709][T22718] device syz_tun entered promiscuous mode [ 714.489207][T22715] device syz_tun left promiscuous mode [ 714.494965][T22715] bridge464: port 1(syz_tun) entered disabled state [ 714.523397][T22726] FAT-fs (loop2): bogus number of reserved sectors [ 714.530900][T22726] FAT-fs (loop2): Can't find a valid FAT filesystem [ 714.541579][T22725] FAT-fs (loop3): bogus logical sector size 524 [ 714.557056][T22715] bridge465: port 1(syz_tun) entered blocking state [ 714.563778][T22715] bridge465: port 1(syz_tun) entered disabled state [ 714.570458][T22725] FAT-fs (loop3): Can't find a valid FAT filesystem 09:11:37 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a0000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x3}}, 0x0) [ 714.596246][T22715] device syz_tun entered promiscuous mode [ 714.610890][T22724] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 714.631482][T22734] FAT-fs (loop1): bogus number of reserved sectors 09:11:37 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x7a}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 714.651189][T22734] FAT-fs (loop1): Can't find a valid FAT filesystem [ 714.684415][T22729] device syz_tun left promiscuous mode [ 714.698775][T22729] bridge115: port 1(syz_tun) entered disabled state 09:11:37 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3a906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 714.756973][T22729] bridge116: port 1(syz_tun) entered blocking state [ 714.768503][T22734] FAT-fs (loop1): bogus number of reserved sectors [ 714.778497][T22734] FAT-fs (loop1): Can't find a valid FAT filesystem [ 714.796190][T22729] bridge116: port 1(syz_tun) entered disabled state [ 714.803743][T22729] device syz_tun entered promiscuous mode [ 714.815178][T22722] device syz_tun left promiscuous mode [ 714.820928][T22722] bridge465: port 1(syz_tun) entered disabled state [ 714.874926][T22743] FAT-fs (loop2): bogus number of reserved sectors [ 714.881923][T22739] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 714.883723][T22747] FAT-fs (loop3): bogus logical sector size 524 [ 714.907211][T22747] FAT-fs (loop3): Can't find a valid FAT filesystem 09:11:38 executing program 0: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027404f801", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 714.930270][T22743] FAT-fs (loop2): Can't find a valid FAT filesystem 09:11:38 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000254b00000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:11:38 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x4c}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 714.970927][T22742] device syz_tun left promiscuous mode [ 714.987818][T22742] bridge195: port 1(syz_tun) entered disabled state [ 715.040785][T22747] FAT-fs (loop3): bogus logical sector size 524 [ 715.053249][T22742] bridge196: port 1(syz_tun) entered blocking state [ 715.061998][T22747] FAT-fs (loop3): Can't find a valid FAT filesystem [ 715.073138][T22743] FAT-fs (loop2): bogus number of reserved sectors [ 715.079881][T22742] bridge196: port 1(syz_tun) entered disabled state [ 715.092445][T22743] FAT-fs (loop2): Can't find a valid FAT filesystem [ 715.100925][T22742] device syz_tun entered promiscuous mode [ 715.136037][T22755] bridge466: port 1(syz_tun) entered blocking state [ 715.149113][T22755] bridge466: port 1(syz_tun) entered disabled state 09:11:38 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3b906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) 09:11:38 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x140}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 715.187702][T22755] device syz_tun entered promiscuous mode [ 715.206569][T22757] FAT-fs (loop1): bogus number of reserved sectors 09:11:38 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x400, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e24, 0x80, @mcast2, 0x77fb77a9}}, 0x0, 0x928f}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) pselect6(0x40, &(0x7f0000000140)={0xffffffffffff8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff8001}, &(0x7f0000000180)={0x9, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x20}, 0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400), 0x8}) r1 = open(0x0, 0x800000141042, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x14, r3}, 0x14}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0xa0, r3, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="91e7e3dbfac9"}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x9}, {0x8, 0x0, 0x70}, {0x8, 0x0, 0x689}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x10, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, "86848f189dc4"}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x3}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xb803, 0x2}}, @NL80211_ATTR_SCAN_FREQUENCIES={0x34, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x29a}, {0x8, 0x0, 0x2}, {0x8, 0x0, 0x9}, {0x8, 0x0, 0x100}, {0x8, 0x0, 0x65}, {0x8, 0x0, 0xd3}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x10) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/164) 09:11:38 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000041000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 715.243190][T22757] FAT-fs (loop1): Can't find a valid FAT filesystem 09:11:38 executing program 4: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000001200, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 715.285398][T22758] device syz_tun left promiscuous mode [ 715.291326][T22758] bridge466: port 1(syz_tun) entered disabled state [ 715.389241][T22764] FAT-fs (loop3): bogus logical sector size 524 [ 715.406785][T22757] FAT-fs (loop1): bogus number of reserved sectors [ 715.413342][T22757] FAT-fs (loop1): Can't find a valid FAT filesystem [ 715.420547][T22764] FAT-fs (loop3): Can't find a valid FAT filesystem 09:11:38 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000257c00000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 715.481336][T22771] device syz_tun left promiscuous mode [ 715.492281][T22771] bridge116: port 1(syz_tun) entered disabled state [ 715.547255][T22771] bridge117: port 1(syz_tun) entered blocking state [ 715.575448][T22772] FAT-fs (loop2): bogus number of reserved sectors [ 715.583486][T22764] FAT-fs (loop3): bogus logical sector size 524 [ 715.594059][T22773] FAT-fs (loop4): bogus logical sector size 524 [ 715.603754][T22772] FAT-fs (loop2): Can't find a valid FAT filesystem [ 715.614071][T22764] FAT-fs (loop3): Can't find a valid FAT filesystem [ 715.626633][T22771] bridge117: port 1(syz_tun) entered disabled state [ 715.636092][T22773] FAT-fs (loop4): Can't find a valid FAT filesystem 09:11:38 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x68}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 715.654545][ C0] net_ratelimit: 8 callbacks suppressed [ 715.654555][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 715.665935][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 715.690827][T22771] device syz_tun entered promiscuous mode 09:11:38 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb45906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 715.729604][T22779] bridge467: port 1(syz_tun) entered blocking state [ 715.754513][T22779] bridge467: port 1(syz_tun) entered disabled state [ 715.774017][T22779] device syz_tun entered promiscuous mode 09:11:39 executing program 0: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fddbdf250200000005003000227fa8a24a000900aab9b2fb3c7d4afc8c2b01f01edbaaaaaaaaaa000008000600", @ANYRES32=0x0, @ANYBLOB="08003c000600000005002e0001000000050033000000000008000600", @ANYRES32=0x0, @ANYBLOB="0500330000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4c0c1}, 0x4804) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000280)=0x0) ptrace$getenv(0x4201, r4, 0xffffffff, &(0x7f0000000340)) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf250200000005003000227fa8a24a000900aab9b2fb3c7d4afc8c2b01f01edbaaaaaaaaaa000008000600", @ANYRES32=0x0, @ANYBLOB="08003c000600000005002e0001000000050033000000000008000600", @ANYRES32=0x0, @ANYBLOB="0500330000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4c0c1}, 0x4804) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000003c0)={0xa00000, 0xda6e, 0x493, r0, 0x0, &(0x7f0000000040)={0x9a0915, 0x80, [], @p_u32=&(0x7f0000000380)}}) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x7, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r6 = open(0x0, 0x800000141042, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000000)={0x33, 0x6, 0x0, {0x6, 0x1, 0xa, 0x0, 'lovboxnet1'}}, 0x33) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pselect6(0x40, &(0x7f0000000140), &(0x7f0000000180)={0x9, 0x5}, 0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400), 0x8}) [ 715.799190][T22780] bridge467: port 1(syz_tun) entered blocking state [ 715.805949][T22780] bridge467: port 1(syz_tun) entered forwarding state [ 715.851259][T22772] FAT-fs (loop2): bogus number of reserved sectors [ 715.866625][T22772] FAT-fs (loop2): Can't find a valid FAT filesystem [ 715.878169][T22780] bond0: (slave bridge467): Enslaving as an active interface with an up link [ 715.992501][T22787] FAT-fs (loop1): bogus number of reserved sectors [ 715.999551][T22786] FAT-fs (loop3): bogus logical sector size 524 [ 716.007691][T22780] device syz_tun left promiscuous mode [ 716.013273][T22780] bridge467: port 1(syz_tun) entered disabled state [ 716.033344][T22786] FAT-fs (loop3): Can't find a valid FAT filesystem 09:11:39 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000000f00250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:11:39 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x300}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 716.043286][T22787] FAT-fs (loop1): Can't find a valid FAT filesystem 09:11:39 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000259800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 716.189448][T22795] device syz_tun left promiscuous mode [ 716.196383][T22795] bridge196: port 1(syz_tun) entered disabled state [ 716.252908][T22786] FAT-fs (loop3): bogus logical sector size 524 [ 716.259467][T22787] FAT-fs (loop1): bogus number of reserved sectors [ 716.268321][T22795] bridge197: port 1(syz_tun) entered blocking state [ 716.274945][T22786] FAT-fs (loop3): Can't find a valid FAT filesystem [ 716.282740][T22799] FAT-fs (loop2): bogus number of reserved sectors [ 716.289518][T22795] bridge197: port 1(syz_tun) entered disabled state [ 716.290562][T22799] FAT-fs (loop2): Can't find a valid FAT filesystem 09:11:39 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000257c00000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 716.302134][T22787] FAT-fs (loop1): Can't find a valid FAT filesystem [ 716.326333][T22795] device syz_tun entered promiscuous mode 09:11:39 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb49906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 716.364175][T22799] FAT-fs (loop2): bogus number of reserved sectors [ 716.374494][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 716.380276][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 716.393631][T22806] bridge468: port 1(syz_tun) entered blocking state [ 716.397066][T22799] FAT-fs (loop2): Can't find a valid FAT filesystem 09:11:39 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x6c}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:11:39 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000257c00000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 716.437814][T22806] bridge468: port 1(syz_tun) entered disabled state [ 716.463700][T22806] device syz_tun entered promiscuous mode [ 716.471647][T22808] device syz_tun left promiscuous mode [ 716.480304][T22808] bridge117: port 1(syz_tun) entered disabled state 09:11:39 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x30a}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 716.544260][T22803] bridge468: port 1(syz_tun) entered blocking state [ 716.550966][T22803] bridge468: port 1(syz_tun) entered forwarding state [ 716.588813][T22803] bond0: (slave bridge468): Enslaving as an active interface with an up link [ 716.638389][T22816] FAT-fs (loop3): bogus logical sector size 524 [ 716.647565][T22814] FAT-fs (loop1): bogus number of reserved sectors [ 716.653640][T22816] FAT-fs (loop3): Can't find a valid FAT filesystem [ 716.656305][T22814] FAT-fs (loop1): Can't find a valid FAT filesystem [ 716.669618][T22809] bond0: (slave bridge118): Enslaving as an active interface with an up link [ 716.685165][T22821] device syz_tun left promiscuous mode [ 716.690947][T22821] bridge197: port 1(syz_tun) entered disabled state [ 716.720176][T22819] FAT-fs (loop2): bogus number of reserved sectors [ 716.729966][T22819] FAT-fs (loop2): Can't find a valid FAT filesystem [ 716.739545][T22821] bridge198: port 1(syz_tun) entered blocking state [ 716.747646][T22821] bridge198: port 1(syz_tun) entered disabled state [ 716.755831][T22816] FAT-fs (loop3): bogus logical sector size 524 [ 716.756136][T22821] device syz_tun entered promiscuous mode [ 716.769743][T22816] FAT-fs (loop3): Can't find a valid FAT filesystem [ 716.776705][T22806] device syz_tun left promiscuous mode [ 716.782622][T22806] bridge468: port 1(syz_tun) entered disabled state 09:11:39 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000811000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 716.802445][T22814] FAT-fs (loop1): bogus number of reserved sectors [ 716.816124][T22814] FAT-fs (loop1): Can't find a valid FAT filesystem [ 716.835738][T22819] FAT-fs (loop2): bogus number of reserved sectors [ 716.847649][T22813] bridge198: port 1(syz_tun) entered blocking state [ 716.854362][T22813] bridge198: port 1(syz_tun) entered forwarding state [ 716.862980][T22819] FAT-fs (loop2): Can't find a valid FAT filesystem [ 716.876915][T22813] bond0: (slave bridge198): Enslaving as an active interface with an up link 09:11:40 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800007a1000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:11:40 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c900a6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) 09:11:40 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x74}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 717.010740][T22829] bridge119: port 1(syz_tun) entered blocking state [ 717.027595][T22829] bridge119: port 1(syz_tun) entered disabled state [ 717.046417][T22829] device syz_tun entered promiscuous mode 09:11:40 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x40a}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:11:40 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000256401000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 717.069248][T22831] FAT-fs (loop3): bogus logical sector size 524 [ 717.093661][T22831] FAT-fs (loop3): Can't find a valid FAT filesystem [ 717.147731][T22834] device syz_tun left promiscuous mode [ 717.153487][T22834] bridge198: port 1(syz_tun) entered disabled state 09:11:40 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000259800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 717.210565][T22834] bridge199: port 1(syz_tun) entered blocking state [ 717.223935][T22834] bridge199: port 1(syz_tun) entered disabled state [ 717.263653][T22834] device syz_tun entered promiscuous mode [ 717.273092][T22831] FAT-fs (loop3): bogus logical sector size 524 [ 717.310613][T22831] FAT-fs (loop3): Can't find a valid FAT filesystem [ 717.313166][T22843] bridge469: port 1(syz_tun) entered blocking state [ 717.329502][T22842] FAT-fs (loop2): bogus number of reserved sectors [ 717.332065][T22840] FAT-fs (loop1): bogus number of reserved sectors [ 717.336167][T22843] bridge469: port 1(syz_tun) entered disabled state [ 717.349413][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 717.349462][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 717.362299][T22842] FAT-fs (loop2): Can't find a valid FAT filesystem [ 717.365644][T22843] device syz_tun entered promiscuous mode [ 717.378415][T22840] FAT-fs (loop1): Can't find a valid FAT filesystem [ 717.400751][T22843] bridge469: port 1(syz_tun) entered blocking state [ 717.407538][T22843] bridge469: port 1(syz_tun) entered forwarding state 09:11:40 executing program 4: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000860, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) 09:11:40 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c90256b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 717.434137][T22843] bond0: (slave bridge469): Enslaving as an active interface with an up link [ 717.447880][T22847] device syz_tun left promiscuous mode [ 717.453614][T22847] bridge119: port 1(syz_tun) entered disabled state [ 717.509022][T22847] bridge120: port 1(syz_tun) entered blocking state [ 717.521432][T22847] bridge120: port 1(syz_tun) entered disabled state [ 717.536881][T22847] device syz_tun entered promiscuous mode [ 717.548835][T22848] bridge120: port 1(syz_tun) entered blocking state [ 717.555514][T22848] bridge120: port 1(syz_tun) entered forwarding state [ 717.556131][T22840] FAT-fs (loop1): bogus number of reserved sectors [ 717.574485][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 717.580283][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 717.586144][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 717.591887][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:11:40 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x428}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 717.604829][T22840] FAT-fs (loop1): Can't find a valid FAT filesystem [ 717.631122][T22848] bond0: (slave bridge120): Enslaving as an active interface with an up link [ 717.646482][T22854] FAT-fs (loop4): bogus logical sector size 524 09:11:40 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x78}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 717.687939][T22857] FAT-fs (loop3): bogus logical sector size 524 [ 717.698567][T22846] device syz_tun left promiscuous mode [ 717.704228][T22846] bridge469: port 1(syz_tun) entered disabled state [ 717.711353][T22854] FAT-fs (loop4): Can't find a valid FAT filesystem [ 717.747623][T22857] FAT-fs (loop3): Can't find a valid FAT filesystem 09:11:41 executing program 0: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x40a}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 717.897990][T22862] FAT-fs (loop1): bogus number of reserved sectors [ 717.906211][T22857] FAT-fs (loop3): bogus logical sector size 524 [ 717.912624][T22857] FAT-fs (loop3): Can't find a valid FAT filesystem [ 717.912683][T22860] FAT-fs (loop2): bogus number of reserved sectors 09:11:41 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000257001000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:11:41 executing program 4: r0 = open(0x0, 0x800000141042, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, 0x0) r1 = open(0x0, 0x800000141042, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x42000) r3 = fcntl$dupfd(r1, 0x406, r2) openat$cgroup_ro(r3, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) pselect6(0x8f, &(0x7f0000000140), &(0x7f0000000180)={0x9}, 0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400), 0x8}) [ 717.947823][T22860] FAT-fs (loop2): Can't find a valid FAT filesystem [ 717.964503][T22862] FAT-fs (loop1): Can't find a valid FAT filesystem 09:11:41 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c905c6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 718.074585][T22867] FAT-fs (loop0): bogus number of reserved sectors [ 718.081158][T22867] FAT-fs (loop0): Can't find a valid FAT filesystem [ 718.095201][T22862] FAT-fs (loop1): bogus number of reserved sectors [ 718.101757][T22862] FAT-fs (loop1): Can't find a valid FAT filesystem 09:11:41 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000741000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 718.120153][T22860] FAT-fs (loop2): bogus number of reserved sectors [ 718.139320][T22877] __nla_validate_parse: 13 callbacks suppressed [ 718.139334][T22877] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 718.167581][T22860] FAT-fs (loop2): Can't find a valid FAT filesystem [ 718.193803][T22878] bridge470: port 1(syz_tun) entered blocking state [ 718.212442][T22875] FAT-fs (loop3): bogus logical sector size 524 [ 718.224337][T22875] FAT-fs (loop3): Can't find a valid FAT filesystem 09:11:41 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x7a}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 718.246351][T22878] bridge470: port 1(syz_tun) entered disabled state [ 718.265340][T22878] device syz_tun entered promiscuous mode 09:11:41 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x44f}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 718.295878][T22877] bridge470: port 1(syz_tun) entered blocking state [ 718.302514][T22877] bridge470: port 1(syz_tun) entered forwarding state [ 718.328016][T22877] bond0: (slave bridge470): Enslaving as an active interface with an up link [ 718.337220][T22880] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 718.369976][T22881] device syz_tun left promiscuous mode [ 718.387673][T22881] bridge199: port 1(syz_tun) entered disabled state 09:11:41 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800006c1000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 718.420361][T22875] FAT-fs (loop3): bogus logical sector size 524 [ 718.425299][T22887] FAT-fs (loop1): bogus number of reserved sectors [ 718.433403][T22887] FAT-fs (loop1): Can't find a valid FAT filesystem [ 718.447326][T22881] bridge200: port 1(syz_tun) entered blocking state [ 718.454221][T22881] bridge200: port 1(syz_tun) entered disabled state [ 718.462893][T22881] device syz_tun entered promiscuous mode [ 718.471640][T22878] device syz_tun left promiscuous mode [ 718.481138][T22875] FAT-fs (loop3): Can't find a valid FAT filesystem [ 718.488141][T22878] bridge470: port 1(syz_tun) entered disabled state 09:11:41 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800006c1000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 718.587227][T22890] FAT-fs (loop2): bogus number of reserved sectors [ 718.595691][T22887] FAT-fs (loop1): bogus number of reserved sectors [ 718.602346][T22887] FAT-fs (loop1): Can't find a valid FAT filesystem [ 718.617821][T22890] FAT-fs (loop2): Can't find a valid FAT filesystem 09:11:41 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d5c66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 718.661986][T22894] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 09:11:41 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000259c01000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 718.706177][T22894] device syz_tun left promiscuous mode [ 718.712106][T22894] bridge120: port 1(syz_tun) entered disabled state 09:11:41 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x140}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 718.775337][T22890] FAT-fs (loop2): bogus number of reserved sectors [ 718.784197][T22890] FAT-fs (loop2): Can't find a valid FAT filesystem [ 718.817162][T22894] bridge121: port 1(syz_tun) entered blocking state [ 718.830417][T22894] bridge121: port 1(syz_tun) entered disabled state 09:11:42 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x450}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 718.858235][T22894] device syz_tun entered promiscuous mode [ 718.872081][T22898] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 718.905368][T22901] FAT-fs (loop3): bogus logical sector size 524 [ 718.947378][T22901] FAT-fs (loop3): Can't find a valid FAT filesystem [ 718.956845][T22902] device syz_tun left promiscuous mode [ 718.968708][T22902] bridge200: port 1(syz_tun) entered disabled state 09:11:42 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000257001000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 718.991560][T22910] FAT-fs (loop1): bogus number of reserved sectors [ 719.003812][T22910] FAT-fs (loop1): Can't find a valid FAT filesystem [ 719.054600][T22912] FAT-fs (loop2): bogus number of reserved sectors [ 719.065171][T22902] bridge201: port 1(syz_tun) entered blocking state [ 719.074584][T22902] bridge201: port 1(syz_tun) entered disabled state [ 719.081310][T22912] FAT-fs (loop2): Can't find a valid FAT filesystem [ 719.093321][T22902] device syz_tun entered promiscuous mode [ 719.102061][T22904] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 719.142549][T22905] bridge471: port 1(syz_tun) entered blocking state 09:11:42 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pselect6(0x8f, &(0x7f0000000140), &(0x7f0000000180)={0x9}, 0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400), 0x8}) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf250200000005003000227fa8a24a000900aab9b2fb3c7d4afc8c2b01f01edbaaaaaaaaaa000008000600", @ANYRES32=0x0, @ANYBLOB="08003c000600000005002e0001000000050033000000000008000600", @ANYRES32=0x0, @ANYBLOB="0500330000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4c0c1}, 0x4804) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8) [ 719.154574][T22905] bridge471: port 1(syz_tun) entered disabled state [ 719.173266][T22905] device syz_tun entered promiscuous mode [ 719.191375][T22908] bridge471: port 1(syz_tun) entered blocking state [ 719.198050][T22908] bridge471: port 1(syz_tun) entered forwarding state 09:11:42 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b0a732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 719.209917][T22910] FAT-fs (loop1): bogus number of reserved sectors [ 719.216988][T22910] FAT-fs (loop1): Can't find a valid FAT filesystem [ 719.239511][T22912] FAT-fs (loop2): bogus number of reserved sectors [ 719.256876][T22912] FAT-fs (loop2): Can't find a valid FAT filesystem [ 719.268649][T22908] bond0: (slave bridge471): Enslaving as an active interface with an up link [ 719.277627][T22915] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 719.298927][T22916] device syz_tun left promiscuous mode 09:11:42 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x300}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 719.309215][T22922] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 719.318943][T22916] bridge121: port 1(syz_tun) entered disabled state 09:11:42 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x451}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 719.376963][T22916] bridge122: port 1(syz_tun) entered blocking state [ 719.388354][T22916] bridge122: port 1(syz_tun) entered disabled state [ 719.408304][T22916] device syz_tun entered promiscuous mode [ 719.434395][T22917] bridge122: port 1(syz_tun) entered blocking state [ 719.441089][T22917] bridge122: port 1(syz_tun) entered forwarding state [ 719.470118][T22917] bond0: (slave bridge122): Enslaving as an active interface with an up link [ 719.491788][T22905] device syz_tun left promiscuous mode [ 719.491843][T22926] FAT-fs (loop3): bogus logical sector size 524 [ 719.508115][T22905] bridge471: port 1(syz_tun) entered disabled state [ 719.524028][T22926] FAT-fs (loop3): Can't find a valid FAT filesystem 09:11:42 executing program 4: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000823, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) 09:11:42 executing program 0: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200057400f801", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 719.608132][T22930] FAT-fs (loop2): bogus number of reserved sectors [ 719.616093][T22932] FAT-fs (loop1): bogus number of reserved sectors [ 719.622712][T22932] FAT-fs (loop1): Can't find a valid FAT filesystem [ 719.634654][T22926] FAT-fs (loop3): bogus logical sector size 524 [ 719.642153][T22926] FAT-fs (loop3): Can't find a valid FAT filesystem 09:11:42 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025a401000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 719.660430][T22930] FAT-fs (loop2): Can't find a valid FAT filesystem 09:11:42 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b25732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 719.845593][T22942] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 719.878077][T22936] FAT-fs (loop4): bogus logical sector size 524 [ 719.888235][T22936] FAT-fs (loop4): Can't find a valid FAT filesystem [ 719.890185][T22942] bridge472: port 1(syz_tun) entered blocking state [ 719.902909][T22942] bridge472: port 1(syz_tun) entered disabled state [ 719.910041][T22930] FAT-fs (loop2): bogus number of reserved sectors [ 719.910869][T22942] device syz_tun entered promiscuous mode [ 719.916758][T22932] FAT-fs (loop1): bogus number of reserved sectors [ 719.929965][T22942] bridge472: port 1(syz_tun) entered blocking state [ 719.936682][T22942] bridge472: port 1(syz_tun) entered forwarding state [ 719.947405][T22942] bond0: (slave bridge472): Enslaving as an active interface with an up link [ 719.955382][T22930] FAT-fs (loop2): Can't find a valid FAT filesystem [ 719.977516][T22932] FAT-fs (loop1): Can't find a valid FAT filesystem [ 719.985926][T22945] FAT-fs (loop3): bogus logical sector size 524 [ 719.992218][T22945] FAT-fs (loop3): Can't find a valid FAT filesystem [ 720.007574][T22948] bridge472: port 1(syz_tun) entered disabled state 09:11:43 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025ac01000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:11:43 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x452}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:11:43 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000601000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:11:43 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x30a}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 720.165332][T22945] FAT-fs (loop3): bogus logical sector size 524 [ 720.171619][T22945] FAT-fs (loop3): Can't find a valid FAT filesystem [ 720.188703][T22951] FAT-fs (loop2): bogus number of reserved sectors [ 720.196501][T22951] FAT-fs (loop2): Can't find a valid FAT filesystem 09:11:43 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800004c1000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 720.280021][T22954] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 720.305506][T22954] device syz_tun left promiscuous mode [ 720.311234][T22954] bridge472: port 1(syz_tun) entered disabled state [ 720.371404][T22954] bridge473: port 1(syz_tun) entered blocking state [ 720.407667][T22954] bridge473: port 1(syz_tun) entered disabled state 09:11:43 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x453}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:11:43 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b2e732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 720.433933][T22954] device syz_tun entered promiscuous mode [ 720.457194][T22960] FAT-fs (loop1): bogus number of reserved sectors [ 720.464499][T22960] FAT-fs (loop1): Can't find a valid FAT filesystem [ 720.482549][T22956] bridge473: port 1(syz_tun) entered blocking state [ 720.489455][T22956] bridge473: port 1(syz_tun) entered forwarding state [ 720.509472][T22956] bond0: (slave bridge473): Enslaving as an active interface with an up link [ 720.521993][T22963] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 720.548140][T22964] device syz_tun left promiscuous mode [ 720.561562][T22964] bridge201: port 1(syz_tun) entered disabled state [ 720.582801][T22960] FAT-fs (loop1): bogus number of reserved sectors [ 720.591310][T22960] FAT-fs (loop1): Can't find a valid FAT filesystem 09:11:43 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x40a}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 720.636600][T22964] bridge202: port 1(syz_tun) entered blocking state [ 720.643245][T22964] bridge202: port 1(syz_tun) entered disabled state [ 720.660957][T22969] FAT-fs (loop2): bogus number of reserved sectors [ 720.676764][T22974] FAT-fs (loop3): bogus logical sector size 524 [ 720.685898][T22969] FAT-fs (loop2): Can't find a valid FAT filesystem [ 720.694851][T22974] FAT-fs (loop3): Can't find a valid FAT filesystem [ 720.715454][T22964] device syz_tun entered promiscuous mode [ 720.724004][T22965] device syz_tun left promiscuous mode 09:11:43 executing program 4: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a02000f7400f801", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 720.747817][T22965] bridge122: port 1(syz_tun) entered disabled state [ 720.810048][T22965] bridge123: port 1(syz_tun) entered blocking state [ 720.822799][T22969] FAT-fs (loop2): bogus number of reserved sectors [ 720.834538][T22969] FAT-fs (loop2): Can't find a valid FAT filesystem [ 720.847145][T22974] FAT-fs (loop3): bogus logical sector size 524 [ 720.847546][T22977] FAT-fs (loop1): bogus number of reserved sectors [ 720.855560][T22974] FAT-fs (loop3): Can't find a valid FAT filesystem [ 720.862493][T22965] bridge123: port 1(syz_tun) entered disabled state [ 720.880964][T22965] device syz_tun entered promiscuous mode [ 720.889246][T22977] FAT-fs (loop1): Can't find a valid FAT filesystem 09:11:44 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025b401000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:11:44 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x454}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:11:44 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b2f732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 721.004676][T22977] FAT-fs (loop1): bogus number of reserved sectors [ 721.011301][T22977] FAT-fs (loop1): Can't find a valid FAT filesystem 09:11:44 executing program 0: r0 = open(0x0, 0x800000141042, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, 0x0) r1 = open(0x0, 0x800000141042, 0x0) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000001b80)=ANY=[@ANYBLOB="581cfcfa000000", @ANYRES16=r3, @ANYBLOB="01002bbd7000fddbdf250200000005003000227fa8a24a000900aab9b2fb3c7d4afc8c2b01f01edbaaaaaaaaaa000008000600", @ANYRES32=0x0, @ANYBLOB="08003c000600000005002e0001000000050033000000000008000600", @ANYRES32=0x0, @ANYBLOB="0500330000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4c0c1}, 0x4804) recvmmsg(r2, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)=""/214, 0xd6}, {&(0x7f0000000440)=""/83, 0x53}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x3, &(0x7f0000000280)=""/58, 0x3a}, 0xfa7a}, {{&(0x7f00000014c0)=@nfc, 0x80, &(0x7f0000001740)=[{&(0x7f0000001b40)=""/38, 0x26}, {&(0x7f0000001580)=""/190, 0xbe}, {&(0x7f0000001640)=""/236, 0xffffffffffffff54}], 0x3, &(0x7f0000001780)=""/104, 0x68}, 0x5abb}, {{&(0x7f0000001800)=@caif=@dgm, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001880)=""/47, 0x2f}, {&(0x7f00000018c0)=""/247, 0xf7}], 0x2, &(0x7f0000001a00)=""/66, 0x42}, 0x2}], 0x3, 0x2, &(0x7f00000001c0)={0x77359400}) r4 = socket(0x11, 0x2, 0x0) write(r4, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fddbdf250200000005003000227fa8a24a000900aab9b2fb3c7d4afc8c2b01f01edbaaaaaaaaaa000008000600", @ANYRES32=0x0, @ANYBLOB="08003c000600000005002e0001000000050033000000000008000600", @ANYRES32=0x0, @ANYBLOB="0500330000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4c0c1}, 0x4804) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000001c40)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000fddbdf250200000005003000227fa8a24a000900aab9b2fb3c7d4afc8c2b01f01edbaaaaaaaaaa000008000600", @ANYRES32=0x0, @ANYBLOB="08003c00000000004008000600", @ANYRES32=0x0, @ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x4c0c1}, 0x4804) recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) socket$key(0xf, 0x3, 0x2) r8 = socket(0x10, 0x2, 0x0) write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r8, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002bbd7000fddbdf250200000005003000227fa8a24a000900aab9b2fb3c7d4afc8c2b01f01edbaaaaaaaaaa000008000600", @ANYRES32=0x0, @ANYBLOB="08003c000600000005002e0001000000050033000000000008000600", @ANYRES32=0x0, @ANYBLOB="0500330000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4c0c1}, 0x4804) recvmmsg(r8, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r10 = accept$inet(r8, &(0x7f0000002e00)={0x2, 0x0, @empty}, &(0x7f0000002e40)=0x10) recvmmsg(r10, &(0x7f0000002ec0), 0x0, 0x40000042, &(0x7f0000002e80)={0x0, 0x989680}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000001c00)) prctl$PR_GET_CHILD_SUBREAPER(0x25) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x44001, 0x0) r11 = socket(0x10, 0x2, 0x0) write(r11, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r11, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002bbd7000fddbdf250200000005003000227fa8a24a000900aab9b2fb3c7d4afc8c2b01f01edbaaaaaaaaaa000008000600", @ANYRES32=0x0, @ANYBLOB="08003c000600000005002e0001000000050033000000000008000600", @ANYRES32=0x0, @ANYBLOB="0500330000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4c0c1}, 0x4804) recvmmsg(r11, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) getsockopt$inet_sctp_SCTP_CONTEXT(r11, 0x84, 0x11, 0x0, 0x0) r13 = dup3(r0, r1, 0x0) r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r13, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r14, 0x200, 0x70bd26, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004014) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000001540)) 09:11:44 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x426}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 721.094801][T22988] device syz_tun left promiscuous mode [ 721.100710][T22988] bridge473: port 1(syz_tun) entered disabled state [ 721.103849][T22987] FAT-fs (loop2): bogus number of reserved sectors [ 721.119696][T22987] FAT-fs (loop2): Can't find a valid FAT filesystem [ 721.163217][T22988] bridge474: port 1(syz_tun) entered blocking state [ 721.186224][T22987] FAT-fs (loop2): bogus number of reserved sectors [ 721.204481][T22994] FAT-fs (loop3): bogus logical sector size 524 09:11:44 executing program 4: r0 = open(0x0, 0x800000141042, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000000)) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fddbdf250200000005003000227fa8a24a000900aab9b2fb3c7d4afc8c2b01f01edbaaaaaaaaaa000008000600", @ANYRES32=0x0, @ANYBLOB="08003c000600000005002e0001000000050033000000000008000600", @ANYRES32=0x0, @ANYBLOB="0500330000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4c0c1}, 0x4804) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nfc_llcp(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x27, 0x1, 0x0, 0x4, 0x20, 0xa3, "595d0066857ac21c55ffef311a6fa2d77917b8a79af8e59c871ac54b91a5aa0706ff724af2569ca3e3e8f4b15e77a9ac1178918c03aa74e9d1b39af61f25f8", 0x5}, 0x60, &(0x7f00000008c0)=[{&(0x7f0000000240)="0d8d9e300692fa698a8b1cec1df88334d388c2c493a9dd09668137180f6a66c393e7780574413dc0887971fd93989944fbb2240134be6b244b5e534056d0ce8dd530a213b3782cdc5d3a584c9c5f82e8c41e4c46ffc9925586fc51", 0x5b}, {&(0x7f00000002c0)="e59128678a3302843b43993aeeb3482d", 0x10}, {&(0x7f0000000300)="fa9f22b4cc4be68551141f7e8ec3b5e0547fdf5092f9c6b8bee333a1ee262642b64ec501a98c72952fc10e9b1c0f82a4ec2cef33a45c47db73f0800412befaf9d3d8642b98207a7af69289fb3b87d7e0c235c31312844b64662d82021b1f82f34c1e3afba7d9861902cc477d5510e44a8340e7bd20994f10240d8cba68cc0f798de161b9db0b69ae68801ce313258680fc40141fcc4f4a5403300271a365ab6beaa962660d5c206b380c229c6a0e9a1d91b1", 0xb2}, {&(0x7f0000000480)="1a9dbcfac2f618a964b66ea6412993631467d205ecd678389d5e2b92767036d7e6abaf3aefdc73727aa4306cd9c1b0906e7952eaffc83fc113327c09da21ac5cee313d0e5a4302e107f6677871cac57786b0f3394321ac51fc4424c2ccd03028c508ddcef9f6b0108c73badb1f0a0520a76912cde4f60b2477237684bcc5f35fcd8fbb261008bc622830e239f67eb7893708e4b525a978dac7cb83f7a2224c47e2950655f788a4834c", 0xa9}, {&(0x7f0000000540)="45a907a8cedf62adf8bddbc926017da44e5bfe47313c2769ab2c6ccb83bc31407526b795c2be474d2d242f2989f47a0f960ba5835e15f4f0ab30fb25d7981528f99882792a4fb1d97ef31ec7a355dd865a4b3ae02414c80531f1be2385d4e6af365beaf9", 0x64}, {&(0x7f00000005c0)="af515e9afc925867cc1eebd6a4dba6f3d5b061c049eb37554bb76ff7cf9a98ae7253a6f773cd8831ce9ce054aafaf9056ed61cc1c3f5e7bb3ece6eca896555b3752769ad69a59bdddf7ee60b03370e296436d7b94696f8f749c4008f9b4c1166310f4fc77f9d62a35defd38331fc05a46a1a80568e0d3b41c3cabc8f85b5538c0cfdb819a2f451976d6cf803f2cdd043d3686ed72fd279c6231956ef982e68e61a74751767382dabfb43963c006f869d46e199ac02ef68b7cc6950058abac66be87846497b4d28a85d30a8ca13dc9e3238cd3236ed2383c75274c2a3c6fdd90b877aa66c82fdb7", 0xe7}, {&(0x7f00000006c0)="0caa07c48eb5de5c800f3e4997a1fbc055f313663e17944daf47ce08cf582696f37b8448b9b0f53c0bc7660c0be6492ed7c6e10e8a0e74f29374e5d06b33955fd73b4719ef9bdf75c54a5d1e3872db3102edb0cb653212907387cf5d13786c21c017e4262250756b4013122013411e0912491f6a0914153bae0f57a4c18b6db9fbd87546fc4b560d83c24223cecf7d1e9f64f1ab4eefa33359416ac089441ce477187eb7f262e650ff9a20985bca0937326f8aa3c10986f415c0d473f63c92f44a7eb4a00c37e0112585a4daf309cb0548b6e46a8154823cedbe232566ed73925cb0d21a75ed7cf135a971", 0xeb}, {&(0x7f00000007c0)="9edce731011cc15358e1460dfdb8a77a6974c10a865c032e020f1e2ab8da781ca1f5f3b578e7263cae9b3849353fc73bef57bf9d244f8da8c3c1b97acb8b3910cd4c4d883e439006de196b35515b861b7c54d45a25f6037ab9a4eeb84b7ee6942d2e", 0x62}, {&(0x7f0000000840)="97cac91ad2938ceeb2fbbecc276be312c4936b63044f970ca343c2aec70cbac0710ed2a1d4063ca56b87df5f09dfb725c65edfc476fcf8fa8ef90d42dcb1ca730ef46f9ffc05f690ca559c6b5d724a5eebb1bdc6bff41c37517bc8138aaf007dd46a688950fe", 0x66}], 0x9, &(0x7f0000000980)={0xc0, 0x109, 0xb073, "5b56cc6a3f009384e5cbc5073d4730d8a423067e50f99f887ab2e90eec6e02927bcb5e6729b82f21e26526a682ea350ad79dc3439ecf97dfdaffd15f94bbc6b975df777fca94c0635939ee431ea378268562e686745f3731f424ff846c1e47473a399ef693a43f5c4958ebbb75210a0a35c8f333974075166165dc75c9d311505958d422d88f3ff89b57fe028af4601170b603d931803ad9e915f54da8259ae1d2d68553f77f221a7f4951dc28b8"}, 0xc0, 0x80}, 0x80) r3 = gettid() r4 = open(0x0, 0x800000141042, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, 0x0, 0x0) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000fddbdf250200000005003000227fa8a24a000900aab9b2fb3c7d4afc8c2b01f01edbaaaaaaaaaa000008000600", @ANYRES32=0x0, @ANYBLOB="08003c000600000005002e0001000000050033000000000008000600", @ANYRES32=0x0, @ANYBLOB="0500330000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4c0c1}, 0x4804) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c80)='memory.events\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000c40)}, &(0x7f0000000ac0)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000b00)={0x84, 0x8000, 0xffffffff, 0x4773, r8}, &(0x7f0000000b40)=0x10) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) lsetxattr$trusted_overlay_redirect(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)='trusted.overlay.redirect\x00', &(0x7f0000000c00)='./file0\x00', 0x8, 0x2) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pselect6(0x8f, &(0x7f0000000140), &(0x7f0000000180)={0x9}, 0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400), 0x8}) bind$x25(r0, &(0x7f0000000040)={0x9, @null=' \x00'}, 0x12) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x40, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x40}}, 0x0) r11 = getuid() fsetxattr$security_capability(r10, 0x0, &(0x7f00000000c0)=@v3={0x3000000, [{0x800, 0x81}, {0x0, 0x5}], r11}, 0x18, 0x3) getgroups(0x4, &(0x7f0000000c40)=[0xffffffffffffffff, 0xee00, 0x0, 0x0]) r13 = open(0x0, 0x800000141042, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r13, 0x84, 0x11, 0x0, 0x0) r14 = open(0x0, 0x800000141042, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r14, 0x84, 0x11, 0x0, 0x0) r15 = getpid() perf_event_open(0x0, r15, 0x0, 0xffffffffffffffff, 0x0) r16 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r16, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003c80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x58}}, 0x0) r17 = getuid() fsetxattr$security_capability(r16, 0x0, &(0x7f00000000c0)=@v3={0x3000000, [{0x800, 0x81}, {0x0, 0x5}], r17}, 0x18, 0x3) getresgid(&(0x7f0000000dc0)=0x0, &(0x7f0000000e00), &(0x7f0000000e40)) r19 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r19, 0x4, 0x42000) r20 = socket$inet6_udp(0xa, 0x2, 0x0) r21 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r21, 0x4, 0x42000) r22 = getpid() perf_event_open(0x0, r22, 0x0, 0xffffffffffffffff, 0x0) r23 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r23, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x40, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x40}}, 0x0) r24 = getuid() fsetxattr$security_capability(r23, 0x0, &(0x7f00000000c0)=@v3={0x3000000, [{0x800, 0x81}, {0x0, 0x5}], r24}, 0x18, 0x3) fstat(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r25) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) fstat(r26, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r27) chown(&(0x7f0000000380)='./control\x00', 0x0, r27) r28 = open(0x0, 0x800000141042, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r28, 0x84, 0x11, 0x0, 0x0) r29 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r29, 0x4, 0x42000) r30 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000003a00)='/dev/btrfs-control\x00', 0x42000, 0x0) r31 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r31, 0x4, 0x42000) r32 = open(0x0, 0x800000141042, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r32, 0x84, 0x11, 0x0, 0x0) r33 = accept4$tipc(r32, 0x0, &(0x7f0000003a40), 0x80000) r34 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r34, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x40, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x40}}, 0x0) r35 = getuid() fsetxattr$security_capability(r34, 0x0, &(0x7f00000000c0)=@v3={0x3000000, [{0x800, 0x81}, {0x0, 0x5}], r35}, 0x18, 0x3) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003a80)={0x0, 0x0, 0x0}, &(0x7f0000003ac0)=0xc) sendmmsg$unix(r1, &(0x7f0000003b80)=[{&(0x7f0000000cc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000d40)="0d74664eb29f38d55e9d438eb7b9957abad2594fdebb345f67ae6e5a83243287d1a8a8e2f547e93d42d223d114d5103683ed2af9fa2a154e56e94c4136a92e99bbe266826c0cf3cee90091ac37525d6e", 0x50}], 0x1, &(0x7f0000000e80)=[@cred={{0x1c, 0x1, 0x2, {0x0, r11, r12}}}, @rights={{0x24, 0x1, 0x1, [r5, r13, r1, r9, r14]}}, @cred={{0x1c, 0x1, 0x2, {r15, r17, r18}}}], 0x68, 0x40000}, {&(0x7f0000000f00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001080)=[{&(0x7f0000000f80)="f87134bc33abaf2c8269cc11a7e43673c0d1d43a3d5b776c0bfbc7e5ed9728ccf99a0f27e1fe75dd6f951cd76ea227f16b7582995b9ae881f0c297968872cf15405ce61efc926d5911f5a06651929e133ee8a82f374fb97219026e6cbe1acda7113b4f82f2b57f1a67fd01c5bc3c3fed0367b6dcb600dcb9d5a19fffae79632441ef712057d11758cad1d3bca57cd073237053358dc3c7e702cc2000e91eb3c9023ae1ff18c6d4679527030569f9bf4e519150eb634b3a5694152490545752e502eb914c98d5c727b6154707f890246c79df0928e1e4c1778954f7e61a44ce67ae00a72c3cfee78ea13643a9", 0xec}], 0x1, &(0x7f00000010c0)=[@rights={{0x24, 0x1, 0x1, [r19, r20, r21, r4, r9]}}], 0x28, 0x400c01d}, {&(0x7f0000001100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002600)=[{&(0x7f0000001180)="d4a38e7cf53a40ba9f6aa309cd9ebabef7a123c8b40ebe1d1a44ecf9e541270b782848a0e498bde5e1818fa610f30152f0794c1b956d", 0x36}, {&(0x7f00000011c0)="c823034e664166898660af5072cb6fae94e2d2b1973c110820a8eee0101f94a673a48427e680a3f9003db475ac3f9680934d49a274a129dd71d63e9a9b750123ea9567f1c372aef805ebc60938314378e46d6c", 0x53}, {&(0x7f0000001240)="b41f7b653af98e19c2ced5b8e86a234efea79c4b4ccf9fcf84c62febcd41e63edb434d478cb46ef51bd7f457580ccb19", 0x30}, {&(0x7f0000001280)="3815bcf7178630496365bc9c5bebb335a727206da75dcffef4950031dc7998573869750d22d2fa696fe858d564ff3229e6ed3dea82d32701c338682ebef082af3d5dfe55ca62d0ae49f31881532794a44fb5cc7eb0ce7d636b5adbe32d3e1e1aa2ea135439c0c603b4e41eda0e9f82f875cf6d0704cde2cf974f0f456414dc8df99a5cdde48bdf07a1cc493e38f029e597638820d2344517c9d3b095bcf6ea704dfcb12a2c253797a200a4af582780899dbfe6f142df96627805fca0774869b5b3ef6e7951ca77332bc8c28a74d4c60c5b", 0xd1}, {&(0x7f0000001380)="9e9a935edf8627cf0b452f7421f1427c3d4f0b41682fe44af255c634aefdecd819ad02c9a7f57a3a0fc9c76040708b57819481d68c7dcc7385bc0dd5735351c34098c39cd7ed871587b4e42d63fb39e6bc7f97b7b393e9fc1e648c1712b4e1ec950466b059f92e30364547ef45ac39d455aae755754d09930de4a1eeecedf09b951131c134cf22c6e6977795a6543930504c4cdbbe0ac9db234915974f6e15cc939c64d35e9a2c2d9a29e8d6154f3390d3a059c63ae8c811ea26c420ff023c7cd50c48d7b17abb5e740c93b7618d9ec8da719fe92097716b54b3980d39020b7047476a23918741ccbbd04fc82a8257", 0xef}, {&(0x7f0000001480)="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", 0x1000}, {&(0x7f0000002480)="45e544709ec99418d079a4f56b0cda3f748f2397797fa391dd7b87da823158057bc5831c84cb6223e9097c257f6967e64149a9305d78492bc294a1b41c750281cb8fad1db0fdf953b847931def05f517d76778538d790bb201649687b202ec4435762e040b62fe3656d3da7fec4236c0179d041ef6b77a108870aefb1c8bbcb378b4d46e95ee547e49d8a74526d5e3b30b05ecb301ea44be2849de2932a7aa16765d6bef973393e3c2d88f325c19f0f23c1cb03f5b82100a2e1d25518b3a324cda5f50aa83ccc8b2f18ec90e26281167629c72076b8c55b5bf810d6142215d4263d1b89cc8b394c95e458d0dbaf4a2e31669403183b27b5cf620", 0xfa}, {&(0x7f0000002580)="84ee0986dbe2a82ca214a808d50fecbcd64cc49a1b4d2df70678150a78bfdd359d", 0x21}, {&(0x7f00000025c0)="150b215a05a6e5da6c", 0x9}], 0x9, &(0x7f00000026c0)=[@cred={{0x1c, 0x1, 0x2, {r22, r24, r25}}}], 0x20, 0x2040044}, {&(0x7f0000002700)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000039c0)=[{&(0x7f0000002780)="a164144a965273f03e637f4265f74101fbfc3c1e35846c55ebcc9b9d74ecf6c55b38370bdc853e1f3c13ab4adb6a0496d2221bc3bb4df0c73467e76d9eaad9803c55ac4e7ab93cbf7c9ae89aa25a641bdd14b5b4d81d0c4719729ed1fb81385d1016e596ee5cfa84542c97a98dcb87c668e7f16891ef6abe5f1c790bc3ff500d003ef7268fada2d303eb359b8e2340ca4feb96d2571a5483ec9ab4d22d83f7c8", 0xa0}, {&(0x7f0000002840)="045091de3ae83c6c67e8239ebb4973b38354a2373968d187e4016f83f57255b44243e54690d039de169858b90ed52c235bac233b063c45df5488eed6a81b5c688a5a8b90e42a39674fd3d428bb343833b800050d16820de53db613fd26812948af64e6b72bc7d309b3bbc29963051b4b83f2861002da4b0f8e5b29fad71ca41a45ae75a17655d8f117c4079d5efccae2a063defe2c4789702f114e87635b875c006114fda1993d46f6ee4cc627260534dfb0930153acbc891872bf20d4bcc5dee1c7ed65b3acbcf7885122857a7f51", 0xcf}, {&(0x7f0000002940)="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", 0x1000}, {&(0x7f0000003940)="58d7566d068e84d0e3e208744ecd9ea6d47dc1c8be318324d9034d20fcf4cb265f55af43cd6003a6ddc8a3649aa185690a07d5acd0f22b7b5d438c7d30113e4829459b8802cb4f95034785fc3a9e5b5a2fdc1a51", 0x54}], 0x4, &(0x7f0000003b00)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xffffffffffffffff, r27}}}, @rights={{0x2c, 0x1, 0x1, [r5, r28, r5, r29, r30, r31, r33]}}, @cred={{0x1c, 0x1, 0x2, {r3, r35, r36}}}], 0x70, 0x45}], 0x4, 0x44040) [ 721.214515][T22994] FAT-fs (loop3): Can't find a valid FAT filesystem [ 721.221216][T22988] bridge474: port 1(syz_tun) entered disabled state [ 721.227938][T22987] FAT-fs (loop2): Can't find a valid FAT filesystem [ 721.237689][T22988] device syz_tun entered promiscuous mode 09:11:44 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x455}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 721.261230][T22993] bridge474: port 1(syz_tun) entered blocking state [ 721.267904][T22993] bridge474: port 1(syz_tun) entered forwarding state [ 721.285260][T22993] bond0: (slave bridge474): Enslaving as an active interface with an up link 09:11:44 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025bc01000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 721.388954][T22994] FAT-fs (loop3): bogus logical sector size 524 [ 721.399880][T22994] FAT-fs (loop3): Can't find a valid FAT filesystem [ 721.407025][T23000] FAT-fs (loop1): bogus number of reserved sectors [ 721.422690][T23000] FAT-fs (loop1): Can't find a valid FAT filesystem 09:11:44 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b5c732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 721.519604][T23005] FAT-fs (loop2): bogus number of reserved sectors [ 721.529684][T23005] FAT-fs (loop2): Can't find a valid FAT filesystem [ 721.607975][T23000] FAT-fs (loop1): bogus number of reserved sectors [ 721.620128][T23000] FAT-fs (loop1): Can't find a valid FAT filesystem [ 721.632662][T23005] FAT-fs (loop2): bogus number of reserved sectors [ 721.647858][T23005] FAT-fs (loop2): Can't find a valid FAT filesystem 09:11:44 executing program 0: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a020a087400f801", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 721.670012][T23012] device syz_tun left promiscuous mode [ 721.695046][T23012] bridge474: port 1(syz_tun) entered disabled state [ 721.728505][T23016] FAT-fs (loop3): bogus logical sector size 524 [ 721.734471][ C0] net_ratelimit: 8 callbacks suppressed [ 721.734484][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 721.738849][T23016] FAT-fs (loop3): Can't find a valid FAT filesystem [ 721.740367][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 721.758485][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 721.764253][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 721.770054][ C0] protocol 88fb is buggy, dev hsr_slave_0 09:11:44 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x428}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 721.775830][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 721.787991][T23012] bridge475: port 1(syz_tun) entered blocking state [ 721.818119][T23012] bridge475: port 1(syz_tun) entered disabled state 09:11:45 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x456}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 721.829339][T23012] device syz_tun entered promiscuous mode [ 721.842733][T23018] bridge475: port 1(syz_tun) entered blocking state [ 721.849430][T23018] bridge475: port 1(syz_tun) entered forwarding state [ 721.894487][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 721.895319][T23020] FAT-fs (loop0): bogus number of directory entries (2058) [ 721.900299][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 721.911020][T23018] bond0: (slave bridge475): Enslaving as an active interface with an up link [ 721.924768][T23024] FAT-fs (loop1): bogus number of reserved sectors [ 721.931375][T23024] FAT-fs (loop1): Can't find a valid FAT filesystem [ 721.931443][T23016] FAT-fs (loop3): bogus logical sector size 524 09:11:45 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000201000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 721.951765][T23020] FAT-fs (loop0): Can't find a valid FAT filesystem [ 721.960900][T23016] FAT-fs (loop3): Can't find a valid FAT filesystem [ 721.997111][T23018] bridge475: port 1(syz_tun) entered disabled state 09:11:45 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b660a2e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 722.067250][T23027] FAT-fs (loop2): bogus number of reserved sectors [ 722.088949][T23024] FAT-fs (loop1): bogus number of reserved sectors [ 722.105647][T23027] FAT-fs (loop2): Can't find a valid FAT filesystem [ 722.112395][T23024] FAT-fs (loop1): Can't find a valid FAT filesystem 09:11:45 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025c401000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:11:45 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = open(0x0, 0x800000141042, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000000c0)={0x10000, 0xf, 0x4, 0x4000, 0x1, {r2, r3/1000+30000}, {0x4, 0x2, 0x1, 0x0, 0x78, 0x18, "b252d3d4"}, 0x5, 0x1, @fd=r0, 0xa8b, 0x0, r4}) pselect6(0x8f, &(0x7f0000000140), &(0x7f0000000180)={0x9}, 0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400), 0x8}) sendto$l2tp6(r1, &(0x7f00000001c0)="f087441b3ba84d9759834d2fccc5b4a4887b5e69cb628b0078618d4ad05e1a6e79f0173412434784fe827a81ffb1ac7407c0eb365b3e53fd55a914e7ed00850cba9307bc1d6956648607ffdb6ceb668fd598ffb34de6a973ef0b60d3f5442942b32a57dea34769df634467b467017d2fa69fb706ef21e8c06f677286c7ff279735ff83598dffe87b9f8ad9ab85", 0x8d, 0x15, &(0x7f0000000280)={0xa, 0x0, 0x101, @empty, 0x100, 0x5}, 0x20) [ 722.168972][T23031] device syz_tun left promiscuous mode [ 722.174921][T23031] bridge202: port 1(syz_tun) entered disabled state [ 722.227184][T23031] bridge203: port 1(syz_tun) entered blocking state [ 722.236913][T23031] bridge203: port 1(syz_tun) entered disabled state [ 722.245366][T23031] device syz_tun entered promiscuous mode [ 722.286342][T23027] FAT-fs (loop2): bogus number of reserved sectors [ 722.292885][T23027] FAT-fs (loop2): Can't find a valid FAT filesystem 09:11:45 executing program 4: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000802, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) 09:11:45 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x441}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:11:45 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = semget$private(0x0, 0x2000000010a, 0x14) semop(r1, &(0x7f0000000100)=[{0x0, 0xfffffffffffefffc}], 0x1) semop(r1, &(0x7f0000000000)=[{0x2}, {0x0, 0xffffffff}], 0x2) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000380)=[0x3]) r2 = open(0x0, 0x800000141042, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, 0x0, 0x0) bind$isdn_base(r2, &(0x7f00000000c0)={0x22, 0x44, 0x6, 0x7, 0x3}, 0x6) semctl$GETALL(r1, 0x0, 0xd, &(0x7f00000001c0)=""/171) pselect6(0x40, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000180)={0x9}, 0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400), 0x8}) fremovexattr(r0, &(0x7f0000000000)=@random={'osx.', 'cgroup.controllers\x00'}) syz_open_dev$vcsn(&(0x7f0000000300)='/dev/vcs#\x00', 0x3f, 0x400) openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x0, 0x0) r3 = open(0x0, 0x800000141042, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000280)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x80082102, &(0x7f0000000040)=r4) [ 722.365201][T23038] device syz_tun left promiscuous mode [ 722.370895][T23038] bridge475: port 1(syz_tun) entered disabled state [ 722.419303][T23038] bridge476: port 1(syz_tun) entered blocking state [ 722.434529][T23039] FAT-fs (loop3): bogus logical sector size 524 [ 722.440804][T23039] FAT-fs (loop3): Can't find a valid FAT filesystem 09:11:45 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x457}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 722.484800][T23038] bridge476: port 1(syz_tun) entered disabled state [ 722.492244][T23046] FAT-fs (loop1): bogus number of reserved sectors [ 722.500262][T23044] FAT-fs (loop4): bogus logical sector size 524 [ 722.501193][T23046] FAT-fs (loop1): Can't find a valid FAT filesystem [ 722.527512][T23044] FAT-fs (loop4): Can't find a valid FAT filesystem [ 722.545425][T23038] device syz_tun entered promiscuous mode [ 722.580942][T23040] bridge476: port 1(syz_tun) entered blocking state [ 722.587667][T23040] bridge476: port 1(syz_tun) entered forwarding state [ 722.603120][T23040] bond0: (slave bridge476): Enslaving as an active interface with an up link [ 722.614482][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 722.620243][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 722.637270][T23046] FAT-fs (loop1): bogus number of reserved sectors [ 722.644050][T23046] FAT-fs (loop1): Can't find a valid FAT filesystem [ 722.676435][T23040] bridge476: port 1(syz_tun) entered disabled state 09:11:45 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025cc01000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:11:45 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000c1000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:11:46 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x442}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 722.785276][T23054] FAT-fs (loop2): bogus number of reserved sectors [ 722.791871][T23054] FAT-fs (loop2): Can't find a valid FAT filesystem [ 722.798894][T23039] FAT-fs (loop3): bogus logical sector size 524 [ 722.811312][T23039] FAT-fs (loop3): Can't find a valid FAT filesystem [ 722.914576][T23054] FAT-fs (loop2): bogus number of reserved sectors [ 722.930078][T23054] FAT-fs (loop2): Can't find a valid FAT filesystem 09:11:46 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66232e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 722.971030][T23060] device syz_tun left promiscuous mode [ 722.985763][T23060] bridge203: port 1(syz_tun) entered disabled state 09:11:46 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x458}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 723.036792][T23060] bridge204: port 1(syz_tun) entered blocking state [ 723.039798][T23063] FAT-fs (loop1): bogus number of reserved sectors [ 723.046970][T23060] bridge204: port 1(syz_tun) entered disabled state [ 723.064493][T23063] FAT-fs (loop1): Can't find a valid FAT filesystem [ 723.076137][T23060] device syz_tun entered promiscuous mode 09:11:46 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 723.133311][T23066] device syz_tun left promiscuous mode [ 723.139080][T23066] bridge476: port 1(syz_tun) entered disabled state [ 723.183018][T23069] FAT-fs (loop3): bogus logical sector size 524 [ 723.195155][T23063] FAT-fs (loop1): bogus number of reserved sectors [ 723.202545][T23066] bridge477: port 1(syz_tun) entered blocking state [ 723.205535][T23063] FAT-fs (loop1): Can't find a valid FAT filesystem [ 723.212918][T23066] bridge477: port 1(syz_tun) entered disabled state [ 723.215909][T23069] FAT-fs (loop3): Can't find a valid FAT filesystem [ 723.223626][T23066] device syz_tun entered promiscuous mode [ 723.243435][T23073] FAT-fs (loop2): bogus number of reserved sectors [ 723.251188][T23073] FAT-fs (loop2): Can't find a valid FAT filesystem [ 723.251415][T23067] bridge477: port 1(syz_tun) entered blocking state [ 723.264646][T23067] bridge477: port 1(syz_tun) entered forwarding state [ 723.279072][T23067] bond0: (slave bridge477): Enslaving as an active interface with an up link 09:11:46 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x443}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:11:46 executing program 0: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x442}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 723.344917][T23076] __nla_validate_parse: 14 callbacks suppressed [ 723.344974][T23076] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 723.382035][T23077] device syz_tun left promiscuous mode [ 723.387873][T23077] bridge204: port 1(syz_tun) entered disabled state 09:11:46 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = getpid() perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x40, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x40}}, 0x0) r3 = getuid() fsetxattr$security_capability(r2, 0x0, &(0x7f00000000c0)=@v3={0x3000000, [{0x800, 0x81}, {0x0, 0x5}], r3}, 0x18, 0x3) getresgid(&(0x7f0000001900), &(0x7f0000001940)=0x0, &(0x7f0000001980)) r5 = getpid() perf_event_open(0x0, r5, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x40, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x40}}, 0x0) r7 = getuid() fsetxattr$security_capability(r6, 0x0, &(0x7f00000000c0)=@v3={0x3000000, [{0x800, 0x81}, {0x0, 0x5}], r7}, 0x18, 0x3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000019c0)={0x0, 0x0, 0x0}, &(0x7f0000001a00)=0xc) r9 = getpgid(0x0) stat(&(0x7f0000001a40)='./file0\x00', &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0}) r11 = open(0x0, 0x800000141042, 0x0) r12 = socket(0x0, 0x8025d063aea86c36, 0x8) r13 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r13, 0x4, 0x42000) r14 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r14, 0x4, 0x42000) r15 = socket(0x10, 0x2, 0x0) write(r15, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) r16 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r15, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="01002bbd7000fddbdf250200000005003000227fa8a24a000900aab9b2fb3c7d4afc8c2b01f01edbaaaaaaaaaa000008000600", @ANYRES32=0x0, @ANYBLOB="08003c000600000005002e0001000000050033000000000008000600", @ANYRES32=0x0, @ANYBLOB="0500330000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4c0c1}, 0x4804) recvmmsg(r15, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r17 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r17, 0x4, 0x42000) r18 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)={0x5, 0x6, 0xfffffff9, 0x0, 0x10, 0xffffffffffffffff, 0x8, [], 0x0, 0xffffffffffffffff, 0x1, 0x7f}, 0x3c) r19 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r19, 0x4, 0x42000) r20 = accept4$ax25(0xffffffffffffffff, &(0x7f0000001b40)={{0x3, @default}, [@rose, @default, @netrom, @rose, @default, @rose, @bcast]}, &(0x7f0000001bc0)=0x48, 0x80800) r21 = getpid() perf_event_open(0x0, r21, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000001c00)='./file0\x00', &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r0, &(0x7f0000001dc0)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001840)=[{&(0x7f0000000480)="4efdbc95f753885f02bc59aaddd22eeb4d507c0a1307a66bb601f08f08e8320e7fb8bb1bdd37d7fc5344b7f0be839d1c9f51e1223802a9326a32e67dc6c181adcecd883eb73d0e02f607f68d2d6ae3f2e829e1682908c0c05c8c5b6b8f9ee7db0e4a257da26cb9ed5d8370aea4b5b9be318c037c29165970c21da94be87f2e657d77f1d3e76634696ad23ff29661ad060d652c2fed15434d945682b99eb5c119e41caa51a18515634b9c3e0203ef3d1785386677ceee1605824ac03ce090333c383948fff6154fd088a1817b9e0068a5a2d43fd10ac45eae6d246268c162a42a87757c2d92b534929539a68db03fbdb2c0f8e81085a22d71d6f34afba4f03ec135816d98a79a62a3134e147eda610b603158d84577b9f469e6f14331a30c8412d31e8a1991a83ae807e1617953f8094c91f049e7ec8359ed5591124327b91580832f4d13c16acfe4ede140929dca3975f76a88eaf1a9bee0bd5deec72ea2be21ed6da4625486f80286266d20c4f3da6c6597977770e57ce487d28dd20bb49091af490cf207ab9090b37ccc6c5d5155cc94df0ba6fd0a9fca3301919e7dbe660fa8386f7d2d4c1fd235607326736d6d565e62549181900c0333f422e59507239fff7b364de69786947bf9d5b071a895789a1984dcc59d1dd4a66a537e9e4a9fc9aadc61bd0351c4f3a0830c02b1d3b6232979807a61f089cb7a173dd4da931b33383727e5282c75169a0a1f23f01e52fd8db6139003d3748a91aa14b781733966c6309f3a7e0934b07d102848633cd262c67979ac81f040d9e1435b45fb23e748431b61e86de27b1e6aae49cc439f8ea1c2a47a8a5db0e8be2bdb0d8c528c7f8772b300803e7a08c19c1608cc9a5c8d0b716977b76afbf2af0377b67609f702592521b375af47e2cf283fc24b56a9d130e3916c44f5b1defbc299f9932ddffe239a1c1dc2e30b0c96d2298fbe0961b04f3989a19985ed0c7b5f91cc02c55b487ba084dff7fd3a7e6a87a4a3c79b4ec6552b03f85f63400749b12544be309f0d12ef8cec6c42f90688a7e55de9df4b51ac2ed60b4fd2479f5849233caab773ec9b40d4ca21007653d568b91940c318aaa06b9eaff5d43e31f8615b47ffb3235b8b37d5b50aa653a4fc2c1326b3b8ea19db3a0602aaffddb8a1d4df79e9ab08665ad842a60b61b682d51387d10c84b8d6a8402c2ce78b9a545211b4a9edbc8260c3232f3c2124c054fb0d3f5ae7ee5dedb0df4af9783932e4eeb2e048abd81f6f602afc830960a4e4f99165f0096f124393496e099ff8083537603b82ea046b29545f30a52dafc495cbdc032b975e6654f68e22070f6ca1ebcaf3c0f1bd60c8829dbcdeecf61f7ef093a2ccb191f69fc7ae1338fc4fdc7a1f053c1476ae7c2be0769e38f5000bf4d0bac67e92a20f856ca2f2fb32ea77e1c439893884daa8465bf9e59e53389bf119d4b8bd49b01825c94bfd95654cb20c7a86c98b9eaf48e6b7a91ba1eb958c5bd3adf1370bb8a8499bf6a4bbb17aa7c3274a668092c4fe57b3c4b79cc306fbc3d05825e1e22abd622b8fd458bd08fbeb81fded505baca09fec0edf6812541300b1ef5d30d89a0c0f7fed7a36c03ff5984ae6a621f7dc5b27c4b4e17f8578826de261fedb29ace7ab8135daa3a904faa07ec53cedaaeb2d565b87afab56778274269fe5aa08c689930debf8dabb02de9783c0a7ea907e24ddeec7aa8ea24589746288e1fb8c8b1aeed4f407349656f1112ef30a5843bb88f9f8edd0c7adab97bf4a4745ff5fcd584d5cc3070b7debb1e9ef9354c011bf810ea906be10be15f58477966318f78e3c589594838637d926a86d796585c00e0b61a16ad0dc8c63863077012a6c523afe0e3be3ad14014ed594a585d335f53b58b55c8b829028f474ad4cce30c36a720f4f04e19ac3eb964d9a1c1a7c628c999ea9fd6c649f7abd7f4fc0eab606901ec44a4058ad8e5ee69345f9124aa42f8cbe689ab6c32f416692999477faccd4afc67503febae32985563a0fb74177c5d4b44e06597881ae0abb7c76914d0df92ea403fe9cb4db93e112d6c638548f97c548ea57301b34fcdfc2339390ff02d27edc128ece12a306db776d63156829a765ab894efff08a3df6fbd50bbf58fa61b2cdcc8c425bd966a6b4ccf6ab83c7e9643881a2bcf4ac382cb046b4cb9780576f26d5043728c61f2ab7e14e6b5755d65856bef652736f7c5758163b0f461716b6add30fb4a2cc2b69dda635b315a11bce65de84da1ca2140c43a64e6b0365d704c0c4574e86b57b9fd539e7d607b49e12b86a49ea80edfc8688676fd5d7c512a4bf67f5fa01c9eb2ccaf9d58a7555b5d8057cf45bfa9824eb4166f3ea49565dd7d6595f3e7275aae82abae3fbf78c91d2077939bb9a7eea25492693349823a28236e0dedab23589aaf53d7a63e1a9b999ce9012de04c630a6e2c3c523682d29a4d4c7d8d167dc74f1780d1939b2f6de2ea6a0c66f4d971b88485acf62f091d68f102cbf28a2998f3797799b47ac02e68f0929543ceeb250e81ada6cdc558b8d73f8456d9a96afaf17c433065cb627fe7c4d149caec6ca0ba99e1a6a2f67e4e1f0462bb3fd8609c56e68870a456789d29eafa6c0e07c5077c22828ee7bb3756e741cc2a18ce59a8dc5f5323aa32b1525591369cb165f44ca71234dcf4beefe42da6b4effcc71b7c7222ff5e0d55a97d31d0560d2c5d78d2d725c41fa00f7c890b3e64160a170fbe7fa7fe7ebc6203f91b68d32e5e2cf9b691f96778913bf61ffa0220b5bd47e861437bf65410f9624bd412c344c42792cf208f9b627316a71c87ee40ee9bf6d63adc3ecdbd60fc898b9e80d6f7e9c01a842078b0d85140686a6a4a3a99f8053771d71c3581110d9b5668ade168638a951a44ab40e0ae855a6318a9207c50918819463bee113c06ced50d65e4f7688cf928f724a58c3065e88a6db8edbe2af52cda68317012fd2580f498c7a942aa488c3ffc04473466240c93ba06b3ce91cb9e2f62b8f1fd371429cdaa7f5be7e96391ec73d0caafed12383844b2e18a1f4dd7f6e825271b927a0c557999961a1723bed0e20396a0527ec704e80f11515759103f70a1892f510a21397f6926b1c7c4484072aa1ce52ef2cf844527be5816b974a3a3f587d4d90c85e74b80b6bf6dbc27a0c9d9f2f3a18d4a9c87ca9212f4e0c6458bd02cf409d87204acefad96ae358914eef29dfc62066257090416cadf111ab916dc16e097da19759ad1edd653afe3d9c6698568daa347c379d6abcf0386d33fc9a872e72ec920f40001ba5e6cacf4828772684047ced9691259e3721de6444840780649175fc3db64d7c544a30466e55efdee76320642f9f59b83abdcd3e17fb973adfbbf365265844cabf78d7ce0aca1006fbfc28fdd010d2ed63591446e9358b711207b4f922ffd160cbc767bee8290d9cbda1210b81b69dc44d5f277b015c77a744b06cb0bf0ffd27b1f591c509c61f32060da8861187b4b834f70117d24afd5ddb717e04515157bc46fce1b062bc5e8d28c83c8f0b39df070b376793899d3b93800494afa8c7cedc7be706dc39d7b5fefcd0386517d3310f5a7adadf408ccdd615a5e65ff7dbfec2274e7d8c7bca27e44a82c9dfa0377bb97ab2e3c013755ccbd96623cef2bd64d1b7fe6a64603cf551af60dc5d5a8d250f0464532d7d0b1453fd94cc14a77e9e941cd32287a74b0f15067897fca3e25af71cd59ea764e01947eff83dd5cab97d6f3f72671ee261afa644c8119a97b0ea4c90c89058626d89f119bc68164ea66e2263eb29a7d55b80e33518663c9ffe8dad427a1934656c400fcc8ffa30540d3032eff1e7eb7bc1a0ebeea6f035ec5f7b3a10cdaf73bb35553e0678504560b87d7336ca3120de1056a85bad9402899d80705d3ad9601ee40ed0464f6801e6a5d340a87d7255a1a9d7a698a7f105fd28b8e3f1f07809d344ef48f30d734bfc0d669c2bd7bf5fe76a2d9b2904d2dfa34a56e44492e6c8c6ba22a431db4b27535843e6af55745ecdb0158b06f23bcd976e668501060bcebd1d3ec5924ce7fca82887fe7ae8bce57c6d34f3191efaf28538c00b420de4ce18150d7e1e831a2e555001385c57d4db43ca7970d49a2cba0d6824396077e09b1a7de9de18315a20db98cc90335a98d880d9940df695aaffa77344a54442506d2bdddce575aa15a3f3ed7ae2f773c1888a544a2873ecf429cfaec66aefbc2fffe613fc80a7e10c168e312a3ab2e79cba3ecc3b513b2f75205533a5e0cc4a101a56698168b010a6b7015bfd4c37c4f9c2892b81cb71675aeab7836a20a0cff973b119501b560558b014fb506ad983b582cff377f6559b9384d2b1c59a942dee91a9e4c8090da8092330fb069de02542488425474a6d6d6a5761325f4e1d16e8fefc0943968f9aa2e394664be26c07e245a5721c3b96cab1fed0d938e27955c7fc714a434a99007df2ce84fbe75ac09a60983ffa5701e762ba66d0097bea3f17e7519f9652d6f8681e787139dc38cadc40d710ce983ef58fb5ad00a7d1f4868816e4952c92a2c3aa527e4608617967c9f8b83bf2e25e0da7b8854ee496b7961a2668a39c3a20b1c1bfe24d1d05dd57da126196ba4148b87ca4c7797eba034340fe28c8be550da345c4c7c35609cbf6f2e676d64db681164c46b58f083fc651f85e2fca3b4d5b6b98aef7e8b5591188bb753551043fc2473b44108f35603888f671b725317d6ea6e0f43d4f24fb65c54dcda1ff8d23b6a2aa92c0b16b63d7b986612d93f58e99d66f51fc347307cc8f6b8aa7d4b0dc3d809fa00c4c4a3dd3e511b58995ba0f480916ae0b377564ba38b4ae679fe66d4e6cdf213c24683f7a4088611abbe42c334c0fb612aab7b9d05e9ee598672a9c4511c6008ddff63be243999a5e16d660e526f237dd35ff21bab16c0583188946b09cb5308a3e524a6f5e35e10dc5ba1165783cfc09868640ed8b725df0e11471d54d6bcf2707867e7dbdf2f58f4b75d272a3d8583c9409b1159c1cc1d8bdd6b4ebb7a3ed380b699b4c1c631ec352bcc36197b94033307100b288d983b379f2ae3a5094685cbe53a5154187a18931d1ab20cf5dc9753acae847d442353df3766dade4c63628e330f04675e0a33722683d335d59acedbdfda228d17c0f8daf5f66f6f4c027d5665513d7c5031da3f8ef07e19631b49b5cb723c08967e1a8018b10aadc8ee85fd1d10a91a9ca5e932fa8f315588f101c42c24865bd890d866206529a9ea370e871f8d4cfb95c9befdcfdba37e7f55a66d8c16342c5883f0c7a516d2b9724c3101518797681aedd4fc76322462e8e83b48526ac0a09bece21081dbbf8c832a2cd130170800573c3fd8734ea6a3e6ce34061e4be4959fdc9065ee3b4c801588559e365fd389db30056054f787896092134406ce20215151c59b6341ad008503f8e17c72996cdae41264fb4125ffc0f77b57ac330fcf053e93843721a639d732542f4f4ce2c88d36bfdfc498311f2a98dfa7fecfce6385b567a84d9e95380a40f3bf6fdc4f32130abd9c8fdbbd28ea3b80f8abf669c923b396fa837b24e1cda4144d1bcf0acb7fa1f06da7ffab78bd1cb3883cc36d0df766b5d20535e95bfea50c188a69a02ec1fb7a17bf0a02809efa0a55b79c4643b43046f9fb83a3bd78701a7b1169448547a12d4c7899a76414530fa8679d2b22a30157d3534b18e254fcba81cc4a1ed936ad88906345108087e444c84ccd2cf1eeb0c2a282479fc303ef9c2379cc602e2f35ce0ddbfc9dabb3836bb58041faea4a3", 0x1000}, {&(0x7f00000001c0)="4bff142dc6935f868bdc4038f723e214c79a920c0559c61558b5b4082b9f223ac08a60cacb377f3bf940edefe6e334ad16e4bd3cf5afb94ba5096b4949ac28d4b0343bb4e0e199631b39184a561fa836473a810dc1d83fadf6b04dcca4e325cc76370c67f6ff766330d5a72334c46a40545881ace5507b0eb904c4efec38137d472cdf7dc1f9ae697413acb083ad8ec65e86bcef6bd80ebf2ace6b7ffbac6601e2e794e930c406fa6f508a6858e7fd5ea699d06c8c235d5fd4d61db035231460d83476042aa501cc910b7c7c88c345252849091e366c0e6a652a5e77a1f03a", 0xdf}, {&(0x7f00000002c0)="efac7967b645599c8c2bb9dbe827e25b61f18aa5d2849adf8b8b2100d7314aea60fe7f494cd3d27ba15d82f2fd7d02912da3b17b19863396e5ff06192bffcfc063c4afd36dc785d8ba28cb282757252bc8ccae0b9863fa4299ebb9ed411862dee616c14f931f48dea71e49a0b1774c29cb45d5142106461d4e2d66b0d5dd511843d14c4ff006d68c7dfb0ecb33dadfd6331bdeac7a39932dc6fb0c6c07dd5bb7f6f5d1274470dde68c985aea345c00581f890bbb799b655b4c0806fe3267b0b20760fea7cf0b831eef9b2ad57463", 0xce}, {&(0x7f00000000c0)="37a1404fc6610be3c5a1c78f3511f5b5abadd0f5194f808d18d03cfe935b8fc048d06329ce0261ebf2e8e6e49984be09f46ff8f4b40568167d2e426c2b2f81d7df4c1ec3300abdd8d030287aa0621d33e9f23256e819e333069ef6c860cbc12ca62f79d0c6a584a6d273ff27322e91b77d6e5a97dd", 0x75}, {&(0x7f00000003c0)="4fd790205f51d7c8e109fc583a9a55f7a634f6514bd1225b07c57143352afc258d4899cb00e13c9a1e4c", 0x2a}, {&(0x7f0000001480)="3ff7824b54637ffc77615691d9359bade28756465048c49d77e324482b126548bb8b95a99b3106f4643fa1fe535ee7747a811cacde411a1dc219f3eca58b73ea7a482fd54482bee5913c0d006aa51f94d47da6a227af347aa231bfc8393e54c5bcd0eb937f4fa1eb9bc81c6c3717a3809c092f178a0b08e48d92a19bfc29deaf1d136f7a50e3b946c03b0d82427ecc9ee2af116ea077ad43", 0x98}, {&(0x7f0000001540)="74cd7db71f8370e7122a94434f12c46a08a453193280942531b72d872139338abf0d50912bbe3694692ab257a19542c6564b314661d121012e95b925507b38b0ede97cc5fd088698cb3f121f792e41844149c041b1d62681b0811c1e33a73214e6ac97f6de14b688468e1fca15eb413a196799507a13e155053d52e0828da405080cf2bbcf43c7865c5f7c48945ddaa8d41c98daeb2076b360d1c2882b1f2c0b4f0aecc1e2b6136dd69a20597cfc", 0xae}, {&(0x7f0000001600)="3b38aabcc822667976f5f90b0e5c81e2158cac66b223ab0c53fd8c8592e5020b1829442a5239ccf95fb22a80c1cee4fb19b25137ad62043c8491e9649b848772c3419abc95aaacca648440ba9ee0c4193ebb1a31fa2eb7186cd2df5df527a1ac1c9c883a3d720c12e79ef8000488fb0c48f41a7a3e635ac6f847629817efdf378f0269e0ac4c4e65a52846b230568a96ba75ff48c2bd14ea157a52a90f852d1fe5dd31ca661f04c60eac3e4ffa0620d0600cf04c6f", 0xb5}, {&(0x7f00000016c0)="d9fcbd8151da1b071803800fc248bc263d568096d717e76a93385ff6ffb9b3c80565850f1445217462a4cfe3f06d175eec7fdb9a6c26bcb1d074d27540181ce857230e594e7a33d0c14d21ebdfdba1b66f65203ab896c77d32e3d1eab34b6dbbddf6f2706d65ee5a18b0398eed0869fc55189a0469b72e2e1e7d71ffb6e7e3682a65a68ec062cd37590026cbb8ca0fe37d9eafab7d8f702dfd362b1404c480f14c236ad1f6ace02ebe5d4feeafa0d1dfc8", 0xb1}, {&(0x7f0000001780)="8eb4f0daeb7061450b29068b62898a93c920f53324ec74b6836d7be5d2012bf02bb88adb616eb187f41cc69f485e6e07ee3ed8cc148614e2f8d42bb461c2bd72e9bdf9fa9c9dfdb43a4e312e5b51fb5013650ec524793e71e195e0afdf611ef6b4dc992957a92f3e4556b1e7d994f716d99d6e339bd999311800e849812ab60048c4", 0x82}], 0xa, &(0x7f0000001cc0)=[@cred={{0x1c, 0x1, 0x2, {r1, r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r11, r12]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r0, r0, r13, r14, r15, r17, r18, r19, r20]}}, @cred={{0x1c, 0x1, 0x2, {r21, r22, 0xee01}}}], 0xd0, 0x8810}, 0x0) pselect6(0x8f, &(0x7f0000000140), &(0x7f0000000180)={0x9}, 0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400), 0x8}) [ 723.432130][T23061] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 723.455962][T23079] bridge477: port 1(syz_tun) entered disabled state [ 723.497471][T23073] FAT-fs (loop2): bogus number of reserved sectors [ 723.508001][T23069] FAT-fs (loop3): bogus logical sector size 524 [ 723.514269][T23069] FAT-fs (loop3): Can't find a valid FAT filesystem [ 723.514797][T23085] FAT-fs (loop1): bogus number of reserved sectors [ 723.528074][T23081] FAT-fs (loop0): bogus number of reserved sectors [ 723.528183][T23085] FAT-fs (loop1): Can't find a valid FAT filesystem [ 723.554516][T23081] FAT-fs (loop0): Can't find a valid FAT filesystem [ 723.561400][T23073] FAT-fs (loop2): Can't find a valid FAT filesystem [ 723.617168][T23089] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. 09:11:46 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x459}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:11:46 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025d401000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 723.698404][T23085] FAT-fs (loop1): bogus number of reserved sectors [ 723.722197][T23085] FAT-fs (loop1): Can't find a valid FAT filesystem 09:11:46 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66252e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) 09:11:46 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 723.845449][T23093] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 09:11:47 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x444}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 723.890739][T23093] device syz_tun left promiscuous mode [ 723.909126][T23093] bridge477: port 1(syz_tun) entered disabled state [ 723.953553][T23095] FAT-fs (loop2): bogus number of reserved sectors [ 723.973285][T23100] FAT-fs (loop3): bogus logical sector size 524 [ 723.988168][T23095] FAT-fs (loop2): Can't find a valid FAT filesystem [ 723.988237][T23093] bridge478: port 1(syz_tun) entered blocking state [ 724.004305][T23100] FAT-fs (loop3): Can't find a valid FAT filesystem [ 724.017703][T23093] bridge478: port 1(syz_tun) entered disabled state [ 724.044538][T23093] device syz_tun entered promiscuous mode [ 724.084471][T23099] bridge478: port 1(syz_tun) entered blocking state [ 724.091161][T23099] bridge478: port 1(syz_tun) entered forwarding state 09:11:47 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000051000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 724.128389][T23095] FAT-fs (loop2): bogus number of reserved sectors [ 724.138444][T23106] FAT-fs (loop1): bogus number of reserved sectors [ 724.145503][T23100] FAT-fs (loop3): bogus logical sector size 524 [ 724.153135][T23106] FAT-fs (loop1): Can't find a valid FAT filesystem [ 724.164202][T23095] FAT-fs (loop2): Can't find a valid FAT filesystem [ 724.165502][T23099] bond0: (slave bridge478): Enslaving as an active interface with an up link [ 724.180263][T23102] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 724.180825][T23100] FAT-fs (loop3): Can't find a valid FAT filesystem [ 724.194206][T23103] device syz_tun left promiscuous mode [ 724.202315][T23103] bridge123: port 1(syz_tun) entered disabled state [ 724.250572][T23099] bridge478: port 1(syz_tun) entered disabled state 09:11:47 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b662a2e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) 09:11:47 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800d8021000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:11:47 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x45a}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:11:47 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x445}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 724.415814][T23112] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:11:47 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025dc01000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 724.472229][T23113] bridge206: port 1(syz_tun) entered blocking state [ 724.482277][T23113] bridge206: port 1(syz_tun) entered disabled state [ 724.490210][T23113] device syz_tun entered promiscuous mode [ 724.574186][T23118] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 724.590362][T23116] FAT-fs (loop3): bogus logical sector size 524 [ 724.597136][T23116] FAT-fs (loop3): Can't find a valid FAT filesystem [ 724.621656][T23118] bridge125: port 1(syz_tun) entered blocking state [ 724.628672][T23118] bridge125: port 1(syz_tun) entered disabled state [ 724.639825][T23118] device syz_tun entered promiscuous mode [ 724.647264][T23116] FAT-fs (loop3): bogus logical sector size 524 [ 724.653696][T23116] FAT-fs (loop3): Can't find a valid FAT filesystem 09:11:47 executing program 4: r0 = open(0x0, 0x800000141042, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000001c0)={0x2, 0x1, 0x4, 0x20, 0x5, {r1, r2/1000+30000}, {0x4, 0x2, 0x0, 0xf9, 0xe0, 0x4, "c9f0b2e0"}, 0x800, 0x71d415b10fc3717, @planes=&(0x7f00000000c0)={0x1, 0x22, @userptr=0x6, 0x4}, 0x0, 0x0, r3}) r4 = open(0x0, 0x800000141042, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, 0x0, 0x0) openat$cgroup_ro(r4, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0) pselect6(0x40, &(0x7f0000000140)={0x4, 0x0, 0x4, 0x0, 0x0, 0x4437}, &(0x7f0000000180)={0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0xff}, 0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400), 0x8}) [ 724.676777][T23126] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 724.716766][T23126] device syz_tun left promiscuous mode 09:11:47 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28006c001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:11:47 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b662b2e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 724.722409][T23125] FAT-fs (loop2): bogus number of reserved sectors [ 724.727965][T23126] bridge478: port 1(syz_tun) entered disabled state [ 724.732288][T23124] FAT-fs (loop1): bogus number of reserved sectors [ 724.748805][T23124] FAT-fs (loop1): Can't find a valid FAT filesystem [ 724.780569][T23125] FAT-fs (loop2): Can't find a valid FAT filesystem [ 724.791830][T23126] bridge479: port 1(syz_tun) entered blocking state [ 724.801937][T23126] bridge479: port 1(syz_tun) entered disabled state [ 724.810005][T23126] device syz_tun entered promiscuous mode 09:11:48 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280068001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 724.824840][T23129] bridge479: port 1(syz_tun) entered blocking state [ 724.831517][T23129] bridge479: port 1(syz_tun) entered forwarding state [ 724.860368][T23129] bond0: (slave bridge479): Enslaving as an active interface with an up link [ 724.901582][T23133] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 724.916965][T23124] FAT-fs (loop1): bogus number of reserved sectors [ 724.926406][T23124] FAT-fs (loop1): Can't find a valid FAT filesystem [ 724.935263][T23137] FAT-fs (loop3): bogus logical sector size 524 [ 724.942268][T23137] FAT-fs (loop3): Can't find a valid FAT filesystem [ 724.945263][T23136] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 724.965790][T23125] FAT-fs (loop2): bogus number of reserved sectors [ 724.974547][T23125] FAT-fs (loop2): Can't find a valid FAT filesystem [ 725.001480][T23133] device syz_tun left promiscuous mode [ 725.019950][T23133] bridge125: port 1(syz_tun) entered disabled state 09:11:48 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025e401000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:11:48 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x446}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 725.098812][T23133] bridge126: port 1(syz_tun) entered blocking state [ 725.105637][T23137] FAT-fs (loop3): bogus logical sector size 524 [ 725.124017][T23137] FAT-fs (loop3): Can't find a valid FAT filesystem [ 725.146696][T23133] bridge126: port 1(syz_tun) entered disabled state 09:11:48 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x500}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 725.172958][T23133] device syz_tun entered promiscuous mode [ 725.199333][T23142] device syz_tun left promiscuous mode [ 725.213502][T23142] bridge206: port 1(syz_tun) entered disabled state 09:11:48 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b662d2e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) 09:11:48 executing program 0: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a020a057400f801", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 725.269530][T23142] bridge207: port 1(syz_tun) entered blocking state [ 725.280752][T23142] bridge207: port 1(syz_tun) entered disabled state [ 725.307598][T23151] FAT-fs (loop1): bogus number of reserved sectors [ 725.323211][T23142] device syz_tun entered promiscuous mode [ 725.324487][T23151] FAT-fs (loop1): Can't find a valid FAT filesystem [ 725.369653][T23150] device syz_tun left promiscuous mode [ 725.384693][T23150] bridge479: port 1(syz_tun) entered disabled state [ 725.441806][T23150] bridge480: port 1(syz_tun) entered blocking state [ 725.454372][T23150] bridge480: port 1(syz_tun) entered disabled state 09:11:48 executing program 4: openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bsg\x00', 0x400040, 0x0) r0 = open(0x0, 0x800000141042, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, 0x0) r1 = open(0x0, 0x800000141042, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, 0x0, 0x0) dup2(r0, r1) r2 = open(0x0, 0x800000141042, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, 0x0, 0x0) r3 = open(0x0, 0x800000141042, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, 0x0, 0x0) r4 = open(0x0, 0x800000141042, 0x0) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000fddbdf250200000005003000227fa8a24a000900aab9b2fb3c7d4afc8c2b01f01edbaaaaaaaaaa000008000600", @ANYRES32=0x0, @ANYBLOB="08003c000600000005002e0001000000050033000000000008000600", @ANYRES32=0x0, @ANYBLOB="0500330000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4c0c1}, 0x4804) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f0000000100), 0x4) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, 0x0, 0x0) r7 = openat$cgroup_ro(r4, &(0x7f0000000300)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fsetxattr$trusted_overlay_redirect(r7, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x2) r8 = open(0x0, 0x800000141042, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r8, 0x84, 0x11, 0x0, 0x0) fsetxattr$trusted_overlay_upper(r8, &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="00fb150c7f7b1c886916fd7255fc9ab383c8690000506a8e274e2b23aa1c62c363"], 0x15, 0x3) r9 = open(0x0, 0x800000141042, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r9, 0x84, 0x11, 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r9, 0xc0205649, &(0x7f0000000380)={0x990000, 0x9, 0x81, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x40076, 0x0, [], @p_u16=&(0x7f0000000280)=0x8000}}) r11 = socket(0x10, 0x2, 0x0) write(r11, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r11, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002bbd7000fddbdf250200000005003000227fa8a24a000900aab9b2fb3c7d4afc8c2b01f01edbaaaaaaaaaa000008000600", @ANYRES32=0x0, @ANYBLOB="08003c000600000005002e0001000000050033000000000008000600", @ANYRES32=0x0, @ANYBLOB="0500330000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4c0c1}, 0x4804) recvmmsg(r11, &(0x7f0000002ec0), 0x0, 0x2, &(0x7f00000001c0)={0x0, 0x989680}) ioctl$VIDIOC_DQBUF(r10, 0xc0585611, &(0x7f0000000480)={0xfffffdf8, 0x6, 0x4, 0x2, 0x2, {}, {0x4, 0x8, 0x4, 0x5e, 0x81, 0x0, "9f2b194f"}, 0x2, 0x1, @userptr=0x37c, 0x1, 0x0, r11}) pselect6(0x40, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, &(0x7f0000000180)={0x9, 0x978e}, 0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400), 0x8}) [ 725.482741][T23155] FAT-fs (loop2): bogus number of reserved sectors [ 725.492982][T23151] FAT-fs (loop1): bogus number of reserved sectors [ 725.504095][T23155] FAT-fs (loop2): Can't find a valid FAT filesystem [ 725.527825][T23151] FAT-fs (loop1): Can't find a valid FAT filesystem [ 725.538513][T23150] device syz_tun entered promiscuous mode [ 725.563687][T23152] bridge480: port 1(syz_tun) entered blocking state [ 725.570363][T23152] bridge480: port 1(syz_tun) entered forwarding state 09:11:48 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x447}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 725.584465][T23152] bond0: (slave bridge480): Enslaving as an active interface with an up link [ 725.652133][T23160] FAT-fs (loop0): bogus number of directory entries (1290) [ 725.665782][T23148] bridge480: port 1(syz_tun) entered disabled state [ 725.677543][T23161] FAT-fs (loop3): bogus logical sector size 524 [ 725.683882][T23155] FAT-fs (loop2): bogus number of reserved sectors [ 725.707787][T23161] FAT-fs (loop3): Can't find a valid FAT filesystem [ 725.718139][T23160] FAT-fs (loop0): Can't find a valid FAT filesystem [ 725.726446][T23155] FAT-fs (loop2): Can't find a valid FAT filesystem 09:11:49 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250402000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:11:49 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025e401000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:11:49 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x50a}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 725.904457][T23169] FAT-fs (loop1): bogus number of reserved sectors [ 725.907247][T23161] FAT-fs (loop3): bogus logical sector size 524 [ 725.911175][T23169] FAT-fs (loop1): Can't find a valid FAT filesystem [ 725.934778][T23161] FAT-fs (loop3): Can't find a valid FAT filesystem 09:11:49 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280010001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:11:49 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b662e2e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 725.997012][T23175] device syz_tun left promiscuous mode [ 726.007814][T23175] bridge480: port 1(syz_tun) entered disabled state [ 726.078556][T23175] bridge481: port 1(syz_tun) entered blocking state [ 726.085373][T23175] bridge481: port 1(syz_tun) entered disabled state [ 726.093004][T23175] device syz_tun entered promiscuous mode [ 726.130336][T23179] FAT-fs (loop2): bogus number of reserved sectors [ 726.139344][T23169] FAT-fs (loop1): bogus number of reserved sectors [ 726.147716][T23174] device syz_tun left promiscuous mode [ 726.153415][T23174] bridge207: port 1(syz_tun) entered disabled state [ 726.153712][T23179] FAT-fs (loop2): Can't find a valid FAT filesystem [ 726.171387][T23169] FAT-fs (loop1): Can't find a valid FAT filesystem 09:11:49 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x448}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 726.236574][T23174] bridge208: port 1(syz_tun) entered blocking state [ 726.251082][T23174] bridge208: port 1(syz_tun) entered disabled state [ 726.279113][T23184] FAT-fs (loop3): bogus logical sector size 524 [ 726.290173][T23179] FAT-fs (loop2): bogus number of reserved sectors [ 726.297400][T23191] FAT-fs (loop1): bogus number of reserved sectors [ 726.298645][T23174] device syz_tun entered promiscuous mode [ 726.304310][T23191] FAT-fs (loop1): Can't find a valid FAT filesystem [ 726.314568][T23184] FAT-fs (loop3): Can't find a valid FAT filesystem [ 726.334511][T23179] FAT-fs (loop2): Can't find a valid FAT filesystem [ 726.358558][T23176] bridge481: port 1(syz_tun) entered blocking state [ 726.365326][T23176] bridge481: port 1(syz_tun) entered forwarding state [ 726.400108][T23176] bond0: (slave bridge481): Enslaving as an active interface with an up link [ 726.420458][T23178] bridge208: port 1(syz_tun) entered blocking state [ 726.427286][T23178] bridge208: port 1(syz_tun) entered forwarding state [ 726.443087][T23178] bond0: (slave bridge208): Enslaving as an active interface with an up link [ 726.466433][T23186] device syz_tun left promiscuous mode [ 726.472485][T23186] bridge126: port 1(syz_tun) entered disabled state 09:11:49 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x600}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:11:49 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x449}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 726.505020][T23184] FAT-fs (loop3): bogus logical sector size 524 [ 726.511420][T23184] FAT-fs (loop3): Can't find a valid FAT filesystem 09:11:49 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280010001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 726.566965][T23186] bridge127: port 1(syz_tun) entered blocking state [ 726.581481][T23186] bridge127: port 1(syz_tun) entered disabled state [ 726.604542][T23186] device syz_tun entered promiscuous mode 09:11:49 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250c02000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:11:49 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b662f2e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) 09:11:49 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250402000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 726.786343][T23201] FAT-fs (loop1): bogus number of reserved sectors [ 726.801516][T23207] FAT-fs (loop3): bogus logical sector size 524 [ 726.803047][T23201] FAT-fs (loop1): Can't find a valid FAT filesystem [ 726.807884][T23206] FAT-fs (loop2): bogus number of reserved sectors [ 726.844567][T23206] FAT-fs (loop2): Can't find a valid FAT filesystem [ 726.851372][T23207] FAT-fs (loop3): Can't find a valid FAT filesystem [ 726.861415][T23210] device syz_tun left promiscuous mode [ 726.872028][T23210] bridge481: port 1(syz_tun) entered disabled state [ 726.928528][T23210] bridge482: port 1(syz_tun) entered blocking state [ 726.936866][T23210] bridge482: port 1(syz_tun) entered disabled state [ 726.946409][T23210] device syz_tun entered promiscuous mode [ 726.956916][T23201] FAT-fs (loop1): bogus number of reserved sectors [ 726.963790][T23207] FAT-fs (loop3): bogus logical sector size 524 [ 726.970253][T23207] FAT-fs (loop3): Can't find a valid FAT filesystem [ 726.977671][T23206] FAT-fs (loop2): bogus number of reserved sectors [ 726.977752][T23201] FAT-fs (loop1): Can't find a valid FAT filesystem [ 726.986510][T23206] FAT-fs (loop2): Can't find a valid FAT filesystem [ 726.998778][T23199] device syz_tun left promiscuous mode [ 727.004734][T23199] bridge208: port 1(syz_tun) entered disabled state [ 727.049138][T23199] bridge209: port 1(syz_tun) entered blocking state [ 727.059005][T23199] bridge209: port 1(syz_tun) entered disabled state [ 727.068208][T23199] device syz_tun entered promiscuous mode [ 727.080816][T23205] bridge482: port 1(syz_tun) entered blocking state [ 727.087474][T23205] bridge482: port 1(syz_tun) entered forwarding state 09:11:50 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x44a}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:11:50 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250402000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:11:50 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66302e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) 09:11:50 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x60a}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 727.170686][T23205] bond0: (slave bridge482): Enslaving as an active interface with an up link [ 727.202202][T23215] device syz_tun left promiscuous mode [ 727.233515][T23215] bridge127: port 1(syz_tun) entered disabled state [ 727.296875][T23215] bridge128: port 1(syz_tun) entered blocking state [ 727.303867][T23215] bridge128: port 1(syz_tun) entered disabled state [ 727.312192][T23215] device syz_tun entered promiscuous mode [ 727.319881][T23223] FAT-fs (loop1): bogus number of reserved sectors [ 727.339812][T23216] bridge128: port 1(syz_tun) entered blocking state [ 727.346470][T23216] bridge128: port 1(syz_tun) entered forwarding state [ 727.347219][T23223] FAT-fs (loop1): Can't find a valid FAT filesystem [ 727.360249][T23227] FAT-fs (loop3): bogus logical sector size 524 [ 727.368644][T23231] FAT-fs (loop2): bogus number of reserved sectors [ 727.379178][T23231] FAT-fs (loop2): Can't find a valid FAT filesystem [ 727.387855][T23227] FAT-fs (loop3): Can't find a valid FAT filesystem [ 727.402675][T23216] bond0: (slave bridge128): Enslaving as an active interface with an up link [ 727.412958][T23222] bridge482: port 1(syz_tun) entered disabled state 09:11:50 executing program 0: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 727.500513][T23229] device syz_tun left promiscuous mode [ 727.515217][T23229] bridge209: port 1(syz_tun) entered disabled state 09:11:50 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000251402000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 727.576978][T23231] FAT-fs (loop2): bogus number of reserved sectors [ 727.583556][T23231] FAT-fs (loop2): Can't find a valid FAT filesystem [ 727.587192][T23229] bridge210: port 1(syz_tun) entered blocking state [ 727.608168][T23227] FAT-fs (loop3): bogus logical sector size 524 [ 727.618114][T23223] FAT-fs (loop1): bogus number of reserved sectors [ 727.627343][T23227] FAT-fs (loop3): Can't find a valid FAT filesystem [ 727.639625][T23229] bridge210: port 1(syz_tun) entered disabled state [ 727.646770][T23223] FAT-fs (loop1): Can't find a valid FAT filesystem [ 727.647695][T23229] device syz_tun entered promiscuous mode [ 727.664162][T23233] bridge210: port 1(syz_tun) entered blocking state [ 727.670879][T23233] bridge210: port 1(syz_tun) entered forwarding state [ 727.689814][T23233] bond0: (slave bridge210): Enslaving as an active interface with an up link 09:11:50 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x700}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:11:50 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x44b}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 727.743085][T23238] bond0: (slave bridge129): Enslaving as an active interface with an up link [ 727.751973][ C1] net_ratelimit: 6 callbacks suppressed [ 727.751982][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 727.752007][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:11:51 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66582e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) 09:11:51 executing program 4: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200037400f801", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:11:51 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280007001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 727.989599][T23241] device syz_tun left promiscuous mode [ 728.003162][T23241] bridge482: port 1(syz_tun) entered disabled state [ 728.033499][T23243] FAT-fs (loop2): bogus number of reserved sectors [ 728.040342][T23245] FAT-fs (loop1): bogus number of reserved sectors [ 728.059355][T23245] FAT-fs (loop1): Can't find a valid FAT filesystem [ 728.071300][T23243] FAT-fs (loop2): Can't find a valid FAT filesystem [ 728.082041][T23241] bridge483: port 1(syz_tun) entered blocking state [ 728.094537][T23241] bridge483: port 1(syz_tun) entered disabled state [ 728.110871][T23241] device syz_tun entered promiscuous mode 09:11:51 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 728.134732][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 728.140635][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 728.155464][T23248] bridge483: port 1(syz_tun) entered blocking state [ 728.162129][T23248] bridge483: port 1(syz_tun) entered forwarding state [ 728.178973][T23248] bond0: (slave bridge483): Enslaving as an active interface with an up link [ 728.198390][T23254] device syz_tun left promiscuous mode [ 728.209234][T23254] bridge128: port 1(syz_tun) entered disabled state [ 728.257577][T23243] FAT-fs (loop2): bogus number of reserved sectors [ 728.264269][T23255] FAT-fs (loop3): bogus logical sector size 524 [ 728.277347][T23255] FAT-fs (loop3): Can't find a valid FAT filesystem [ 728.284116][T23243] FAT-fs (loop2): Can't find a valid FAT filesystem [ 728.295110][T23254] bridge130: port 1(syz_tun) entered blocking state [ 728.308271][T23245] FAT-fs (loop1): bogus number of reserved sectors [ 728.318335][T23245] FAT-fs (loop1): Can't find a valid FAT filesystem [ 728.331806][T23254] bridge130: port 1(syz_tun) entered disabled state [ 728.353163][T23254] device syz_tun entered promiscuous mode [ 728.363693][T23241] __nla_validate_parse: 15 callbacks suppressed [ 728.363702][T23241] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 728.396381][T23264] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:11:51 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280005001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:11:51 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000251c02000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:11:51 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x70a}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 728.469190][T23265] bond0: (slave bridge211): Enslaving as an active interface with an up link [ 728.477619][T23255] FAT-fs (loop3): bogus logical sector size 524 [ 728.505981][T23255] FAT-fs (loop3): Can't find a valid FAT filesystem 09:11:51 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x44c}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 728.613023][T23268] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 728.652984][T23268] device syz_tun left promiscuous mode 09:11:51 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b665c2e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 728.658952][T23268] bridge130: port 1(syz_tun) entered disabled state 09:11:51 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 728.709627][T23271] FAT-fs (loop2): bogus number of reserved sectors [ 728.719933][T23268] bridge131: port 1(syz_tun) entered blocking state [ 728.736813][T23268] bridge131: port 1(syz_tun) entered disabled state [ 728.743650][T23271] FAT-fs (loop2): Can't find a valid FAT filesystem [ 728.773812][T23268] device syz_tun entered promiscuous mode [ 728.787180][T23278] FAT-fs (loop1): bogus number of reserved sectors [ 728.794588][T23278] FAT-fs (loop1): Can't find a valid FAT filesystem [ 728.810837][T23272] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 728.845551][T23281] FAT-fs (loop3): bogus logical sector size 524 [ 728.854480][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 728.860249][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:11:52 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000251402000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 728.888589][T23281] FAT-fs (loop3): Can't find a valid FAT filesystem [ 728.899974][T23276] device syz_tun left promiscuous mode [ 728.918102][T23276] bridge483: port 1(syz_tun) entered disabled state [ 728.958547][T23271] FAT-fs (loop2): bogus number of reserved sectors [ 728.978901][T23276] bridge484: port 1(syz_tun) entered blocking state [ 728.989147][T23278] FAT-fs (loop1): bogus number of reserved sectors [ 728.998785][T23281] FAT-fs (loop3): bogus logical sector size 524 [ 729.007382][T23271] FAT-fs (loop2): Can't find a valid FAT filesystem [ 729.017652][T23278] FAT-fs (loop1): Can't find a valid FAT filesystem [ 729.024961][T23281] FAT-fs (loop3): Can't find a valid FAT filesystem [ 729.031819][T23276] bridge484: port 1(syz_tun) entered disabled state [ 729.041478][T23276] device syz_tun entered promiscuous mode 09:11:52 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x500}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 729.055335][T23277] bridge484: port 1(syz_tun) entered blocking state [ 729.061986][T23277] bridge484: port 1(syz_tun) entered forwarding state [ 729.118768][T23277] bond0: (slave bridge484): Enslaving as an active interface with an up link [ 729.144733][T23284] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:11:52 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x80a}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 729.177722][T23286] bond0: (slave bridge212): Enslaving as an active interface with an up link [ 729.204545][T23290] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 09:11:52 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66632e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 729.235703][T23291] device syz_tun left promiscuous mode [ 729.270289][T23291] bridge131: port 1(syz_tun) entered disabled state [ 729.346821][T23291] bridge132: port 1(syz_tun) entered blocking state [ 729.353815][T23291] bridge132: port 1(syz_tun) entered disabled state [ 729.380523][T23291] device syz_tun entered promiscuous mode 09:11:52 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280004001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 729.393146][T23295] FAT-fs (loop1): bogus number of reserved sectors [ 729.412067][T23298] FAT-fs (loop2): bogus number of reserved sectors [ 729.422405][T23295] FAT-fs (loop1): Can't find a valid FAT filesystem [ 729.441462][T23292] bridge132: port 1(syz_tun) entered blocking state [ 729.448306][T23292] bridge132: port 1(syz_tun) entered forwarding state [ 729.463628][T23298] FAT-fs (loop2): Can't find a valid FAT filesystem [ 729.496732][T23292] bond0: (slave bridge132): Enslaving as an active interface with an up link [ 729.513825][T23272] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 729.532969][T23293] bridge484: port 1(syz_tun) entered disabled state [ 729.561712][T23301] FAT-fs (loop3): bogus logical sector size 524 [ 729.579371][T23298] FAT-fs (loop2): bogus number of reserved sectors [ 729.586899][T23295] FAT-fs (loop1): bogus number of reserved sectors [ 729.594512][T23295] FAT-fs (loop1): Can't find a valid FAT filesystem [ 729.601184][T23298] FAT-fs (loop2): Can't find a valid FAT filesystem 09:11:52 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280003001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 729.612512][T23301] FAT-fs (loop3): Can't find a valid FAT filesystem [ 729.665138][T23303] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:11:52 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x900}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 729.705776][T23305] device syz_tun left promiscuous mode [ 729.711420][T23305] bridge210: port 1(syz_tun) entered disabled state 09:11:52 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000252402000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:11:52 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x50a}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 729.787826][T23301] FAT-fs (loop3): bogus logical sector size 524 [ 729.804209][T23301] FAT-fs (loop3): Can't find a valid FAT filesystem [ 729.814060][T23305] bridge213: port 1(syz_tun) entered blocking state [ 729.824514][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 729.827975][T23305] bridge213: port 1(syz_tun) entered disabled state [ 729.830305][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 729.841465][T23305] device syz_tun entered promiscuous mode [ 729.868478][T23311] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 729.895030][T23314] device syz_tun left promiscuous mode [ 729.900785][T23314] bridge132: port 1(syz_tun) entered disabled state [ 729.934522][T23313] FAT-fs (loop2): bogus number of reserved sectors 09:11:53 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66642e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 729.947117][T23314] bridge133: port 1(syz_tun) entered blocking state [ 729.967591][T23313] FAT-fs (loop2): Can't find a valid FAT filesystem [ 729.968664][T23314] bridge133: port 1(syz_tun) entered disabled state 09:11:53 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000251c02000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 729.995119][T23314] device syz_tun entered promiscuous mode [ 730.016993][T23317] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 730.054468][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 730.060248][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 730.064550][T23319] device syz_tun left promiscuous mode [ 730.072381][T23319] bridge484: port 1(syz_tun) entered disabled state [ 730.138116][T23319] bridge485: port 1(syz_tun) entered blocking state [ 730.154542][T23319] bridge485: port 1(syz_tun) entered disabled state [ 730.157500][T23313] FAT-fs (loop2): bogus number of reserved sectors [ 730.161844][T23319] device syz_tun entered promiscuous mode [ 730.168248][T23322] FAT-fs (loop1): bogus number of reserved sectors 09:11:53 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r6, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 730.182932][T23321] bridge485: port 1(syz_tun) entered blocking state [ 730.189718][T23321] bridge485: port 1(syz_tun) entered forwarding state [ 730.197134][T23313] FAT-fs (loop2): Can't find a valid FAT filesystem [ 730.203901][T23321] bond0: (slave bridge485): Enslaving as an active interface with an up link [ 730.213301][T23322] FAT-fs (loop1): Can't find a valid FAT filesystem [ 730.233153][T23327] device syz_tun left promiscuous mode [ 730.249164][T23327] bridge213: port 1(syz_tun) entered disabled state [ 730.288142][T23327] bridge214: port 1(syz_tun) entered blocking state [ 730.295025][T23327] bridge214: port 1(syz_tun) entered disabled state [ 730.302486][T23327] device syz_tun entered promiscuous mode [ 730.318622][T23326] bridge214: port 1(syz_tun) entered blocking state [ 730.325328][T23326] bridge214: port 1(syz_tun) entered forwarding state 09:11:53 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x90a}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 730.353615][T23329] FAT-fs (loop3): bogus logical sector size 524 [ 730.363359][T23322] FAT-fs (loop1): bogus number of reserved sectors [ 730.380064][T23329] FAT-fs (loop3): Can't find a valid FAT filesystem [ 730.387178][T23322] FAT-fs (loop1): Can't find a valid FAT filesystem [ 730.428177][T23326] bond0: (slave bridge214): Enslaving as an active interface with an up link [ 730.451899][T23330] bridge485: port 1(syz_tun) entered disabled state 09:11:53 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x600}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:11:53 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r6, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 730.544143][T23329] FAT-fs (loop3): bogus logical sector size 524 [ 730.564572][T23329] FAT-fs (loop3): Can't find a valid FAT filesystem 09:11:53 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000252c02000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 730.610472][T23336] bond0: (slave bridge134): Enslaving as an active interface with an up link [ 730.678392][T23339] FAT-fs (loop2): bogus number of reserved sectors [ 730.705746][T23342] FAT-fs (loop1): bogus number of reserved sectors [ 730.712291][T23342] FAT-fs (loop1): Can't find a valid FAT filesystem 09:11:53 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66692e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) 09:11:53 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000252402000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 730.734913][T23339] FAT-fs (loop2): Can't find a valid FAT filesystem [ 730.766885][T23346] bond0: (slave bridge215): Enslaving as an active interface with an up link 09:11:54 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000ea000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 730.830180][T23347] device syz_tun left promiscuous mode [ 730.843584][T23347] bridge485: port 1(syz_tun) entered disabled state [ 730.902695][T23347] bridge486: port 1(syz_tun) entered blocking state [ 730.914691][T23347] bridge486: port 1(syz_tun) entered disabled state [ 730.922095][T23347] device syz_tun entered promiscuous mode [ 730.954322][T23348] bridge486: port 1(syz_tun) entered blocking state [ 730.961176][T23348] bridge486: port 1(syz_tun) entered forwarding state [ 730.973246][T23342] FAT-fs (loop1): bogus number of reserved sectors [ 730.986225][T23342] FAT-fs (loop1): Can't find a valid FAT filesystem 09:11:54 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xa00}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 731.005530][T23348] bond0: (slave bridge486): Enslaving as an active interface with an up link [ 731.045211][T23355] FAT-fs (loop3): bogus logical sector size 524 09:11:54 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x700}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 731.063242][T23355] FAT-fs (loop3): Can't find a valid FAT filesystem [ 731.084498][T23354] device syz_tun left promiscuous mode [ 731.090163][T23354] bridge214: port 1(syz_tun) entered disabled state [ 731.141822][T23355] FAT-fs (loop3): bogus logical sector size 524 [ 731.166704][T23355] FAT-fs (loop3): Can't find a valid FAT filesystem [ 731.173609][T23367] FAT-fs (loop1): bogus number of reserved sectors [ 731.180415][T23367] FAT-fs (loop1): Can't find a valid FAT filesystem 09:11:54 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000253402000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 731.187581][T23366] FAT-fs (loop2): bogus number of reserved sectors [ 731.198751][T23366] FAT-fs (loop2): Can't find a valid FAT filesystem 09:11:54 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b666c2e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 731.237135][T23354] bridge216: port 1(syz_tun) entered blocking state [ 731.243788][T23354] bridge216: port 1(syz_tun) entered disabled state [ 731.252123][T23354] device syz_tun entered promiscuous mode [ 731.260021][T23358] device syz_tun left promiscuous mode [ 731.277768][T23358] bridge133: port 1(syz_tun) entered disabled state 09:11:54 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000252c02000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 731.357118][T23358] bridge135: port 1(syz_tun) entered blocking state [ 731.373114][T23367] FAT-fs (loop1): bogus number of reserved sectors [ 731.379913][T23366] FAT-fs (loop2): bogus number of reserved sectors [ 731.386541][T23358] bridge135: port 1(syz_tun) entered disabled state [ 731.403837][T23367] FAT-fs (loop1): Can't find a valid FAT filesystem [ 731.411005][T23366] FAT-fs (loop2): Can't find a valid FAT filesystem [ 731.415504][T23358] device syz_tun entered promiscuous mode [ 731.436038][T23376] FAT-fs (loop3): bogus logical sector size 524 [ 731.444657][T23357] bridge135: port 1(syz_tun) entered blocking state [ 731.451423][T23357] bridge135: port 1(syz_tun) entered forwarding state [ 731.458842][T23376] FAT-fs (loop3): Can't find a valid FAT filesystem [ 731.469115][T23357] bond0: (slave bridge135): Enslaving as an active interface with an up link 09:11:54 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xa03}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 731.519874][T23379] device syz_tun left promiscuous mode [ 731.532604][T23379] bridge486: port 1(syz_tun) entered disabled state 09:11:54 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00I\x00%\b\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 731.577149][T23376] FAT-fs (loop3): bogus logical sector size 524 [ 731.593061][T23379] bridge487: port 1(syz_tun) entered blocking state 09:11:54 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x70a}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 731.618676][T23379] bridge487: port 1(syz_tun) entered disabled state [ 731.628187][T23376] FAT-fs (loop3): Can't find a valid FAT filesystem [ 731.631299][T23379] device syz_tun entered promiscuous mode [ 731.647615][T23380] device syz_tun left promiscuous mode [ 731.659942][T23380] bridge216: port 1(syz_tun) entered disabled state [ 731.718424][T23380] bridge217: port 1(syz_tun) entered blocking state [ 731.729882][T23380] bridge217: port 1(syz_tun) entered disabled state [ 731.757970][T23388] FAT-fs (loop2): bogus number of reserved sectors 09:11:54 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b666f2e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 731.769364][T23380] device syz_tun entered promiscuous mode [ 731.784526][T23388] FAT-fs (loop2): Can't find a valid FAT filesystem [ 731.814199][T23381] bridge487: port 1(syz_tun) entered blocking state [ 731.820956][T23381] bridge487: port 1(syz_tun) entered forwarding state [ 731.858313][T23381] bond0: (slave bridge487): Enslaving as an active interface with an up link [ 731.879259][T23382] bridge217: port 1(syz_tun) entered blocking state [ 731.886011][T23382] bridge217: port 1(syz_tun) entered forwarding state [ 731.903376][T23392] FAT-fs (loop1): bogus number of reserved sectors [ 731.919183][T23395] FAT-fs (loop3): bogus logical sector size 524 [ 731.927165][T23388] FAT-fs (loop2): bogus number of reserved sectors [ 731.933754][T23392] FAT-fs (loop1): Can't find a valid FAT filesystem [ 731.944221][T23388] FAT-fs (loop2): Can't find a valid FAT filesystem [ 731.952041][T23395] FAT-fs (loop3): Can't find a valid FAT filesystem [ 731.966151][T23382] bond0: (slave bridge217): Enslaving as an active interface with an up link [ 731.992544][T23386] device syz_tun left promiscuous mode [ 732.004859][T23386] bridge135: port 1(syz_tun) entered disabled state 09:11:55 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 732.082166][T23386] bridge136: port 1(syz_tun) entered blocking state [ 732.107502][T23386] bridge136: port 1(syz_tun) entered disabled state [ 732.108942][T23395] FAT-fs (loop3): bogus logical sector size 524 09:11:55 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xa04}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 732.138953][T23395] FAT-fs (loop3): Can't find a valid FAT filesystem [ 732.158390][T23386] device syz_tun entered promiscuous mode 09:11:55 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x80a}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 732.204229][T23398] bridge487: port 1(syz_tun) entered disabled state 09:11:55 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66702e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 732.333066][T23402] device syz_tun left promiscuous mode [ 732.333076][T23406] FAT-fs (loop2): bogus number of reserved sectors [ 732.333097][T23406] FAT-fs (loop2): Can't find a valid FAT filesystem [ 732.359053][T23402] bridge217: port 1(syz_tun) entered disabled state 09:11:55 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000253c02000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:11:55 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000253402000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 732.384083][T23408] FAT-fs (loop1): bogus number of reserved sectors [ 732.420779][T23408] FAT-fs (loop1): Can't find a valid FAT filesystem [ 732.438873][T23406] FAT-fs (loop2): bogus number of reserved sectors [ 732.451053][T23406] FAT-fs (loop2): Can't find a valid FAT filesystem [ 732.503958][T23416] device syz_tun left promiscuous mode [ 732.510280][T23416] bridge487: port 1(syz_tun) entered disabled state [ 732.525506][T23412] FAT-fs (loop3): bogus logical sector size 524 [ 732.541082][T23412] FAT-fs (loop3): Can't find a valid FAT filesystem 09:11:55 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pselect6(0x8f, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000180)={0x9}, 0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400), 0x8}) [ 732.602364][T23416] bridge488: port 1(syz_tun) entered blocking state [ 732.622276][T23416] bridge488: port 1(syz_tun) entered disabled state [ 732.639321][T23408] FAT-fs (loop1): bogus number of reserved sectors [ 732.651850][T23408] FAT-fs (loop1): Can't find a valid FAT filesystem [ 732.663672][T23412] FAT-fs (loop3): bogus logical sector size 524 [ 732.683348][T23416] device syz_tun entered promiscuous mode [ 732.690830][T23412] FAT-fs (loop3): Can't find a valid FAT filesystem 09:11:55 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xa05}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 732.711440][T23418] bridge488: port 1(syz_tun) entered blocking state [ 732.718160][T23418] bridge488: port 1(syz_tun) entered forwarding state 09:11:56 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66752e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 732.758749][T23418] bond0: (slave bridge488): Enslaving as an active interface with an up link [ 732.774266][T23419] device syz_tun left promiscuous mode [ 732.784418][T23419] bridge136: port 1(syz_tun) entered disabled state 09:11:56 executing program 4: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0209027400f801", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 732.836751][T23419] bridge137: port 1(syz_tun) entered blocking state [ 732.854839][T23419] bridge137: port 1(syz_tun) entered disabled state 09:11:56 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x900}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 732.880143][T23419] device syz_tun entered promiscuous mode [ 732.896610][T23429] FAT-fs (loop2): bogus number of reserved sectors [ 732.909725][T23429] FAT-fs (loop2): Can't find a valid FAT filesystem 09:11:56 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000254402000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 732.927008][T23421] bridge137: port 1(syz_tun) entered blocking state [ 732.933663][T23421] bridge137: port 1(syz_tun) entered forwarding state [ 732.946892][T23421] bond0: (slave bridge137): Enslaving as an active interface with an up link [ 733.002009][T23432] FAT-fs (loop3): bogus logical sector size 524 [ 733.020003][T23432] FAT-fs (loop3): Can't find a valid FAT filesystem 09:11:56 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000253c02000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 733.075126][T23436] FAT-fs (loop1): bogus number of reserved sectors [ 733.088206][T23441] device syz_tun left promiscuous mode [ 733.093890][T23441] bridge488: port 1(syz_tun) entered disabled state [ 733.101708][T23436] FAT-fs (loop1): Can't find a valid FAT filesystem [ 733.132003][T23437] FAT-fs (loop4): bogus number of directory entries (521) [ 733.141339][T23437] FAT-fs (loop4): Can't find a valid FAT filesystem [ 733.153889][T23441] bridge489: port 1(syz_tun) entered blocking state [ 733.163156][T23441] bridge489: port 1(syz_tun) entered disabled state [ 733.177062][T23429] FAT-fs (loop2): bogus number of reserved sectors [ 733.192671][T23429] FAT-fs (loop2): Can't find a valid FAT filesystem [ 733.200704][T23441] device syz_tun entered promiscuous mode [ 733.222813][T23443] bridge489: port 1(syz_tun) entered blocking state [ 733.229517][T23443] bridge489: port 1(syz_tun) entered forwarding state [ 733.240322][T23443] bond0: (slave bridge489): Enslaving as an active interface with an up link [ 733.280104][T23446] device syz_tun left promiscuous mode [ 733.285960][T23446] bridge137: port 1(syz_tun) entered disabled state [ 733.319208][T23432] FAT-fs (loop3): bogus logical sector size 524 09:11:56 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xa06}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 733.327085][T23436] FAT-fs (loop1): bogus number of reserved sectors [ 733.330771][T23446] bridge138: port 1(syz_tun) entered blocking state [ 733.338014][T23432] FAT-fs (loop3): Can't find a valid FAT filesystem [ 733.352032][T23446] bridge138: port 1(syz_tun) entered disabled state [ 733.352494][T23436] FAT-fs (loop1): Can't find a valid FAT filesystem [ 733.368849][T23446] device syz_tun entered promiscuous mode 09:11:56 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00%\x00%\b\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 733.383319][T23443] device syz_tun left promiscuous mode [ 733.391387][T23443] bridge489: port 1(syz_tun) entered disabled state 09:11:56 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66782e6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 733.500327][T23449] bridge138: port 1(syz_tun) entered blocking state [ 733.507002][T23449] bridge138: port 1(syz_tun) entered forwarding state 09:11:56 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x90a}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:11:56 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000254c02000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 733.548706][T23452] FAT-fs (loop2): bogus number of reserved sectors [ 733.560495][T23449] bond0: (slave bridge138): Enslaving as an active interface with an up link [ 733.584727][T23452] FAT-fs (loop2): Can't find a valid FAT filesystem [ 733.604786][T23455] __nla_validate_parse: 17 callbacks suppressed [ 733.604800][T23455] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:11:56 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000254402000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 733.647288][T23458] bridge219: port 1(syz_tun) entered blocking state [ 733.673952][T23458] bridge219: port 1(syz_tun) entered disabled state [ 733.703083][T23458] device syz_tun entered promiscuous mode [ 733.755519][T23462] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 733.774845][T23457] FAT-fs (loop3): bogus logical sector size 524 [ 733.781183][T23452] FAT-fs (loop2): bogus number of reserved sectors [ 733.793899][T23452] FAT-fs (loop2): Can't find a valid FAT filesystem [ 733.801797][T23457] FAT-fs (loop3): Can't find a valid FAT filesystem [ 733.839317][T23455] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 733.852302][T23465] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 733.880865][T23466] bridge490: port 1(syz_tun) entered blocking state [ 733.897990][T23466] bridge490: port 1(syz_tun) entered disabled state 09:11:57 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xa07}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 733.926199][T23466] device syz_tun entered promiscuous mode [ 733.929570][T23457] FAT-fs (loop3): bogus logical sector size 524 [ 733.935037][T23468] device syz_tun left promiscuous mode [ 733.938604][T23467] FAT-fs (loop1): bogus number of reserved sectors [ 733.944348][T23468] bridge138: port 1(syz_tun) entered disabled state [ 733.964499][T23467] FAT-fs (loop1): Can't find a valid FAT filesystem [ 733.971598][T23457] FAT-fs (loop3): Can't find a valid FAT filesystem [ 733.978255][ C1] net_ratelimit: 18 callbacks suppressed [ 733.978263][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 733.978291][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:11:57 executing program 4: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a070a027400f801", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 734.017392][T23468] bridge139: port 1(syz_tun) entered blocking state [ 734.040338][T23468] bridge139: port 1(syz_tun) entered disabled state [ 734.050040][T23468] device syz_tun entered promiscuous mode [ 734.065526][T23462] bridge490: port 1(syz_tun) entered blocking state [ 734.072219][T23462] bridge490: port 1(syz_tun) entered forwarding state [ 734.101493][T23462] bond0: (slave bridge490): Enslaving as an active interface with an up link [ 734.117914][T23465] bridge139: port 1(syz_tun) entered blocking state [ 734.124593][T23465] bridge139: port 1(syz_tun) entered forwarding state [ 734.150219][T23474] FAT-fs (loop4): bogus number of directory entries (522) [ 734.165376][T23474] FAT-fs (loop4): Can't find a valid FAT filesystem 09:11:57 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xa00}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:11:57 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66730a6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 734.212470][T23465] bond0: (slave bridge139): Enslaving as an active interface with an up link [ 734.214478][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 734.227072][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 734.232864][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 734.238641][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 734.244454][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 734.250200][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:11:57 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2802d8001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 734.258066][T23466] device syz_tun left promiscuous mode [ 734.263891][T23466] bridge490: port 1(syz_tun) entered disabled state 09:11:57 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 734.332758][T23478] FAT-fs (loop2): bogus number of reserved sectors [ 734.365569][T23478] FAT-fs (loop2): Can't find a valid FAT filesystem [ 734.442590][T23484] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 734.444481][T23478] FAT-fs (loop2): bogus number of reserved sectors [ 734.458721][T23481] FAT-fs (loop3): bogus logical sector size 524 [ 734.468906][T23485] FAT-fs (loop1): bogus number of reserved sectors [ 734.470118][T23481] FAT-fs (loop3): Can't find a valid FAT filesystem [ 734.490602][T23489] device syz_tun left promiscuous mode [ 734.494886][T23485] FAT-fs (loop1): Can't find a valid FAT filesystem [ 734.499910][T23489] bridge139: port 1(syz_tun) entered disabled state [ 734.514922][T23478] FAT-fs (loop2): Can't find a valid FAT filesystem [ 734.530829][T23481] FAT-fs (loop3): bogus logical sector size 524 09:11:57 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000255402000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 734.540376][T23481] FAT-fs (loop3): Can't find a valid FAT filesystem [ 734.570120][T23489] bridge140: port 1(syz_tun) entered blocking state [ 734.579002][T23489] bridge140: port 1(syz_tun) entered disabled state [ 734.590310][T23489] device syz_tun entered promiscuous mode 09:11:57 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 734.614712][T23491] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 734.637608][T23485] FAT-fs (loop1): bogus number of reserved sectors [ 734.644154][T23485] FAT-fs (loop1): Can't find a valid FAT filesystem 09:11:57 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xa08}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:11:57 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b6673256661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 734.730505][T23493] device syz_tun left promiscuous mode 09:11:57 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xa03}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 734.779065][T23493] bridge219: port 1(syz_tun) entered disabled state [ 734.822457][T23503] FAT-fs (loop3): bogus logical sector size 524 [ 734.829777][T23503] FAT-fs (loop3): Can't find a valid FAT filesystem [ 734.841674][T23506] FAT-fs (loop2): bogus number of reserved sectors [ 734.843687][T23493] bridge220: port 1(syz_tun) entered blocking state [ 734.861927][T23506] FAT-fs (loop2): Can't find a valid FAT filesystem [ 734.868902][T23493] bridge220: port 1(syz_tun) entered disabled state [ 734.886780][T23493] device syz_tun entered promiscuous mode [ 734.905988][T23497] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 734.933183][T23498] bridge491: port 1(syz_tun) entered blocking state [ 734.943915][T23498] bridge491: port 1(syz_tun) entered disabled state [ 734.957954][T23498] device syz_tun entered promiscuous mode [ 734.971720][T23499] bridge491: port 1(syz_tun) entered blocking state 09:11:58 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28006c001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 734.978413][T23499] bridge491: port 1(syz_tun) entered forwarding state [ 734.997603][T23499] bond0: (slave bridge491): Enslaving as an active interface with an up link [ 735.009663][T23502] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 735.020051][T23506] FAT-fs (loop2): bogus number of reserved sectors [ 735.027772][T23506] FAT-fs (loop2): Can't find a valid FAT filesystem [ 735.029565][T23511] FAT-fs (loop1): bogus number of reserved sectors [ 735.035021][T23503] FAT-fs (loop3): bogus logical sector size 524 [ 735.047567][T23503] FAT-fs (loop3): Can't find a valid FAT filesystem [ 735.066307][T23498] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 735.074643][T23511] FAT-fs (loop1): Can't find a valid FAT filesystem 09:11:58 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xa09}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 735.104514][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 735.104586][T23508] device syz_tun left promiscuous mode [ 735.110310][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 735.122729][T23508] bridge140: port 1(syz_tun) entered disabled state 09:11:58 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732f6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 735.199439][T23511] FAT-fs (loop1): bogus number of reserved sectors [ 735.208113][T23508] bridge141: port 1(syz_tun) entered blocking state [ 735.214517][T23511] FAT-fs (loop1): Can't find a valid FAT filesystem [ 735.220656][T23508] bridge141: port 1(syz_tun) entered disabled state [ 735.245812][T23508] device syz_tun entered promiscuous mode [ 735.272032][T23517] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:11:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000255c02000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 735.312558][T23519] device syz_tun left promiscuous mode [ 735.321076][T23522] FAT-fs (loop2): bogus number of reserved sectors [ 735.345315][T23525] FAT-fs (loop3): bogus logical sector size 524 09:11:58 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xa04}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 735.364680][T23522] FAT-fs (loop2): Can't find a valid FAT filesystem [ 735.371515][T23519] bridge220: port 1(syz_tun) entered disabled state [ 735.377645][T23525] FAT-fs (loop3): Can't find a valid FAT filesystem 09:11:58 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280068001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 735.457249][T23519] bridge221: port 1(syz_tun) entered blocking state [ 735.468547][T23519] bridge221: port 1(syz_tun) entered disabled state [ 735.490919][T23519] device syz_tun entered promiscuous mode [ 735.514874][T23525] FAT-fs (loop3): bogus logical sector size 524 [ 735.521247][T23529] device syz_tun left promiscuous mode [ 735.529841][T23522] FAT-fs (loop2): bogus number of reserved sectors [ 735.530800][T23534] FAT-fs (loop1): bogus number of reserved sectors [ 735.544165][T23525] FAT-fs (loop3): Can't find a valid FAT filesystem [ 735.548129][T23534] FAT-fs (loop1): Can't find a valid FAT filesystem 09:11:58 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 735.560906][T23529] bridge491: port 1(syz_tun) entered disabled state [ 735.571609][T23522] FAT-fs (loop2): Can't find a valid FAT filesystem 09:11:58 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66733c6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 735.652532][T23529] bridge492: port 1(syz_tun) entered blocking state [ 735.659762][T23529] bridge492: port 1(syz_tun) entered disabled state [ 735.670826][T23529] device syz_tun entered promiscuous mode [ 735.684371][T23531] bridge492: port 1(syz_tun) entered blocking state [ 735.691100][T23531] bridge492: port 1(syz_tun) entered forwarding state [ 735.792472][T23531] bond0: (slave bridge492): Enslaving as an active interface with an up link [ 735.826574][T23538] device syz_tun left promiscuous mode 09:11:59 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xa05}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 735.840024][T23538] bridge141: port 1(syz_tun) entered disabled state 09:11:59 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xa0a}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 735.918193][T23544] FAT-fs (loop3): bogus logical sector size 524 [ 735.934314][T23538] bridge142: port 1(syz_tun) entered blocking state [ 735.947682][T23544] FAT-fs (loop3): Can't find a valid FAT filesystem [ 735.959819][T23538] bridge142: port 1(syz_tun) entered disabled state [ 735.995199][T23538] device syz_tun entered promiscuous mode [ 736.014202][T23543] device syz_tun left promiscuous mode [ 736.024013][T23543] bridge221: port 1(syz_tun) entered disabled state [ 736.063666][T23550] FAT-fs (loop2): bogus number of reserved sectors [ 736.071374][T23551] FAT-fs (loop1): bogus number of reserved sectors [ 736.078854][T23544] FAT-fs (loop3): bogus logical sector size 524 [ 736.093475][T23543] bridge222: port 1(syz_tun) entered blocking state [ 736.100294][T23550] FAT-fs (loop2): Can't find a valid FAT filesystem 09:11:59 executing program 0: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0c0a027400f801", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 736.114485][T23544] FAT-fs (loop3): Can't find a valid FAT filesystem [ 736.127685][T23543] bridge222: port 1(syz_tun) entered disabled state [ 736.139970][T23551] FAT-fs (loop1): Can't find a valid FAT filesystem [ 736.155489][T23543] device syz_tun entered promiscuous mode [ 736.182029][T23547] bridge492: port 1(syz_tun) entered disabled state 09:11:59 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280060001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:11:59 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b6673456661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) 09:11:59 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xa0b}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 736.307051][T23551] FAT-fs (loop1): bogus number of reserved sectors [ 736.334557][T23551] FAT-fs (loop1): Can't find a valid FAT filesystem 09:11:59 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000256402000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 736.376144][T23558] FAT-fs (loop0): bogus number of directory entries (522) [ 736.420049][T23558] FAT-fs (loop0): Can't find a valid FAT filesystem [ 736.442050][T23561] device syz_tun left promiscuous mode [ 736.463183][T23562] FAT-fs (loop3): bogus logical sector size 524 [ 736.474221][T23561] bridge222: port 1(syz_tun) entered disabled state [ 736.496215][T23562] FAT-fs (loop3): Can't find a valid FAT filesystem 09:11:59 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xa07}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 736.549973][T23561] bridge223: port 1(syz_tun) entered blocking state [ 736.584778][T23561] bridge223: port 1(syz_tun) entered disabled state 09:11:59 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000255c02000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 736.611322][T23561] device syz_tun entered promiscuous mode [ 736.645228][T23567] FAT-fs (loop2): bogus number of reserved sectors [ 736.652928][T23567] FAT-fs (loop2): Can't find a valid FAT filesystem [ 736.700493][T23562] FAT-fs (loop3): bogus logical sector size 524 [ 736.707659][T23572] device syz_tun left promiscuous mode [ 736.713242][T23562] FAT-fs (loop3): Can't find a valid FAT filesystem [ 736.725911][T23572] bridge492: port 1(syz_tun) entered disabled state 09:11:59 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280060001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 736.836737][T23572] bridge493: port 1(syz_tun) entered blocking state [ 736.845784][T23567] FAT-fs (loop2): bogus number of reserved sectors [ 736.861602][T23573] FAT-fs (loop1): bogus number of reserved sectors [ 736.868480][T23573] FAT-fs (loop1): Can't find a valid FAT filesystem [ 736.873540][T23567] FAT-fs (loop2): Can't find a valid FAT filesystem [ 736.882141][T23572] bridge493: port 1(syz_tun) entered disabled state 09:12:00 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b6673496661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 736.910267][T23572] device syz_tun entered promiscuous mode [ 736.929700][T23568] bridge493: port 1(syz_tun) entered blocking state [ 736.936611][T23568] bridge493: port 1(syz_tun) entered forwarding state 09:12:00 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xa0c}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 736.962677][T23568] bond0: (slave bridge493): Enslaving as an active interface with an up link [ 736.992028][T23580] device syz_tun left promiscuous mode [ 736.997838][T23580] bridge223: port 1(syz_tun) entered disabled state [ 737.087025][T23580] bridge224: port 1(syz_tun) entered blocking state 09:12:00 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xa08}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 737.131736][T23580] bridge224: port 1(syz_tun) entered disabled state [ 737.145276][T23580] device syz_tun entered promiscuous mode [ 737.169616][T23581] device syz_tun left promiscuous mode [ 737.181371][T23581] bridge142: port 1(syz_tun) entered disabled state [ 737.198359][T23587] FAT-fs (loop3): bogus logical sector size 524 [ 737.205248][T23588] FAT-fs (loop2): bogus number of reserved sectors [ 737.214258][T23587] FAT-fs (loop3): Can't find a valid FAT filesystem [ 737.227287][T23588] FAT-fs (loop2): Can't find a valid FAT filesystem [ 737.237328][T23581] bridge143: port 1(syz_tun) entered blocking state [ 737.253921][T23581] bridge143: port 1(syz_tun) entered disabled state 09:12:00 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 737.280706][T23581] device syz_tun entered promiscuous mode [ 737.292939][T23579] bridge143: port 1(syz_tun) entered blocking state [ 737.299747][T23579] bridge143: port 1(syz_tun) entered forwarding state [ 737.341165][T23579] bond0: (slave bridge143): Enslaving as an active interface with an up link [ 737.358214][T23584] bridge493: port 1(syz_tun) entered disabled state [ 737.393527][T23592] FAT-fs (loop1): bogus number of reserved sectors [ 737.405144][T23587] FAT-fs (loop3): bogus logical sector size 524 [ 737.411939][T23588] FAT-fs (loop2): bogus number of reserved sectors [ 737.422065][T23587] FAT-fs (loop3): Can't find a valid FAT filesystem [ 737.433130][T23592] FAT-fs (loop1): Can't find a valid FAT filesystem [ 737.443525][T23588] FAT-fs (loop2): Can't find a valid FAT filesystem 09:12:00 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000256c02000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:12:00 executing program 0 (fault-call:12 fault-nth:0): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 737.556742][T23597] device syz_tun left promiscuous mode 09:12:00 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66735c6661740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 737.617487][T23592] FAT-fs (loop1): bogus number of reserved sectors [ 737.624149][T23592] FAT-fs (loop1): Can't find a valid FAT filesystem [ 737.631433][T23597] bridge224: port 1(syz_tun) entered disabled state 09:12:00 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xa0d}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 737.707763][T23597] bridge225: port 1(syz_tun) entered blocking state [ 737.714710][T23597] bridge225: port 1(syz_tun) entered disabled state [ 737.722344][T23597] device syz_tun entered promiscuous mode [ 737.755387][T23607] FAULT_INJECTION: forcing a failure. [ 737.755387][T23607] name failslab, interval 1, probability 0, space 0, times 0 [ 737.784569][T23607] CPU: 1 PID: 23607 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0 [ 737.793574][T23607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 737.803651][T23607] Call Trace: [ 737.806963][T23607] dump_stack+0x11d/0x181 [ 737.811307][T23607] should_fail.cold+0xa/0x1a [ 737.815922][T23607] __should_failslab+0xee/0x130 [ 737.819436][T23604] device syz_tun left promiscuous mode [ 737.821007][T23607] should_failslab+0x9/0x14 [ 737.821028][T23607] kmem_cache_alloc_node+0x39/0x660 [ 737.821118][T23607] __alloc_skb+0x8e/0x360 [ 737.839861][T23604] bridge143: port 1(syz_tun) entered disabled state [ 737.840710][T23607] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 737.853504][T23607] ? netlink_autobind.isra.0+0x135/0x170 [ 737.859178][T23607] netlink_sendmsg+0x667/0x8b0 [ 737.863980][T23607] ? netlink_unicast+0x4d0/0x4d0 [ 737.869005][T23607] sock_sendmsg+0x9f/0xc0 [ 737.873359][T23607] ____sys_sendmsg+0x49d/0x4d0 [ 737.878364][T23607] ___sys_sendmsg+0xb5/0x100 [ 737.883142][T23607] ? __fget+0xb8/0x1d0 [ 737.887350][T23607] ? __fget_light+0xaf/0x190 [ 737.891957][T23607] ? __fdget+0x2c/0x40 [ 737.896049][T23607] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 737.902320][T23607] __sys_sendmsg+0xa0/0x160 [ 737.906966][T23607] __x64_sys_sendmsg+0x51/0x70 [ 737.911744][T23607] do_syscall_64+0xcc/0x3a0 [ 737.916274][T23607] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 737.922169][T23607] RIP: 0033:0x45b399 [ 737.926091][T23607] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 737.945792][T23607] RSP: 002b:00007f082d569c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 737.954385][T23607] RAX: ffffffffffffffda RBX: 00007f082d56a6d4 RCX: 000000000045b399 [ 737.962395][T23607] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000008 [ 737.970377][T23607] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 737.978508][T23607] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 737.986560][T23607] R13: 00000000000009ca R14: 00000000004cb3bb R15: 0000000000000000 09:12:01 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xa09}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 738.041009][T23608] FAT-fs (loop3): bogus logical sector size 524 [ 738.049654][T23604] bridge144: port 1(syz_tun) entered blocking state [ 738.071441][T23608] FAT-fs (loop3): Can't find a valid FAT filesystem [ 738.078384][T23604] bridge144: port 1(syz_tun) entered disabled state 09:12:01 executing program 4 (fault-call:8 fault-nth:0): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) [ 738.089972][T23604] device syz_tun entered promiscuous mode [ 738.098195][T23606] device syz_tun left promiscuous mode [ 738.104022][T23606] bridge493: port 1(syz_tun) entered disabled state [ 738.148044][T23606] bridge494: port 1(syz_tun) entered blocking state [ 738.165950][T23606] bridge494: port 1(syz_tun) entered disabled state [ 738.183585][T23606] device syz_tun entered promiscuous mode [ 738.189886][T23612] FAT-fs (loop2): bogus number of reserved sectors [ 738.204381][T23612] FAT-fs (loop2): Can't find a valid FAT filesystem [ 738.228877][T23608] FAT-fs (loop3): bogus logical sector size 524 [ 738.238390][T23615] FAT-fs (loop1): bogus number of reserved sectors 09:12:01 executing program 0 (fault-call:12 fault-nth:1): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 738.248452][T23603] bridge494: port 1(syz_tun) entered blocking state [ 738.255183][T23603] bridge494: port 1(syz_tun) entered forwarding state [ 738.274117][T23608] FAT-fs (loop3): Can't find a valid FAT filesystem [ 738.283225][T23615] FAT-fs (loop1): Can't find a valid FAT filesystem [ 738.305167][T23603] bond0: (slave bridge494): Enslaving as an active interface with an up link [ 738.338690][T23619] FAULT_INJECTION: forcing a failure. [ 738.338690][T23619] name failslab, interval 1, probability 0, space 0, times 0 [ 738.369571][T23619] CPU: 1 PID: 23619 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0 [ 738.378494][T23619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 738.388555][T23619] Call Trace: [ 738.391890][T23619] dump_stack+0x11d/0x181 [ 738.396273][T23619] should_fail.cold+0xa/0x1a [ 738.400902][T23619] __should_failslab+0xee/0x130 [ 738.405786][T23619] should_failslab+0x9/0x14 [ 738.410320][T23619] kmem_cache_alloc_node+0x39/0x660 [ 738.415545][T23619] ? __netlink_lookup+0x24e/0x300 [ 738.420670][T23619] __alloc_skb+0x8e/0x360 [ 738.425016][T23619] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 738.431352][T23619] ? netlink_autobind.isra.0+0x135/0x170 [ 738.437117][T23619] netlink_sendmsg+0x667/0x8b0 [ 738.441976][T23619] ? netlink_unicast+0x4d0/0x4d0 [ 738.446950][T23619] sock_sendmsg+0x9f/0xc0 [ 738.451393][T23619] ____sys_sendmsg+0x49d/0x4d0 [ 738.456277][T23619] ___sys_sendmsg+0xb5/0x100 [ 738.460885][T23619] ? __fget+0xb8/0x1d0 [ 738.465065][T23619] ? __fget_light+0xaf/0x190 [ 738.469671][T23619] ? __fdget+0x2c/0x40 [ 738.473862][T23619] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 738.480232][T23619] __sys_sendmsg+0xa0/0x160 [ 738.484799][T23619] __x64_sys_sendmsg+0x51/0x70 [ 738.489614][T23619] do_syscall_64+0xcc/0x3a0 [ 738.494134][T23619] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 738.498405][T23621] device syz_tun left promiscuous mode [ 738.500059][T23619] RIP: 0033:0x45b399 09:12:01 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e0a61740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 738.500092][T23619] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 738.518865][T23621] bridge144: port 1(syz_tun) entered disabled state [ 738.529161][T23619] RSP: 002b:00007ff7fc8a3c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 738.529181][T23619] RAX: ffffffffffffffda RBX: 00007ff7fc8a46d4 RCX: 000000000045b399 [ 738.529191][T23619] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005 [ 738.529202][T23619] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 738.529212][T23619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 738.529233][T23619] R13: 00000000000009ca R14: 00000000004cb3bb R15: 0000000000000000 [ 738.573525][T23622] FAULT_INJECTION: forcing a failure. [ 738.573525][T23622] name failslab, interval 1, probability 0, space 0, times 0 [ 738.625995][T23622] CPU: 0 PID: 23622 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0 [ 738.634706][T23622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 738.644763][T23622] Call Trace: [ 738.648136][T23622] dump_stack+0x11d/0x181 [ 738.652696][T23622] should_fail.cold+0xa/0x1a [ 738.657304][T23622] __should_failslab+0xee/0x130 [ 738.662208][T23622] should_failslab+0x9/0x14 [ 738.666808][T23622] kmem_cache_alloc_node_trace+0x3b/0x670 [ 738.672554][T23622] ? memcg_kmem_put_cache+0x7c/0xc0 [ 738.677775][T23622] __kmalloc_node_track_caller+0x38/0x50 [ 738.683432][T23622] __kmalloc_reserve.isra.0+0x49/0xd0 [ 738.688830][T23622] __alloc_skb+0xc2/0x360 [ 738.693214][T23622] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 738.699534][T23622] ? netlink_autobind.isra.0+0x135/0x170 [ 738.705199][T23622] netlink_sendmsg+0x667/0x8b0 [ 738.710150][T23622] ? netlink_unicast+0x4d0/0x4d0 [ 738.715124][T23622] sock_sendmsg+0x9f/0xc0 [ 738.719568][T23622] ____sys_sendmsg+0x49d/0x4d0 [ 738.724366][T23622] ___sys_sendmsg+0xb5/0x100 [ 738.729004][T23622] ? __fget+0xb8/0x1d0 [ 738.733150][T23622] ? __fget_light+0xaf/0x190 [ 738.737764][T23622] ? __fdget+0x2c/0x40 [ 738.741924][T23622] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 738.748236][T23622] __sys_sendmsg+0xa0/0x160 [ 738.752879][T23622] __x64_sys_sendmsg+0x51/0x70 [ 738.757756][T23622] do_syscall_64+0xcc/0x3a0 [ 738.762395][T23622] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 738.768343][T23622] RIP: 0033:0x45b399 [ 738.772266][T23622] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 738.791957][T23622] RSP: 002b:00007f082d58ac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 738.800396][T23622] RAX: ffffffffffffffda RBX: 00007f082d58b6d4 RCX: 000000000045b399 [ 738.808438][T23622] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000008 [ 738.816469][T23622] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 09:12:02 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000258402000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 738.824465][T23622] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 738.832620][T23622] R13: 00000000000009ca R14: 00000000004cb3bb R15: 0000000000000001 [ 738.847170][T23621] bridge145: port 1(syz_tun) entered blocking state [ 738.854207][T23621] bridge145: port 1(syz_tun) entered disabled state 09:12:02 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xa0e}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 738.875225][T23621] device syz_tun entered promiscuous mode [ 738.896078][T23615] FAT-fs (loop1): bogus number of reserved sectors [ 738.911206][T23627] FAT-fs (loop3): bogus logical sector size 524 [ 738.917649][T23627] FAT-fs (loop3): Can't find a valid FAT filesystem 09:12:02 executing program 4 (fault-call:8 fault-nth:1): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) [ 738.928258][T23615] FAT-fs (loop1): Can't find a valid FAT filesystem [ 738.960720][T23629] __nla_validate_parse: 14 callbacks suppressed [ 738.960734][T23629] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 09:12:02 executing program 0 (fault-call:12 fault-nth:2): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 738.988894][T23629] device syz_tun left promiscuous mode [ 739.022599][T23629] bridge494: port 1(syz_tun) entered disabled state [ 739.028161][T23627] FAT-fs (loop3): bogus logical sector size 524 09:12:02 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xa0a}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 739.043747][T23627] FAT-fs (loop3): Can't find a valid FAT filesystem [ 739.078604][T23629] bridge495: port 1(syz_tun) entered blocking state [ 739.096260][T23629] bridge495: port 1(syz_tun) entered disabled state [ 739.104028][T23629] device syz_tun entered promiscuous mode [ 739.116376][T23638] FAULT_INJECTION: forcing a failure. [ 739.116376][T23638] name failslab, interval 1, probability 0, space 0, times 0 [ 739.119288][T23633] bridge495: port 1(syz_tun) entered blocking state [ 739.135930][T23633] bridge495: port 1(syz_tun) entered forwarding state [ 739.139140][T23638] CPU: 0 PID: 23638 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0 [ 739.151554][T23638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 739.161612][T23638] Call Trace: [ 739.164932][T23638] dump_stack+0x11d/0x181 [ 739.169364][T23638] should_fail.cold+0xa/0x1a [ 739.173975][T23638] __should_failslab+0xee/0x130 [ 739.178955][T23638] should_failslab+0x9/0x14 [ 739.182672][T23633] bond0: (slave bridge495): Enslaving as an active interface with an up link [ 739.183532][T23638] kmem_cache_alloc_node_trace+0x3b/0x670 [ 739.183564][T23638] ? memcg_kmem_put_cache+0x7c/0xc0 [ 739.203380][T23638] __kmalloc_node_track_caller+0x38/0x50 [ 739.203416][T23634] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 739.209143][T23638] __kmalloc_reserve.isra.0+0x49/0xd0 [ 739.209165][T23638] __alloc_skb+0xc2/0x360 [ 739.209257][T23638] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 739.209291][T23638] ? netlink_autobind.isra.0+0x135/0x170 [ 739.240139][T23638] netlink_sendmsg+0x667/0x8b0 [ 739.245003][T23638] ? netlink_unicast+0x4d0/0x4d0 [ 739.249966][T23638] sock_sendmsg+0x9f/0xc0 [ 739.254318][T23638] ____sys_sendmsg+0x49d/0x4d0 [ 739.259127][T23638] ___sys_sendmsg+0xb5/0x100 [ 739.263779][T23638] ? __fget+0xb8/0x1d0 [ 739.267996][T23638] ? __fget_light+0xaf/0x190 [ 739.272600][T23638] ? __fdget+0x2c/0x40 [ 739.276680][T23638] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 739.282995][T23638] __sys_sendmsg+0xa0/0x160 [ 739.287632][T23638] __x64_sys_sendmsg+0x51/0x70 [ 739.287641][T23637] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 739.301765][T23638] do_syscall_64+0xcc/0x3a0 [ 739.305072][T23637] device syz_tun left promiscuous mode [ 739.306509][T23638] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 739.315478][T23637] bridge145: port 1(syz_tun) entered disabled state [ 739.317824][T23638] RIP: 0033:0x45b399 [ 739.317922][T23638] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 739.317942][T23638] RSP: 002b:00007ff7fc882c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 739.353961][T23639] FAULT_INJECTION: forcing a failure. [ 739.353961][T23639] name failslab, interval 1, probability 0, space 0, times 0 [ 739.356623][T23638] RAX: ffffffffffffffda RBX: 00007ff7fc8836d4 RCX: 000000000045b399 [ 739.356635][T23638] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005 [ 739.356646][T23638] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 739.356657][T23638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 739.356667][T23638] R13: 00000000000009ca R14: 00000000004cb3bb R15: 0000000000000001 [ 739.369724][ C1] net_ratelimit: 4 callbacks suppressed [ 739.369735][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 739.369760][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 739.429271][T23639] CPU: 1 PID: 23639 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0 [ 739.437952][T23639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 739.448018][T23639] Call Trace: [ 739.451434][T23639] dump_stack+0x11d/0x181 [ 739.455828][T23639] should_fail.cold+0xa/0x1a [ 739.460455][T23639] __should_failslab+0xee/0x130 [ 739.465381][T23639] should_failslab+0x9/0x14 [ 739.469970][T23639] kmem_cache_alloc+0x29/0x5d0 [ 739.474802][T23639] ? __rcu_read_unlock+0x66/0x3d0 [ 739.479908][T23639] ? memcg_kmem_put_cache+0x7c/0xc0 [ 739.485176][T23639] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 739.491089][T23639] skb_clone+0xf9/0x290 [ 739.495331][T23639] netlink_deliver_tap+0x428/0x4a0 [ 739.500615][T23639] netlink_unicast+0x43a/0x4d0 [ 739.505398][T23639] netlink_sendmsg+0x4d3/0x8b0 [ 739.510189][T23639] ? netlink_unicast+0x4d0/0x4d0 [ 739.515262][T23639] sock_sendmsg+0x9f/0xc0 [ 739.519611][T23639] ____sys_sendmsg+0x49d/0x4d0 [ 739.524403][T23639] ___sys_sendmsg+0xb5/0x100 [ 739.529178][T23639] ? __fget+0xb8/0x1d0 [ 739.533260][T23639] ? __fget_light+0xaf/0x190 [ 739.537896][T23639] ? __fdget+0x2c/0x40 [ 739.541991][T23639] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 739.548253][T23639] __sys_sendmsg+0xa0/0x160 [ 739.552844][T23639] __x64_sys_sendmsg+0x51/0x70 [ 739.557630][T23639] do_syscall_64+0xcc/0x3a0 [ 739.562249][T23639] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 739.568150][T23639] RIP: 0033:0x45b399 [ 739.572074][T23639] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 09:12:02 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e2561740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 739.591900][T23639] RSP: 002b:00007f082d58ac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 739.600369][T23639] RAX: ffffffffffffffda RBX: 00007f082d58b6d4 RCX: 000000000045b399 [ 739.608352][T23639] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000008 [ 739.616397][T23639] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 739.624376][T23639] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 739.632359][T23639] R13: 00000000000009ca R14: 00000000004cb3bb R15: 0000000000000002 09:12:02 executing program 4 (fault-call:8 fault-nth:2): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) [ 739.676857][T23637] bridge146: port 1(syz_tun) entered blocking state [ 739.683623][T23637] bridge146: port 1(syz_tun) entered disabled state [ 739.685762][T23635] FAT-fs (loop2): bogus number of reserved sectors [ 739.704344][T23637] device syz_tun entered promiscuous mode [ 739.723139][T23635] FAT-fs (loop2): Can't find a valid FAT filesystem [ 739.742195][T23642] bridge495: port 1(syz_tun) entered disabled state [ 739.796501][T23645] FAT-fs (loop3): bogus logical sector size 524 [ 739.808090][T23635] FAT-fs (loop2): bogus number of reserved sectors [ 739.818759][T23646] FAT-fs (loop1): bogus number of reserved sectors [ 739.829419][T23635] FAT-fs (loop2): Can't find a valid FAT filesystem [ 739.851248][T23645] FAT-fs (loop3): Can't find a valid FAT filesystem [ 739.858342][T23646] FAT-fs (loop1): Can't find a valid FAT filesystem [ 739.881849][T23639] bridge146: port 1(syz_tun) entered blocking state [ 739.888545][T23639] bridge146: port 1(syz_tun) entered forwarding state 09:12:03 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xb0a}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 739.941861][T23639] bond0: (slave bridge146): Enslaving as an active interface with an up link [ 739.960721][T23652] FAULT_INJECTION: forcing a failure. [ 739.960721][T23652] name failslab, interval 1, probability 0, space 0, times 0 09:12:03 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000258c02000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 740.003978][T23651] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:12:03 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 740.044885][T23652] CPU: 0 PID: 23652 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0 [ 740.053611][T23652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 740.063671][T23652] Call Trace: [ 740.067052][T23652] dump_stack+0x11d/0x181 [ 740.071403][T23652] should_fail.cold+0xa/0x1a [ 740.076011][T23652] __should_failslab+0xee/0x130 [ 740.080976][T23652] should_failslab+0x9/0x14 [ 740.085487][T23652] kmem_cache_alloc+0x29/0x5d0 [ 740.090251][T23652] ? __const_udelay+0x36/0x40 [ 740.094918][T23652] ? __udelay+0x10/0x20 [ 740.099147][T23652] skb_clone+0xf9/0x290 [ 740.103336][T23652] netlink_deliver_tap+0x428/0x4a0 [ 740.108455][T23652] netlink_unicast+0x43a/0x4d0 [ 740.113254][T23652] netlink_sendmsg+0x4d3/0x8b0 [ 740.118088][T23652] ? netlink_unicast+0x4d0/0x4d0 [ 740.123019][T23652] sock_sendmsg+0x9f/0xc0 [ 740.127362][T23652] ____sys_sendmsg+0x49d/0x4d0 [ 740.132251][T23652] ___sys_sendmsg+0xb5/0x100 [ 740.136988][T23652] ? __fget+0xb8/0x1d0 [ 740.141060][T23652] ? __fget_light+0xaf/0x190 [ 740.145677][T23652] ? __fdget+0x2c/0x40 [ 740.149932][T23652] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 740.156305][T23652] __sys_sendmsg+0xa0/0x160 [ 740.160873][T23652] __x64_sys_sendmsg+0x51/0x70 [ 740.165629][T23652] do_syscall_64+0xcc/0x3a0 [ 740.170235][T23652] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 740.176112][T23652] RIP: 0033:0x45b399 [ 740.180015][T23652] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 740.199873][T23652] RSP: 002b:00007ff7fc882c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 740.208272][T23652] RAX: ffffffffffffffda RBX: 00007ff7fc8836d4 RCX: 000000000045b399 [ 740.216272][T23652] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005 [ 740.224234][T23652] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 740.232192][T23652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 09:12:03 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xa0b}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 740.240160][T23652] R13: 00000000000009ca R14: 00000000004cb3bb R15: 0000000000000002 [ 740.254564][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 740.260384][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 740.281004][T23652] device syz_tun left promiscuous mode [ 740.286860][T23652] bridge225: port 1(syz_tun) entered disabled state [ 740.328657][T23652] bridge228: port 1(syz_tun) entered blocking state [ 740.339976][T23645] FAT-fs (loop3): bogus logical sector size 524 [ 740.346469][T23645] FAT-fs (loop3): Can't find a valid FAT filesystem [ 740.349385][T23652] bridge228: port 1(syz_tun) entered disabled state [ 740.359438][T23659] FAT-fs (loop2): bogus number of reserved sectors [ 740.367622][T23659] FAT-fs (loop2): Can't find a valid FAT filesystem 09:12:03 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e2e61740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 740.392030][T23652] device syz_tun entered promiscuous mode [ 740.409445][T23661] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 09:12:03 executing program 4 (fault-call:8 fault-nth:3): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) [ 740.447971][T23659] FAT-fs (loop2): bogus number of reserved sectors [ 740.458185][T23663] FAT-fs (loop1): bogus number of reserved sectors [ 740.470822][T23659] FAT-fs (loop2): Can't find a valid FAT filesystem [ 740.472988][T23662] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 740.485514][T23663] FAT-fs (loop1): Can't find a valid FAT filesystem [ 740.522012][T23666] device syz_tun left promiscuous mode [ 740.547850][T23666] bridge146: port 1(syz_tun) entered disabled state [ 740.605750][T23670] FAT-fs (loop3): bogus logical sector size 524 [ 740.612111][T23663] FAT-fs (loop1): bogus number of reserved sectors [ 740.614499][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 740.624622][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 740.630120][T23663] FAT-fs (loop1): Can't find a valid FAT filesystem [ 740.641864][T23670] FAT-fs (loop3): Can't find a valid FAT filesystem 09:12:03 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xc00}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 740.657479][T23666] bridge147: port 1(syz_tun) entered blocking state [ 740.688132][T23666] bridge147: port 1(syz_tun) entered disabled state [ 740.712691][T23666] device syz_tun entered promiscuous mode [ 740.736875][T23667] device syz_tun left promiscuous mode [ 740.742514][T23667] bridge495: port 1(syz_tun) entered disabled state [ 740.756037][T23676] FAULT_INJECTION: forcing a failure. [ 740.756037][T23676] name failslab, interval 1, probability 0, space 0, times 0 [ 740.768764][T23676] CPU: 0 PID: 23676 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0 [ 740.777665][T23676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 740.787749][T23676] Call Trace: [ 740.791148][T23676] dump_stack+0x11d/0x181 [ 740.795560][T23676] should_fail.cold+0xa/0x1a [ 740.800161][T23676] __should_failslab+0xee/0x130 [ 740.805139][T23676] should_failslab+0x9/0x14 [ 740.809692][T23676] kmem_cache_alloc+0x29/0x5d0 [ 740.814587][T23676] skb_clone+0xf9/0x290 [ 740.818930][T23676] dev_queue_xmit_nit+0x2a8/0x5e0 [ 740.823965][T23676] dev_hard_start_xmit+0x3f5/0x430 [ 740.829097][T23676] __dev_queue_xmit+0x14e9/0x1ba0 [ 740.834134][T23676] ? __write_once_size+0x5a/0xe0 [ 740.839080][T23676] dev_queue_xmit+0x21/0x30 [ 740.843601][T23676] netlink_deliver_tap+0x3d5/0x4a0 [ 740.848730][T23676] netlink_unicast+0x43a/0x4d0 [ 740.853537][T23676] netlink_sendmsg+0x4d3/0x8b0 [ 740.858488][T23676] ? netlink_unicast+0x4d0/0x4d0 [ 740.863508][T23676] sock_sendmsg+0x9f/0xc0 [ 740.867961][T23676] ____sys_sendmsg+0x49d/0x4d0 [ 740.872748][T23676] ___sys_sendmsg+0xb5/0x100 [ 740.877360][T23676] ? __fget+0xb8/0x1d0 [ 740.881457][T23676] ? __fget_light+0xaf/0x190 [ 740.886066][T23676] ? __fdget+0x2c/0x40 [ 740.890151][T23676] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 740.896414][T23676] __sys_sendmsg+0xa0/0x160 [ 740.900969][T23676] __x64_sys_sendmsg+0x51/0x70 [ 740.905824][T23676] do_syscall_64+0xcc/0x3a0 [ 740.910375][T23676] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 740.916283][T23676] RIP: 0033:0x45b399 [ 740.920212][T23676] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 740.939818][T23676] RSP: 002b:00007ff7fc882c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 740.948457][T23676] RAX: ffffffffffffffda RBX: 00007ff7fc8836d4 RCX: 000000000045b399 09:12:04 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xa0c}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 740.956583][T23676] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005 [ 740.964565][T23676] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 740.972564][T23676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 740.980547][T23676] R13: 00000000000009ca R14: 00000000004cb3bb R15: 0000000000000003 [ 741.042529][T23667] bridge496: port 1(syz_tun) entered blocking state [ 741.049447][T23667] bridge496: port 1(syz_tun) entered disabled state [ 741.062330][T23667] device syz_tun entered promiscuous mode [ 741.073417][T23661] bridge496: port 1(syz_tun) entered blocking state [ 741.080180][T23661] bridge496: port 1(syz_tun) entered forwarding state [ 741.099303][T23661] bond0: (slave bridge496): Enslaving as an active interface with an up link [ 741.114132][T23671] bridge147: port 1(syz_tun) entered blocking state [ 741.120873][T23671] bridge147: port 1(syz_tun) entered forwarding state [ 741.138317][T23670] FAT-fs (loop3): bogus logical sector size 524 [ 741.152164][T23670] FAT-fs (loop3): Can't find a valid FAT filesystem [ 741.157280][T23671] bond0: (slave bridge147): Enslaving as an active interface with an up link [ 741.167872][T23679] FAT-fs (loop2): bogus number of reserved sectors [ 741.175756][T23679] FAT-fs (loop2): Can't find a valid FAT filesystem [ 741.190179][T23675] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 741.237482][T23676] device syz_tun left promiscuous mode 09:12:04 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:12:04 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e2f61740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 741.279199][T23679] FAT-fs (loop2): bogus number of reserved sectors [ 741.287012][T23684] FAT-fs (loop1): bogus number of reserved sectors [ 741.290482][T23676] bridge228: port 1(syz_tun) entered disabled state [ 741.295796][T23679] FAT-fs (loop2): Can't find a valid FAT filesystem [ 741.300407][T23684] FAT-fs (loop1): Can't find a valid FAT filesystem 09:12:04 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xc0a}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 741.414465][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 741.420240][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 741.432442][T23676] bridge229: port 1(syz_tun) entered blocking state [ 741.458568][T23676] bridge229: port 1(syz_tun) entered disabled state [ 741.467126][T23684] FAT-fs (loop1): bogus number of reserved sectors [ 741.473654][T23684] FAT-fs (loop1): Can't find a valid FAT filesystem [ 741.503893][T23693] FAT-fs (loop2): bogus number of reserved sectors [ 741.510856][T23676] device syz_tun entered promiscuous mode [ 741.512360][T23695] FAT-fs (loop3): bogus logical sector size 524 [ 741.523394][T23695] FAT-fs (loop3): Can't find a valid FAT filesystem [ 741.530411][T23693] FAT-fs (loop2): Can't find a valid FAT filesystem [ 741.532872][T23669] device syz_tun left promiscuous mode [ 741.547933][T23669] bridge496: port 1(syz_tun) entered disabled state 09:12:04 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) [ 741.681516][T23695] FAT-fs (loop3): bogus logical sector size 524 [ 741.689667][T23693] FAT-fs (loop2): bogus number of reserved sectors [ 741.702282][T23695] FAT-fs (loop3): Can't find a valid FAT filesystem 09:12:04 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xa0d}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:12:04 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000259402000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 741.726780][T23693] FAT-fs (loop2): Can't find a valid FAT filesystem [ 741.743201][T23688] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 741.760775][T23689] device syz_tun left promiscuous mode [ 741.766529][T23689] bridge147: port 1(syz_tun) entered disabled state 09:12:04 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e5c61740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 741.807125][T23689] bridge148: port 1(syz_tun) entered blocking state [ 741.814709][T23689] bridge148: port 1(syz_tun) entered disabled state [ 741.822092][T23689] device syz_tun entered promiscuous mode 09:12:05 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xd0a}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 741.889404][T23705] FAT-fs (loop1): bogus number of reserved sectors [ 741.897519][T23696] bridge148: port 1(syz_tun) entered blocking state [ 741.904178][T23696] bridge148: port 1(syz_tun) entered forwarding state [ 741.914248][T23705] FAT-fs (loop1): Can't find a valid FAT filesystem [ 741.924580][T23696] bond0: (slave bridge148): Enslaving as an active interface with an up link [ 741.935303][T23701] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 741.951496][T23702] device syz_tun left promiscuous mode [ 741.957917][T23702] bridge229: port 1(syz_tun) entered disabled state [ 742.007221][T23702] bridge230: port 1(syz_tun) entered blocking state [ 742.015262][T23702] bridge230: port 1(syz_tun) entered disabled state [ 742.022960][T23702] device syz_tun entered promiscuous mode [ 742.030375][T23705] FAT-fs (loop1): bogus number of reserved sectors [ 742.031852][T23709] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 742.044982][T23710] FAT-fs (loop3): bogus logical sector size 524 [ 742.056331][T23711] bridge497: port 1(syz_tun) entered blocking state [ 742.063280][T23711] bridge497: port 1(syz_tun) entered disabled state [ 742.065755][T23705] FAT-fs (loop1): Can't find a valid FAT filesystem [ 742.072776][T23711] device syz_tun entered promiscuous mode [ 742.084552][T23710] FAT-fs (loop3): Can't find a valid FAT filesystem 09:12:05 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) [ 742.108583][T23712] bridge148: port 1(syz_tun) entered disabled state [ 742.168521][T23713] bridge497: port 1(syz_tun) entered blocking state [ 742.175277][T23713] bridge497: port 1(syz_tun) entered forwarding state [ 742.188532][T23713] bond0: (slave bridge497): Enslaving as an active interface with an up link [ 742.207146][T23717] FAT-fs (loop2): bogus number of reserved sectors 09:12:05 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:12:05 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xa0e}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 742.215711][T23710] FAT-fs (loop3): bogus logical sector size 524 [ 742.236924][T23710] FAT-fs (loop3): Can't find a valid FAT filesystem [ 742.254981][T23717] FAT-fs (loop2): Can't find a valid FAT filesystem [ 742.267175][T23711] bridge497: port 1(syz_tun) entered disabled state 09:12:05 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e660a740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 742.294488][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 742.300382][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 742.392821][T23717] FAT-fs (loop2): bogus number of reserved sectors [ 742.405852][T23724] device syz_tun left promiscuous mode [ 742.418082][T23724] bridge230: port 1(syz_tun) entered disabled state [ 742.425031][T23717] FAT-fs (loop2): Can't find a valid FAT filesystem [ 742.428942][T23732] FAT-fs (loop1): bogus number of reserved sectors [ 742.438992][T23732] FAT-fs (loop1): Can't find a valid FAT filesystem 09:12:05 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025ac07000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:12:05 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xe00}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 742.465420][T23729] FAT-fs (loop3): bogus logical sector size 524 [ 742.476188][T23729] FAT-fs (loop3): Can't find a valid FAT filesystem [ 742.514730][T23724] bridge231: port 1(syz_tun) entered blocking state [ 742.542453][T23724] bridge231: port 1(syz_tun) entered disabled state [ 742.567602][T23724] device syz_tun entered promiscuous mode [ 742.578402][T23732] FAT-fs (loop1): bogus number of reserved sectors [ 742.591448][T23729] FAT-fs (loop3): bogus logical sector size 524 [ 742.600910][T23729] FAT-fs (loop3): Can't find a valid FAT filesystem [ 742.608408][T23725] device syz_tun left promiscuous mode [ 742.608430][T23732] FAT-fs (loop1): Can't find a valid FAT filesystem [ 742.617641][T23725] bridge148: port 1(syz_tun) entered disabled state 09:12:05 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e6625740c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 742.677099][T23725] bridge149: port 1(syz_tun) entered blocking state [ 742.683747][T23725] bridge149: port 1(syz_tun) entered disabled state [ 742.710504][T23725] device syz_tun entered promiscuous mode [ 742.717922][T23740] FAT-fs (loop2): bogus number of reserved sectors [ 742.735056][T23723] bridge149: port 1(syz_tun) entered blocking state [ 742.741742][T23723] bridge149: port 1(syz_tun) entered forwarding state [ 742.755605][T23740] FAT-fs (loop2): Can't find a valid FAT filesystem 09:12:05 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xa0f}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 742.830207][T23723] bond0: (slave bridge149): Enslaving as an active interface with an up link [ 742.844637][T23740] FAT-fs (loop2): bogus number of reserved sectors [ 742.863232][T23744] FAT-fs (loop3): bogus logical sector size 524 [ 742.870766][T23740] FAT-fs (loop2): Can't find a valid FAT filesystem [ 742.886997][T23744] FAT-fs (loop3): Can't find a valid FAT filesystem [ 742.914525][T23739] device syz_tun left promiscuous mode [ 742.920107][T23739] bridge497: port 1(syz_tun) entered disabled state [ 742.988876][T23739] bridge498: port 1(syz_tun) entered blocking state [ 742.998812][T23739] bridge498: port 1(syz_tun) entered disabled state [ 743.018613][T23739] device syz_tun entered promiscuous mode 09:12:06 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xe0a}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 743.075197][T23742] bridge498: port 1(syz_tun) entered blocking state [ 743.081975][T23742] bridge498: port 1(syz_tun) entered forwarding state [ 743.103285][T23748] FAT-fs (loop1): bogus number of reserved sectors [ 743.110008][T23744] FAT-fs (loop3): bogus logical sector size 524 09:12:06 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x2, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) [ 743.124260][T23748] FAT-fs (loop1): Can't find a valid FAT filesystem [ 743.131348][T23744] FAT-fs (loop3): Can't find a valid FAT filesystem [ 743.161401][T23742] bond0: (slave bridge498): Enslaving as an active interface with an up link 09:12:06 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 743.226170][T23739] bridge498: port 1(syz_tun) entered disabled state 09:12:06 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e665c740c0204010a0200027400f8", 0x16}], 0x0, 0x0) 09:12:06 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025f007000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 743.342586][T23755] device syz_tun left promiscuous mode [ 743.368714][T23755] bridge231: port 1(syz_tun) entered disabled state 09:12:06 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xa10}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 743.397330][T23759] FAT-fs (loop2): bogus number of reserved sectors [ 743.410653][T23759] FAT-fs (loop2): Can't find a valid FAT filesystem [ 743.486836][T23755] bridge232: port 1(syz_tun) entered blocking state [ 743.494146][T23755] bridge232: port 1(syz_tun) entered disabled state [ 743.509895][T23755] device syz_tun entered promiscuous mode [ 743.539411][T23759] FAT-fs (loop2): bogus number of reserved sectors [ 743.546553][T23764] FAT-fs (loop3): bogus logical sector size 524 [ 743.563843][T23759] FAT-fs (loop2): Can't find a valid FAT filesystem [ 743.566756][T23762] device syz_tun left promiscuous mode [ 743.574341][T23764] FAT-fs (loop3): Can't find a valid FAT filesystem [ 743.594561][T23762] bridge149: port 1(syz_tun) entered disabled state [ 743.638611][T23762] bridge150: port 1(syz_tun) entered blocking state [ 743.653248][T23762] bridge150: port 1(syz_tun) entered disabled state [ 743.662342][T23762] device syz_tun entered promiscuous mode [ 743.706478][T23774] FAT-fs (loop1): bogus number of reserved sectors [ 743.713487][T23764] FAT-fs (loop3): bogus logical sector size 524 [ 743.729574][T23764] FAT-fs (loop3): Can't find a valid FAT filesystem [ 743.742128][T23767] bridge150: port 1(syz_tun) entered blocking state [ 743.748869][T23767] bridge150: port 1(syz_tun) entered forwarding state 09:12:06 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xf00}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 743.761193][T23774] FAT-fs (loop1): Can't find a valid FAT filesystem [ 743.770643][T23767] bond0: (slave bridge150): Enslaving as an active interface with an up link [ 743.791905][T23769] device syz_tun left promiscuous mode [ 743.805707][T23769] bridge498: port 1(syz_tun) entered disabled state 09:12:07 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66610a0c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 743.868179][T23769] bridge499: port 1(syz_tun) entered blocking state [ 743.893701][T23774] FAT-fs (loop1): bogus number of reserved sectors [ 743.912537][T23769] bridge499: port 1(syz_tun) entered disabled state [ 743.914600][T23774] FAT-fs (loop1): Can't find a valid FAT filesystem [ 743.923590][T23769] device syz_tun entered promiscuous mode [ 743.946885][T23771] bridge499: port 1(syz_tun) entered blocking state [ 743.953530][T23771] bridge499: port 1(syz_tun) entered forwarding state [ 743.973203][T23771] bond0: (slave bridge499): Enslaving as an active interface with an up link [ 743.982135][T23765] device syz_tun left promiscuous mode [ 743.988210][T23765] bridge232: port 1(syz_tun) entered disabled state [ 743.998859][T23781] FAT-fs (loop2): bogus number of reserved sectors [ 744.015412][T23781] FAT-fs (loop2): Can't find a valid FAT filesystem 09:12:07 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xa11}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 744.032287][T23784] FAT-fs (loop3): bogus logical sector size 524 [ 744.043333][T23760] __nla_validate_parse: 9 callbacks suppressed [ 744.043346][T23760] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 744.054538][T23784] FAT-fs (loop3): Can't find a valid FAT filesystem [ 744.066479][T23779] bridge150: port 1(syz_tun) entered disabled state 09:12:07 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) 09:12:07 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 744.139383][T23781] FAT-fs (loop2): bogus number of reserved sectors [ 744.146186][T23781] FAT-fs (loop2): Can't find a valid FAT filesystem [ 744.161956][T23766] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 09:12:07 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250c0a000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 744.257169][T23784] FAT-fs (loop3): bogus logical sector size 524 [ 744.299384][T23784] FAT-fs (loop3): Can't find a valid FAT filesystem [ 744.331350][T23793] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:12:07 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x1020}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 744.354197][T23793] bridge233: port 1(syz_tun) entered blocking state [ 744.361043][T23793] bridge233: port 1(syz_tun) entered disabled state [ 744.372145][T23793] device syz_tun entered promiscuous mode [ 744.381436][T23796] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 744.395384][T23792] FAT-fs (loop1): bogus number of reserved sectors [ 744.417131][T23792] FAT-fs (loop1): Can't find a valid FAT filesystem [ 744.432415][T23799] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 09:12:07 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e6661250c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 744.468799][T23800] device syz_tun left promiscuous mode [ 744.489166][T23800] bridge150: port 1(syz_tun) entered disabled state [ 744.507646][T23792] FAT-fs (loop1): bogus number of reserved sectors 09:12:07 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x4, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) [ 744.528742][T23792] FAT-fs (loop1): Can't find a valid FAT filesystem [ 744.561800][T23800] bridge151: port 1(syz_tun) entered blocking state [ 744.584163][T23800] bridge151: port 1(syz_tun) entered disabled state [ 744.600852][T23800] device syz_tun entered promiscuous mode [ 744.612672][T23801] device syz_tun left promiscuous mode [ 744.618371][ C0] net_ratelimit: 10 callbacks suppressed [ 744.618388][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 744.618430][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 744.618477][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 744.618497][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 744.618531][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 744.618553][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 744.669527][T23804] FAT-fs (loop2): bogus number of reserved sectors 09:12:07 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xa12}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 744.681303][T23804] FAT-fs (loop2): Can't find a valid FAT filesystem [ 744.695654][T23807] FAT-fs (loop3): bogus logical sector size 524 [ 744.701914][T23807] FAT-fs (loop3): Can't find a valid FAT filesystem [ 744.713550][T23801] bridge499: port 1(syz_tun) entered disabled state [ 744.757892][T23801] bridge500: port 1(syz_tun) entered blocking state [ 744.761978][T23804] FAT-fs (loop2): bogus number of reserved sectors [ 744.774170][T23804] FAT-fs (loop2): Can't find a valid FAT filesystem [ 744.774497][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 744.786657][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 744.792593][T23801] bridge500: port 1(syz_tun) entered disabled state [ 744.802367][T23801] device syz_tun entered promiscuous mode [ 744.818819][T23796] bridge151: port 1(syz_tun) entered blocking state [ 744.825466][T23796] bridge151: port 1(syz_tun) entered forwarding state [ 744.849277][T23796] bond0: (slave bridge151): Enslaving as an active interface with an up link 09:12:08 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x2000}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 744.887076][T23807] FAT-fs (loop3): bogus logical sector size 524 [ 744.897079][T23807] FAT-fs (loop3): Can't find a valid FAT filesystem [ 744.897848][T23799] bridge500: port 1(syz_tun) entered blocking state [ 744.910482][T23799] bridge500: port 1(syz_tun) entered forwarding state 09:12:08 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66615c0c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 744.946014][T23815] FAT-fs (loop1): bogus number of reserved sectors [ 744.952723][T23815] FAT-fs (loop1): Can't find a valid FAT filesystem [ 744.962545][T23799] bond0: (slave bridge500): Enslaving as an active interface with an up link [ 744.973782][T23810] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 745.004996][T23812] device syz_tun left promiscuous mode [ 745.010816][T23812] bridge233: port 1(syz_tun) entered disabled state [ 745.022234][T23815] FAT-fs (loop1): bogus number of reserved sectors [ 745.036277][T23815] FAT-fs (loop1): Can't find a valid FAT filesystem [ 745.067131][T23812] bridge234: port 1(syz_tun) entered blocking state [ 745.076431][T23812] bridge234: port 1(syz_tun) entered disabled state [ 745.084467][T23812] device syz_tun entered promiscuous mode [ 745.093864][T23819] bridge151: port 1(syz_tun) entered disabled state 09:12:08 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xb0a}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 745.129985][T23825] FAT-fs (loop2): bogus number of reserved sectors [ 745.138496][T23825] FAT-fs (loop2): Can't find a valid FAT filesystem [ 745.145234][T23826] FAT-fs (loop3): bogus logical sector size 524 [ 745.154193][T23826] FAT-fs (loop3): Can't find a valid FAT filesystem [ 745.163337][T23823] bridge500: port 1(syz_tun) entered disabled state 09:12:08 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:12:08 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x5, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) 09:12:08 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025500a000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 745.285748][T23825] FAT-fs (loop2): bogus number of reserved sectors [ 745.285867][T23826] FAT-fs (loop3): bogus logical sector size 524 [ 745.304348][T23825] FAT-fs (loop2): Can't find a valid FAT filesystem [ 745.315381][T23826] FAT-fs (loop3): Can't find a valid FAT filesystem 09:12:08 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740a0004010a0200027400f8", 0x16}], 0x0, 0x0) [ 745.377217][T23835] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 745.413999][T23835] device syz_tun left promiscuous mode [ 745.430196][T23835] bridge151: port 1(syz_tun) entered disabled state [ 745.439311][T23833] FAT-fs (loop1): bogus number of reserved sectors [ 745.455717][T23833] FAT-fs (loop1): Can't find a valid FAT filesystem 09:12:08 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x2010}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 745.488663][T23835] bridge152: port 1(syz_tun) entered blocking state [ 745.504630][T23835] bridge152: port 1(syz_tun) entered disabled state [ 745.513191][T23835] device syz_tun entered promiscuous mode [ 745.547436][T23837] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 745.567246][T23833] FAT-fs (loop1): bogus number of reserved sectors [ 745.574484][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 745.580246][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 745.591816][T23845] FAT-fs (loop3): bogus logical sector size 10 [ 745.592052][T23833] FAT-fs (loop1): Can't find a valid FAT filesystem [ 745.599005][T23845] FAT-fs (loop3): Can't find a valid FAT filesystem [ 745.610162][T23838] bridge152: port 1(syz_tun) entered blocking state [ 745.617974][T23838] bridge152: port 1(syz_tun) entered forwarding state [ 745.648612][T23838] bond0: (slave bridge152): Enslaving as an active interface with an up link [ 745.662701][T23840] device syz_tun left promiscuous mode [ 745.671434][T23840] bridge234: port 1(syz_tun) entered disabled state 09:12:08 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xc00}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 745.723422][T23850] FAT-fs (loop2): bogus number of reserved sectors [ 745.735532][T23840] bridge235: port 1(syz_tun) entered blocking state [ 745.742347][T23845] FAT-fs (loop3): bogus logical sector size 10 [ 745.748813][T23845] FAT-fs (loop3): Can't find a valid FAT filesystem [ 745.757079][T23850] FAT-fs (loop2): Can't find a valid FAT filesystem [ 745.776217][T23840] bridge235: port 1(syz_tun) entered disabled state [ 745.785058][T23840] device syz_tun entered promiscuous mode [ 745.795804][T23841] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 745.821258][T23846] device syz_tun left promiscuous mode 09:12:09 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174630004010a0200027400f8", 0x16}], 0x0, 0x0) [ 745.841080][T23846] bridge500: port 1(syz_tun) entered disabled state [ 745.913083][T23846] bridge501: port 1(syz_tun) entered blocking state [ 745.922985][T23846] bridge501: port 1(syz_tun) entered disabled state [ 745.932383][T23846] device syz_tun entered promiscuous mode 09:12:09 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x6, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) 09:12:09 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x25, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 745.984577][T23850] FAT-fs (loop2): bogus number of reserved sectors [ 745.995317][T23841] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 746.016537][T23850] FAT-fs (loop2): Can't find a valid FAT filesystem [ 746.036644][T23846] bridge501: port 1(syz_tun) entered blocking state [ 746.043358][T23846] bridge501: port 1(syz_tun) entered forwarding state [ 746.063633][T23846] bond0: (slave bridge501): Enslaving as an active interface with an up link 09:12:09 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x2300}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 746.088509][T23860] FAT-fs (loop3): bogus logical sector size 99 [ 746.113262][T23859] FAT-fs (loop1): bogus number of reserved sectors [ 746.119681][T23860] FAT-fs (loop3): Can't find a valid FAT filesystem [ 746.135027][T23859] FAT-fs (loop1): Can't find a valid FAT filesystem 09:12:09 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025a40a000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 746.198560][T23868] device syz_tun left promiscuous mode [ 746.204192][T23868] bridge235: port 1(syz_tun) entered disabled state [ 746.259075][T23868] bridge236: port 1(syz_tun) entered blocking state [ 746.269100][T23868] bridge236: port 1(syz_tun) entered disabled state [ 746.283726][T23868] device syz_tun entered promiscuous mode [ 746.285808][T23859] FAT-fs (loop1): bogus number of reserved sectors [ 746.296606][T23869] FAT-fs (loop2): bogus number of reserved sectors [ 746.308612][T23860] FAT-fs (loop3): bogus logical sector size 99 [ 746.315043][T23866] device syz_tun left promiscuous mode [ 746.316699][T23859] FAT-fs (loop1): Can't find a valid FAT filesystem [ 746.320673][T23866] bridge152: port 1(syz_tun) entered disabled state [ 746.337198][T23869] FAT-fs (loop2): Can't find a valid FAT filesystem [ 746.346117][T23860] FAT-fs (loop3): Can't find a valid FAT filesystem 09:12:09 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xc0a}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 746.403251][T23866] bridge153: port 1(syz_tun) entered blocking state [ 746.423174][T23866] bridge153: port 1(syz_tun) entered disabled state [ 746.433574][T23866] device syz_tun entered promiscuous mode 09:12:09 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174070204010a0200027400f8", 0x16}], 0x0, 0x0) [ 746.473302][T23869] FAT-fs (loop2): bogus number of reserved sectors [ 746.485909][T23870] bridge153: port 1(syz_tun) entered blocking state [ 746.492593][T23870] bridge153: port 1(syz_tun) entered forwarding state [ 746.504506][T23869] FAT-fs (loop2): Can't find a valid FAT filesystem [ 746.537106][T23870] bond0: (slave bridge153): Enslaving as an active interface with an up link 09:12:09 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x25fb}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:12:09 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x7, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) [ 746.592334][T23876] device syz_tun left promiscuous mode [ 746.602239][T23876] bridge501: port 1(syz_tun) entered disabled state [ 746.644343][T23882] FAT-fs (loop1): bogus number of reserved sectors [ 746.670295][T23882] FAT-fs (loop1): Can't find a valid FAT filesystem [ 746.680464][T23876] bridge502: port 1(syz_tun) entered blocking state [ 746.687242][T23876] bridge502: port 1(syz_tun) entered disabled state [ 746.694724][T23876] device syz_tun entered promiscuous mode [ 746.705557][T23879] bridge502: port 1(syz_tun) entered blocking state [ 746.712333][T23879] bridge502: port 1(syz_tun) entered forwarding state [ 746.755839][T23882] FAT-fs (loop1): bogus number of reserved sectors [ 746.762481][T23891] FAT-fs (loop3): bogus logical sector size 519 [ 746.764238][T23882] FAT-fs (loop1): Can't find a valid FAT filesystem [ 746.775742][T23892] FAT-fs (loop2): bogus number of reserved sectors [ 746.782492][T23892] FAT-fs (loop2): Can't find a valid FAT filesystem [ 746.783239][T23879] bond0: (slave bridge502): Enslaving as an active interface with an up link [ 746.794461][T23891] FAT-fs (loop3): Can't find a valid FAT filesystem [ 746.807364][T23888] bridge153: port 1(syz_tun) entered disabled state 09:12:10 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xd0a}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:12:10 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x49, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 746.867184][T23890] device syz_tun left promiscuous mode [ 746.883583][T23890] bridge236: port 1(syz_tun) entered disabled state [ 746.934169][T23892] FAT-fs (loop2): bogus number of reserved sectors [ 746.945340][T23891] FAT-fs (loop3): bogus logical sector size 519 [ 746.946871][T23890] bridge237: port 1(syz_tun) entered blocking state [ 746.960751][T23891] FAT-fs (loop3): Can't find a valid FAT filesystem [ 746.967927][T23890] bridge237: port 1(syz_tun) entered disabled state [ 746.977355][T23892] FAT-fs (loop2): Can't find a valid FAT filesystem [ 746.985061][T23890] device syz_tun entered promiscuous mode [ 746.998715][T23897] bridge502: port 1(syz_tun) entered disabled state 09:12:10 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025b80a000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:12:10 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174100204010a0200027400f8", 0x16}], 0x0, 0x0) [ 747.044797][T23904] device syz_tun left promiscuous mode [ 747.050760][T23904] bridge153: port 1(syz_tun) entered disabled state [ 747.074616][T23903] FAT-fs (loop1): bogus number of reserved sectors 09:12:10 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x25fc}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 747.104334][T23903] FAT-fs (loop1): Can't find a valid FAT filesystem 09:12:10 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0xa, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) [ 747.186098][T23903] FAT-fs (loop1): bogus number of reserved sectors [ 747.199099][T23906] bond0: (slave bridge154): Enslaving as an active interface with an up link [ 747.208125][T23903] FAT-fs (loop1): Can't find a valid FAT filesystem [ 747.218082][T23908] device syz_tun left promiscuous mode [ 747.223778][T23908] bridge502: port 1(syz_tun) entered disabled state [ 747.282899][T23908] bridge503: port 1(syz_tun) entered blocking state [ 747.294480][T23912] FAT-fs (loop3): bogus logical sector size 528 [ 747.300745][T23912] FAT-fs (loop3): Can't find a valid FAT filesystem [ 747.311040][T23914] FAT-fs (loop2): bogus number of reserved sectors 09:12:10 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xe00}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 747.329726][T23908] bridge503: port 1(syz_tun) entered disabled state [ 747.358991][T23908] device syz_tun entered promiscuous mode [ 747.365631][T23914] FAT-fs (loop2): Can't find a valid FAT filesystem [ 747.374514][T23904] bridge154: port 1(syz_tun) entered blocking state [ 747.381912][T23904] bridge154: port 1(syz_tun) entered disabled state [ 747.389642][T23904] device syz_tun entered promiscuous mode [ 747.397956][T23904] bridge154: port 1(syz_tun) entered blocking state [ 747.404803][T23904] bridge154: port 1(syz_tun) entered forwarding state [ 747.416141][T23913] bridge503: port 1(syz_tun) entered blocking state [ 747.422750][T23913] bridge503: port 1(syz_tun) entered forwarding state [ 747.466713][T23913] bond0: (slave bridge503): Enslaving as an active interface with an up link [ 747.479328][T23917] bridge154: port 1(syz_tun) entered disabled state [ 747.503195][T23914] FAT-fs (loop2): bogus number of reserved sectors [ 747.509864][T23923] FAT-fs (loop1): bogus number of reserved sectors [ 747.521777][T23912] FAT-fs (loop3): bogus logical sector size 528 [ 747.531894][T23914] FAT-fs (loop2): Can't find a valid FAT filesystem [ 747.542343][T23912] FAT-fs (loop3): Can't find a valid FAT filesystem [ 747.551328][T23923] FAT-fs (loop1): Can't find a valid FAT filesystem 09:12:10 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4b, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 747.611294][T23920] device syz_tun left promiscuous mode [ 747.620843][T23920] bridge237: port 1(syz_tun) entered disabled state 09:12:10 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x2804}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:12:10 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174140204010a0200027400f8", 0x16}], 0x0, 0x0) [ 747.671699][T23920] bridge238: port 1(syz_tun) entered blocking state [ 747.693083][T23920] bridge238: port 1(syz_tun) entered disabled state [ 747.750151][T23920] device syz_tun entered promiscuous mode 09:12:10 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xe0a}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:12:11 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025c00a000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 747.889840][T23934] device syz_tun left promiscuous mode [ 747.918048][T23935] FAT-fs (loop2): bogus number of reserved sectors [ 747.924933][T23935] FAT-fs (loop2): Can't find a valid FAT filesystem 09:12:11 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0xc, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) [ 747.951455][T23934] bridge154: port 1(syz_tun) entered disabled state [ 747.991865][T23935] FAT-fs (loop2): bogus number of reserved sectors [ 747.994533][T23939] FAT-fs (loop3): bogus logical sector size 532 [ 748.000816][T23935] FAT-fs (loop2): Can't find a valid FAT filesystem [ 748.013543][T23941] FAT-fs (loop1): bogus number of reserved sectors [ 748.023272][T23934] bridge155: port 1(syz_tun) entered blocking state [ 748.029957][T23934] bridge155: port 1(syz_tun) entered disabled state [ 748.040795][T23939] FAT-fs (loop3): Can't find a valid FAT filesystem [ 748.044493][T23941] FAT-fs (loop1): Can't find a valid FAT filesystem [ 748.055680][T23934] device syz_tun entered promiscuous mode 09:12:11 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x3f00}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 748.093559][T23940] bridge155: port 1(syz_tun) entered blocking state [ 748.100267][T23940] bridge155: port 1(syz_tun) entered forwarding state [ 748.118392][T23940] bond0: (slave bridge155): Enslaving as an active interface with an up link [ 748.140566][T23947] device syz_tun left promiscuous mode [ 748.148674][T23947] bridge503: port 1(syz_tun) entered disabled state [ 748.204192][T23939] FAT-fs (loop3): bogus logical sector size 532 [ 748.214175][T23947] bridge504: port 1(syz_tun) entered blocking state [ 748.221130][T23947] bridge504: port 1(syz_tun) entered disabled state [ 748.223392][T23941] FAT-fs (loop1): bogus number of reserved sectors [ 748.230642][T23947] device syz_tun entered promiscuous mode [ 748.237279][T23939] FAT-fs (loop3): Can't find a valid FAT filesystem [ 748.250464][T23941] FAT-fs (loop1): Can't find a valid FAT filesystem [ 748.252930][T23959] FAT-fs (loop2): bogus number of reserved sectors [ 748.267801][T23959] FAT-fs (loop2): Can't find a valid FAT filesystem [ 748.289041][T23950] bridge504: port 1(syz_tun) entered blocking state [ 748.295750][T23950] bridge504: port 1(syz_tun) entered forwarding state 09:12:11 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e6661743c0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 748.322049][T23950] bond0: (slave bridge504): Enslaving as an active interface with an up link [ 748.351842][T23951] device syz_tun left promiscuous mode [ 748.358483][T23951] bridge238: port 1(syz_tun) entered disabled state [ 748.410257][T23959] FAT-fs (loop2): bogus number of reserved sectors [ 748.430411][T23951] bridge239: port 1(syz_tun) entered blocking state [ 748.437903][T23959] FAT-fs (loop2): Can't find a valid FAT filesystem 09:12:11 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xf00}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 748.455167][T23951] bridge239: port 1(syz_tun) entered disabled state [ 748.465603][T23951] device syz_tun entered promiscuous mode [ 748.500840][T23962] bridge504: port 1(syz_tun) entered disabled state 09:12:11 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x63, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:12:11 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x4000}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:12:11 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025c80a000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 748.604800][T23964] FAT-fs (loop3): bogus logical sector size 572 09:12:11 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0xe, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) [ 748.649922][T23964] FAT-fs (loop3): Can't find a valid FAT filesystem [ 748.684914][T23967] FAT-fs (loop1): bogus number of reserved sectors [ 748.705053][T23967] FAT-fs (loop1): Can't find a valid FAT filesystem [ 748.724497][T23970] device syz_tun left promiscuous mode [ 748.730110][T23970] bridge155: port 1(syz_tun) entered disabled state [ 748.776905][T23970] bridge156: port 1(syz_tun) entered blocking state [ 748.783673][T23970] bridge156: port 1(syz_tun) entered disabled state [ 748.793671][T23970] device syz_tun entered promiscuous mode [ 748.813688][T23976] bridge156: port 1(syz_tun) entered blocking state [ 748.820342][T23976] bridge156: port 1(syz_tun) entered forwarding state [ 748.834825][T23976] bond0: (slave bridge156): Enslaving as an active interface with an up link [ 748.853718][T23975] device syz_tun left promiscuous mode [ 748.854295][T23964] FAT-fs (loop3): bogus logical sector size 572 [ 748.862177][T23972] FAT-fs (loop2): bogus number of reserved sectors [ 748.870940][T23964] FAT-fs (loop3): Can't find a valid FAT filesystem [ 748.873309][T23972] FAT-fs (loop2): Can't find a valid FAT filesystem [ 748.887964][T23967] FAT-fs (loop1): bogus number of reserved sectors [ 748.898147][T23975] bridge504: port 1(syz_tun) entered disabled state [ 748.906089][T23967] FAT-fs (loop1): Can't find a valid FAT filesystem 09:12:12 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174450204010a0200027400f8", 0x16}], 0x0, 0x0) [ 748.948709][T23975] bridge505: port 1(syz_tun) entered blocking state [ 748.965230][T23975] bridge505: port 1(syz_tun) entered disabled state [ 748.984790][T23975] device syz_tun entered promiscuous mode 09:12:12 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xf0a}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 749.022992][T23972] FAT-fs (loop2): bogus number of reserved sectors [ 749.041762][T23976] device syz_tun left promiscuous mode [ 749.051498][T23976] bridge156: port 1(syz_tun) entered disabled state [ 749.054367][T23972] FAT-fs (loop2): Can't find a valid FAT filesystem [ 749.117492][T23983] device syz_tun left promiscuous mode [ 749.123236][T23983] bridge239: port 1(syz_tun) entered disabled state 09:12:12 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x4001}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 749.197235][T23988] FAT-fs (loop3): bogus logical sector size 581 [ 749.207268][T23983] bridge240: port 1(syz_tun) entered blocking state [ 749.215304][T23991] FAT-fs (loop1): bogus number of reserved sectors [ 749.220832][T23988] FAT-fs (loop3): Can't find a valid FAT filesystem [ 749.221880][T23991] FAT-fs (loop1): Can't find a valid FAT filesystem [ 749.237527][T23983] bridge240: port 1(syz_tun) entered disabled state [ 749.268336][T23983] device syz_tun entered promiscuous mode [ 749.288804][T23982] bridge505: port 1(syz_tun) entered blocking state [ 749.295466][T23982] bridge505: port 1(syz_tun) entered forwarding state [ 749.328248][T23982] bond0: (slave bridge505): Enslaving as an active interface with an up link [ 749.362001][T23991] FAT-fs (loop1): bogus number of reserved sectors [ 749.380903][T23991] FAT-fs (loop1): Can't find a valid FAT filesystem [ 749.396546][T23988] FAT-fs (loop3): bogus logical sector size 581 [ 749.413864][T23995] FAT-fs (loop2): bogus number of reserved sectors [ 749.421616][T23988] FAT-fs (loop3): Can't find a valid FAT filesystem [ 749.434553][T23995] FAT-fs (loop2): Can't find a valid FAT filesystem [ 749.455685][T23975] __nla_validate_parse: 17 callbacks suppressed [ 749.455697][T23975] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 09:12:12 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) 09:12:12 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x202, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:12:12 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x100a}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:12:12 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174490204010a0200027400f8", 0x16}], 0x0, 0x0) 09:12:12 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025e00a000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 749.567208][T23995] FAT-fs (loop2): bogus number of reserved sectors [ 749.586178][T23995] FAT-fs (loop2): Can't find a valid FAT filesystem [ 749.640238][T24006] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 749.661023][T24004] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 749.682642][T24007] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 749.702373][T24006] device syz_tun left promiscuous mode [ 749.708113][T24006] bridge505: port 1(syz_tun) entered disabled state 09:12:12 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x4800}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 749.744480][ C1] net_ratelimit: 14 callbacks suppressed [ 749.744498][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 749.755967][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 749.768619][T24006] bridge506: port 1(syz_tun) entered blocking state [ 749.787751][T24011] FAT-fs (loop1): bogus number of reserved sectors [ 749.789628][T24006] bridge506: port 1(syz_tun) entered disabled state [ 749.804078][T24011] FAT-fs (loop1): Can't find a valid FAT filesystem [ 749.810802][T24015] FAT-fs (loop3): bogus logical sector size 585 [ 749.817185][T24015] FAT-fs (loop3): Can't find a valid FAT filesystem [ 749.824802][T24006] device syz_tun entered promiscuous mode [ 749.838839][T24004] device syz_tun left promiscuous mode [ 749.844871][T24004] bridge240: port 1(syz_tun) entered disabled state [ 749.901160][T24004] bridge241: port 1(syz_tun) entered blocking state [ 749.908060][T24004] bridge241: port 1(syz_tun) entered disabled state [ 749.916200][T24004] device syz_tun entered promiscuous mode [ 749.929155][T24008] bridge506: port 1(syz_tun) entered blocking state [ 749.935837][T24008] bridge506: port 1(syz_tun) entered forwarding state [ 749.957252][T24008] bond0: (slave bridge506): Enslaving as an active interface with an up link [ 749.970558][T24007] bridge157: port 1(syz_tun) entered blocking state [ 749.996171][T24007] bridge157: port 1(syz_tun) entered disabled state [ 750.019634][T24007] device syz_tun entered promiscuous mode [ 750.034933][T24015] FAT-fs (loop3): bogus logical sector size 585 [ 750.041381][T24015] FAT-fs (loop3): Can't find a valid FAT filesystem [ 750.062872][T24014] bridge157: port 1(syz_tun) entered blocking state 09:12:13 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x1020}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 750.069514][T24014] bridge157: port 1(syz_tun) entered forwarding state [ 750.078966][T24014] bond0: (slave bridge157): Enslaving as an active interface with an up link [ 750.087878][T24009] device syz_tun left promiscuous mode [ 750.096646][T24009] bridge241: port 1(syz_tun) entered disabled state 09:12:13 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e6661745d0204010a0200027400f8", 0x16}], 0x0, 0x0) [ 750.124492][T24024] FAT-fs (loop2): bogus number of reserved sectors [ 750.131062][T24024] FAT-fs (loop2): Can't find a valid FAT filesystem [ 750.148208][T24023] bridge506: port 1(syz_tun) entered disabled state 09:12:13 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x48, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) 09:12:13 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025e80a000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 750.233848][T24007] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 09:12:13 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x3d0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 750.310731][T24030] FAT-fs (loop1): bogus number of reserved sectors [ 750.317324][T24033] FAT-fs (loop3): bogus logical sector size 605 [ 750.325808][T24024] FAT-fs (loop2): bogus number of reserved sectors [ 750.345867][T24037] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 750.354592][T24033] FAT-fs (loop3): Can't find a valid FAT filesystem [ 750.362005][T24024] FAT-fs (loop2): Can't find a valid FAT filesystem [ 750.368697][T24030] FAT-fs (loop1): Can't find a valid FAT filesystem [ 750.389671][T24037] bridge242: port 1(syz_tun) entered blocking state [ 750.402622][T24037] bridge242: port 1(syz_tun) entered disabled state 09:12:13 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x4c00}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 750.413158][T24037] device syz_tun entered promiscuous mode [ 750.421673][T24040] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 750.452653][T24041] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 09:12:13 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x4c, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) [ 750.472447][T24043] device syz_tun left promiscuous mode [ 750.478681][T24043] bridge506: port 1(syz_tun) entered disabled state [ 750.531774][T24043] bridge507: port 1(syz_tun) entered blocking state [ 750.538572][T24043] bridge507: port 1(syz_tun) entered disabled state [ 750.550861][T24043] device syz_tun entered promiscuous mode [ 750.569281][T24044] device syz_tun left promiscuous mode [ 750.579685][T24044] bridge157: port 1(syz_tun) entered disabled state [ 750.595227][T24030] FAT-fs (loop1): bogus number of reserved sectors [ 750.601868][T24033] FAT-fs (loop3): bogus logical sector size 605 [ 750.612995][T24030] FAT-fs (loop1): Can't find a valid FAT filesystem [ 750.620691][T24048] FAT-fs (loop2): bogus number of reserved sectors [ 750.622505][T24033] FAT-fs (loop3): Can't find a valid FAT filesystem [ 750.627287][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 750.639612][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 750.650638][T24044] bridge158: port 1(syz_tun) entered blocking state [ 750.657983][T24048] FAT-fs (loop2): Can't find a valid FAT filesystem [ 750.667592][T24044] bridge158: port 1(syz_tun) entered disabled state [ 750.675007][T24044] device syz_tun entered promiscuous mode 09:12:13 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740c0304010a0200027400f8", 0x16}], 0x0, 0x0) [ 750.685164][T24040] bridge507: port 1(syz_tun) entered blocking state [ 750.691928][T24040] bridge507: port 1(syz_tun) entered forwarding state [ 750.704140][T24040] bond0: (slave bridge507): Enslaving as an active interface with an up link [ 750.716528][T24041] bridge158: port 1(syz_tun) entered blocking state [ 750.723162][T24041] bridge158: port 1(syz_tun) entered forwarding state 09:12:13 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x1040}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 750.778699][T24041] bond0: (slave bridge158): Enslaving as an active interface with an up link [ 750.801251][T24051] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 750.818651][T24052] device syz_tun left promiscuous mode [ 750.824394][T24052] bridge242: port 1(syz_tun) entered disabled state [ 750.854563][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 750.860406][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 750.867159][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 750.872909][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 750.878831][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 750.884612][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 750.893077][T24052] bridge243: port 1(syz_tun) entered blocking state [ 750.899815][T24052] bridge243: port 1(syz_tun) entered disabled state [ 750.907360][T24052] device syz_tun entered promiscuous mode [ 750.935949][T24043] device syz_tun left promiscuous mode [ 750.941563][T24043] bridge507: port 1(syz_tun) entered disabled state 09:12:14 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x4f04}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 751.002617][T24061] FAT-fs (loop3): bogus logical sector size 780 [ 751.018516][T24063] FAT-fs (loop1): bogus number of reserved sectors [ 751.033152][T24061] FAT-fs (loop3): Can't find a valid FAT filesystem [ 751.043217][T24063] FAT-fs (loop1): Can't find a valid FAT filesystem [ 751.087682][T24051] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 751.163055][T24061] FAT-fs (loop3): bogus logical sector size 780 [ 751.177260][T24066] FAT-fs (loop2): bogus number of reserved sectors [ 751.184089][T24063] FAT-fs (loop1): bogus number of reserved sectors [ 751.184520][T24066] FAT-fs (loop2): Can't find a valid FAT filesystem [ 751.198178][T24061] FAT-fs (loop3): Can't find a valid FAT filesystem 09:12:14 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0a0000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:12:14 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025f00a000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:12:14 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x60, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) [ 751.210391][T24063] FAT-fs (loop1): Can't find a valid FAT filesystem [ 751.317295][T24071] bridge508: port 1(syz_tun) entered blocking state 09:12:14 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740c0404010a0200027400f8", 0x16}], 0x0, 0x0) [ 751.358039][T24071] bridge508: port 1(syz_tun) entered disabled state [ 751.376713][T24071] device syz_tun entered promiscuous mode 09:12:14 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x110a}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 751.400569][T24066] FAT-fs (loop2): bogus number of reserved sectors [ 751.401319][T24073] bridge508: port 1(syz_tun) entered blocking state [ 751.413741][T24073] bridge508: port 1(syz_tun) entered forwarding state [ 751.414589][T24066] FAT-fs (loop2): Can't find a valid FAT filesystem [ 751.481560][T24073] bond0: (slave bridge508): Enslaving as an active interface with an up link [ 751.520854][T24078] device syz_tun left promiscuous mode 09:12:14 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x5004}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 751.526593][T24078] bridge158: port 1(syz_tun) entered disabled state [ 751.595766][T24078] bridge159: port 1(syz_tun) entered blocking state [ 751.620101][T24078] bridge159: port 1(syz_tun) entered disabled state [ 751.621098][T24086] FAT-fs (loop3): bogus logical sector size 1036 [ 751.636424][T24078] device syz_tun entered promiscuous mode [ 751.642968][T24086] FAT-fs (loop3): Can't find a valid FAT filesystem [ 751.650964][T24088] FAT-fs (loop1): bogus number of reserved sectors [ 751.655029][T24089] FAT-fs (loop2): bogus number of reserved sectors [ 751.661389][T24088] FAT-fs (loop1): Can't find a valid FAT filesystem [ 751.670624][T24089] FAT-fs (loop2): Can't find a valid FAT filesystem [ 751.670770][T24079] device syz_tun left promiscuous mode [ 751.687125][T24079] bridge243: port 1(syz_tun) entered disabled state [ 751.737243][T24079] bridge244: port 1(syz_tun) entered blocking state [ 751.754316][T24079] bridge244: port 1(syz_tun) entered disabled state [ 751.764328][T24079] device syz_tun entered promiscuous mode 09:12:14 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025f80a000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 751.786278][T24078] device syz_tun left promiscuous mode [ 751.792254][T24078] bridge159: port 1(syz_tun) entered disabled state 09:12:15 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740c0504010a0200027400f8", 0x16}], 0x0, 0x0) [ 751.831615][T24089] FAT-fs (loop2): bogus number of reserved sectors [ 751.845937][T24088] FAT-fs (loop1): bogus number of reserved sectors [ 751.849017][T24089] FAT-fs (loop2): Can't find a valid FAT filesystem [ 751.854032][T24088] FAT-fs (loop1): Can't find a valid FAT filesystem 09:12:15 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x68, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) 09:12:15 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x120a}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:12:15 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0f0000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 751.994645][T24100] device syz_tun left promiscuous mode 09:12:15 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x5104}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 752.036912][T24100] bridge508: port 1(syz_tun) entered disabled state [ 752.040830][T24104] FAT-fs (loop1): bogus number of reserved sectors [ 752.063330][T24104] FAT-fs (loop1): Can't find a valid FAT filesystem [ 752.070601][T24106] FAT-fs (loop3): bogus logical sector size 1292 [ 752.081036][T24106] FAT-fs (loop3): Can't find a valid FAT filesystem [ 752.092270][T24100] bridge509: port 1(syz_tun) entered blocking state [ 752.099583][T24100] bridge509: port 1(syz_tun) entered disabled state [ 752.110673][T24100] device syz_tun entered promiscuous mode [ 752.121099][T24099] bridge509: port 1(syz_tun) entered blocking state [ 752.127754][T24099] bridge509: port 1(syz_tun) entered forwarding state [ 752.158873][T24099] bond0: (slave bridge509): Enslaving as an active interface with an up link [ 752.190939][T24111] device syz_tun left promiscuous mode [ 752.200891][T24111] bridge244: port 1(syz_tun) entered disabled state [ 752.269727][T24111] bridge245: port 1(syz_tun) entered blocking state [ 752.279462][T24106] FAT-fs (loop3): bogus logical sector size 1292 [ 752.297849][T24119] FAT-fs (loop2): bogus number of reserved sectors [ 752.304390][T24106] FAT-fs (loop3): Can't find a valid FAT filesystem [ 752.311487][T24111] bridge245: port 1(syz_tun) entered disabled state [ 752.321860][T24119] FAT-fs (loop2): Can't find a valid FAT filesystem [ 752.346079][T24111] device syz_tun entered promiscuous mode [ 752.362279][T24112] bridge160: port 1(syz_tun) entered blocking state [ 752.370463][T24112] bridge160: port 1(syz_tun) entered disabled state 09:12:15 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x2000}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:12:15 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740c0604010a0200027400f8", 0x16}], 0x0, 0x0) [ 752.399586][T24112] device syz_tun entered promiscuous mode [ 752.417586][T24100] device syz_tun left promiscuous mode [ 752.423351][T24100] bridge509: port 1(syz_tun) entered disabled state [ 752.498411][T24119] FAT-fs (loop2): bogus number of reserved sectors [ 752.510558][T24119] FAT-fs (loop2): Can't find a valid FAT filesystem [ 752.580185][T24125] FAT-fs (loop1): bogus number of reserved sectors [ 752.608624][T24125] FAT-fs (loop1): Can't find a valid FAT filesystem [ 752.659476][T24128] FAT-fs (loop3): bogus logical sector size 1548 [ 752.692837][T24128] FAT-fs (loop3): Can't find a valid FAT filesystem 09:12:15 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x5204}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 752.724337][T24125] FAT-fs (loop1): bogus number of reserved sectors 09:12:15 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="100000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:12:15 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x6c, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) 09:12:15 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025400b000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 752.767534][T24125] FAT-fs (loop1): Can't find a valid FAT filesystem 09:12:16 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x2010}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 752.927423][T24128] FAT-fs (loop3): bogus logical sector size 1548 [ 752.941473][T24128] FAT-fs (loop3): Can't find a valid FAT filesystem [ 753.062306][T24137] FAT-fs (loop2): bogus number of reserved sectors 09:12:16 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740c0704010a0200027400f8", 0x16}], 0x0, 0x0) [ 753.112278][T24137] FAT-fs (loop2): Can't find a valid FAT filesystem [ 753.133737][T24141] device syz_tun left promiscuous mode [ 753.147589][T24141] bridge245: port 1(syz_tun) entered disabled state [ 753.209448][T24137] FAT-fs (loop2): bogus number of reserved sectors [ 753.219272][T24141] bridge246: port 1(syz_tun) entered blocking state [ 753.234523][T24145] FAT-fs (loop1): bogus number of reserved sectors [ 753.241433][T24137] FAT-fs (loop2): Can't find a valid FAT filesystem [ 753.252350][T24141] bridge246: port 1(syz_tun) entered disabled state [ 753.260049][T24145] FAT-fs (loop1): Can't find a valid FAT filesystem [ 753.275804][T24141] device syz_tun entered promiscuous mode [ 753.295745][T24143] bridge510: port 1(syz_tun) entered blocking state [ 753.308564][T24143] bridge510: port 1(syz_tun) entered disabled state [ 753.319185][T24143] device syz_tun entered promiscuous mode [ 753.330548][T24144] device syz_tun left promiscuous mode [ 753.337209][T24144] bridge160: port 1(syz_tun) entered disabled state [ 753.369321][T24144] bridge161: port 1(syz_tun) entered blocking state [ 753.380257][T24144] bridge161: port 1(syz_tun) entered disabled state [ 753.387940][T24144] device syz_tun entered promiscuous mode [ 753.397337][T24149] FAT-fs (loop3): bogus logical sector size 1804 [ 753.403723][T24149] FAT-fs (loop3): Can't find a valid FAT filesystem 09:12:16 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x5304}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 753.413258][T24139] bridge510: port 1(syz_tun) entered blocking state [ 753.420282][T24139] bridge510: port 1(syz_tun) entered forwarding state [ 753.424561][T24145] FAT-fs (loop1): bogus number of reserved sectors [ 753.433557][T24145] FAT-fs (loop1): Can't find a valid FAT filesystem [ 753.444684][T24139] bond0: (slave bridge510): Enslaving as an active interface with an up link 09:12:16 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x74, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) [ 753.506300][T24143] bridge510: port 1(syz_tun) entered disabled state [ 753.526404][T24149] FAT-fs (loop3): bogus logical sector size 1804 [ 753.536493][T24155] FAT-fs (loop2): bogus number of reserved sectors [ 753.544541][T24149] FAT-fs (loop3): Can't find a valid FAT filesystem 09:12:16 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x2300}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 753.570386][T24155] FAT-fs (loop2): Can't find a valid FAT filesystem 09:12:16 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="250000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:12:16 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740c0804010a0200027400f8", 0x16}], 0x0, 0x0) [ 753.662853][T24155] FAT-fs (loop2): bogus number of reserved sectors [ 753.687177][T24155] FAT-fs (loop2): Can't find a valid FAT filesystem [ 753.699506][T24163] device syz_tun left promiscuous mode 09:12:16 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025480b000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 753.717184][T24163] bridge246: port 1(syz_tun) entered disabled state 09:12:16 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x5404}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 753.767108][T24163] bridge247: port 1(syz_tun) entered blocking state [ 753.773789][T24163] bridge247: port 1(syz_tun) entered disabled state [ 753.790207][T24164] FAT-fs (loop1): bogus number of reserved sectors [ 753.794312][T24163] device syz_tun entered promiscuous mode [ 753.827688][T24164] FAT-fs (loop1): Can't find a valid FAT filesystem [ 753.834647][T24167] device syz_tun left promiscuous mode [ 753.844588][T24170] FAT-fs (loop3): bogus logical sector size 2060 [ 753.868050][T24167] bridge161: port 1(syz_tun) entered disabled state [ 753.881699][T24170] FAT-fs (loop3): Can't find a valid FAT filesystem [ 753.940234][T24167] bridge162: port 1(syz_tun) entered blocking state [ 753.954313][T24167] bridge162: port 1(syz_tun) entered disabled state [ 753.964047][T24167] device syz_tun entered promiscuous mode [ 753.995975][T24164] FAT-fs (loop1): bogus number of reserved sectors [ 754.013089][T24164] FAT-fs (loop1): Can't find a valid FAT filesystem [ 754.024355][T24180] FAT-fs (loop2): bogus number of reserved sectors [ 754.031021][T24170] FAT-fs (loop3): bogus logical sector size 2060 [ 754.037938][T24177] device syz_tun left promiscuous mode 09:12:17 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x7a, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) [ 754.050121][T24180] FAT-fs (loop2): Can't find a valid FAT filesystem [ 754.056901][T24177] bridge510: port 1(syz_tun) entered disabled state [ 754.057029][T24170] FAT-fs (loop3): Can't find a valid FAT filesystem [ 754.098560][T24177] bridge511: port 1(syz_tun) entered blocking state [ 754.115678][T24177] bridge511: port 1(syz_tun) entered disabled state [ 754.123379][T24177] device syz_tun entered promiscuous mode [ 754.139182][T24181] bridge511: port 1(syz_tun) entered blocking state [ 754.145874][T24181] bridge511: port 1(syz_tun) entered forwarding state 09:12:17 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x25fd}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:12:17 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740c0904010a0200027400f8", 0x16}], 0x0, 0x0) 09:12:17 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x5504}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 754.213929][T24181] bond0: (slave bridge511): Enslaving as an active interface with an up link [ 754.228897][T24171] device syz_tun left promiscuous mode [ 754.242520][T24171] bridge162: port 1(syz_tun) entered disabled state [ 754.304621][T24190] bridge511: port 1(syz_tun) entered disabled state [ 754.354890][T24193] FAT-fs (loop2): bogus number of reserved sectors [ 754.367841][T24194] FAT-fs (loop1): bogus number of reserved sectors [ 754.369977][T24193] FAT-fs (loop2): Can't find a valid FAT filesystem [ 754.382414][T24194] FAT-fs (loop1): Can't find a valid FAT filesystem 09:12:17 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="490000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 754.421869][T24188] device syz_tun left promiscuous mode [ 754.434242][T24188] bridge247: port 1(syz_tun) entered disabled state [ 754.490437][T24188] bridge248: port 1(syz_tun) entered blocking state [ 754.497352][T24188] bridge248: port 1(syz_tun) entered disabled state [ 754.510640][T24188] device syz_tun entered promiscuous mode [ 754.518631][T24193] FAT-fs (loop2): bogus number of reserved sectors [ 754.527674][T24198] FAT-fs (loop3): bogus logical sector size 2316 [ 754.527700][T24193] FAT-fs (loop2): Can't find a valid FAT filesystem [ 754.534028][T24198] FAT-fs (loop3): Can't find a valid FAT filesystem [ 754.543431][T24174] device syz_tun left promiscuous mode [ 754.556986][T24174] bridge511: port 1(syz_tun) entered disabled state [ 754.585426][T24194] FAT-fs (loop1): bogus number of reserved sectors [ 754.591984][T24194] FAT-fs (loop1): Can't find a valid FAT filesystem [ 754.610072][T24203] __nla_validate_parse: 18 callbacks suppressed [ 754.610087][T24203] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 09:12:17 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025500b000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 754.655535][T24186] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 754.680575][T24205] bridge163: port 1(syz_tun) entered blocking state [ 754.693122][T24205] bridge163: port 1(syz_tun) entered disabled state 09:12:17 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x5604}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:12:17 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x2604}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 754.701409][T24205] device syz_tun entered promiscuous mode [ 754.715486][T24198] FAT-fs (loop3): bogus logical sector size 2316 [ 754.729656][T24198] FAT-fs (loop3): Can't find a valid FAT filesystem [ 754.743082][T24208] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 09:12:17 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x300, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) [ 754.781616][T24208] bridge512: port 1(syz_tun) entered blocking state [ 754.791523][T24208] bridge512: port 1(syz_tun) entered disabled state [ 754.799755][T24208] device syz_tun entered promiscuous mode 09:12:18 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740c0a04010a0200027400f8", 0x16}], 0x0, 0x0) 09:12:18 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4b0000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 754.829753][T24208] bridge512: port 1(syz_tun) entered blocking state [ 754.836473][T24208] bridge512: port 1(syz_tun) entered forwarding state [ 754.888802][T24208] bond0: (slave bridge512): Enslaving as an active interface with an up link [ 754.969412][T24213] bridge512: port 1(syz_tun) entered disabled state [ 754.994287][T24210] FAT-fs (loop2): bogus number of reserved sectors [ 755.014502][ C0] net_ratelimit: 2 callbacks suppressed [ 755.014512][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 755.025912][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 755.031680][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 755.037470][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 755.043249][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 755.049068][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 755.056987][T24210] FAT-fs (loop2): Can't find a valid FAT filesystem [ 755.063657][T24219] FAT-fs (loop3): bogus logical sector size 2572 [ 755.065659][T24221] FAT-fs (loop1): bogus number of reserved sectors [ 755.076833][T24219] FAT-fs (loop3): Can't find a valid FAT filesystem [ 755.081368][T24221] FAT-fs (loop1): Can't find a valid FAT filesystem [ 755.100464][T24217] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 09:12:18 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025580b000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 755.130218][T24218] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 755.162766][T24223] device syz_tun left promiscuous mode [ 755.173960][T24223] bridge163: port 1(syz_tun) entered disabled state [ 755.174465][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 755.186403][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 755.217534][T24223] bridge164: port 1(syz_tun) entered blocking state [ 755.227888][T24223] bridge164: port 1(syz_tun) entered disabled state [ 755.236046][T24223] device syz_tun entered promiscuous mode [ 755.244987][T24224] device syz_tun left promiscuous mode [ 755.245151][T24221] FAT-fs (loop1): bogus number of reserved sectors [ 755.253644][T24224] bridge248: port 1(syz_tun) entered disabled state [ 755.269771][T24219] FAT-fs (loop3): bogus logical sector size 2572 [ 755.270913][T24210] FAT-fs (loop2): bogus number of reserved sectors [ 755.283715][T24210] FAT-fs (loop2): Can't find a valid FAT filesystem [ 755.290718][T24219] FAT-fs (loop3): Can't find a valid FAT filesystem [ 755.299830][T24224] bridge249: port 1(syz_tun) entered blocking state [ 755.301405][T24221] FAT-fs (loop1): Can't find a valid FAT filesystem [ 755.307097][T24224] bridge249: port 1(syz_tun) entered disabled state [ 755.322214][T24224] device syz_tun entered promiscuous mode 09:12:18 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x5704}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:12:18 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c00000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 755.338376][T24232] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 09:12:18 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x500, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) [ 755.410302][T24233] device syz_tun left promiscuous mode [ 755.424923][T24233] bridge512: port 1(syz_tun) entered disabled state 09:12:18 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740c1004010a0200027400f8", 0x16}], 0x0, 0x0) 09:12:18 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x2804}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 755.480418][T24233] bridge513: port 1(syz_tun) entered blocking state [ 755.516785][T24233] bridge513: port 1(syz_tun) entered disabled state [ 755.529715][T24233] device syz_tun entered promiscuous mode [ 755.539882][T24232] bridge513: port 1(syz_tun) entered blocking state [ 755.546685][T24232] bridge513: port 1(syz_tun) entered forwarding state [ 755.591772][T24232] bond0: (slave bridge513): Enslaving as an active interface with an up link [ 755.600922][T24236] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 755.624565][T24237] FAT-fs (loop2): bogus number of reserved sectors [ 755.638897][T24244] FAT-fs (loop3): bogus logical sector size 4108 [ 755.647942][T24237] FAT-fs (loop2): Can't find a valid FAT filesystem [ 755.656223][T24244] FAT-fs (loop3): Can't find a valid FAT filesystem [ 755.690659][T24239] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 755.718475][T24240] device syz_tun left promiscuous mode [ 755.724253][T24240] bridge164: port 1(syz_tun) entered disabled state [ 755.751544][T24240] bridge165: port 1(syz_tun) entered blocking state [ 755.766987][T24240] bridge165: port 1(syz_tun) entered disabled state [ 755.779352][T24249] FAT-fs (loop1): bogus number of reserved sectors [ 755.786174][T24237] FAT-fs (loop2): bogus number of reserved sectors [ 755.800416][T24240] device syz_tun entered promiscuous mode [ 755.808286][T24249] FAT-fs (loop1): Can't find a valid FAT filesystem [ 755.815759][T24244] FAT-fs (loop3): bogus logical sector size 4108 [ 755.826378][T24237] FAT-fs (loop2): Can't find a valid FAT filesystem [ 755.833132][T24244] FAT-fs (loop3): Can't find a valid FAT filesystem [ 755.847508][T24243] device syz_tun left promiscuous mode [ 755.856415][T24243] bridge249: port 1(syz_tun) entered disabled state [ 755.916659][T24243] bridge250: port 1(syz_tun) entered blocking state [ 755.924003][T24243] bridge250: port 1(syz_tun) entered disabled state [ 755.933702][T24243] device syz_tun entered promiscuous mode 09:12:19 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x5804}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 755.974474][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 755.980501][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:12:19 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c00e00001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:12:19 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025600b000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:12:19 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740c1404010a0200027400f8", 0x16}], 0x0, 0x0) 09:12:19 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x3f00}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 756.035648][T24239] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 756.138037][T24259] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 756.158954][T24259] device syz_tun left promiscuous mode 09:12:19 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x600, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) [ 756.187245][T24260] FAT-fs (loop2): bogus number of reserved sectors [ 756.194468][T24260] FAT-fs (loop2): Can't find a valid FAT filesystem [ 756.202531][T24259] bridge165: port 1(syz_tun) entered disabled state [ 756.256046][T24260] FAT-fs (loop2): bogus number of reserved sectors [ 756.262588][T24260] FAT-fs (loop2): Can't find a valid FAT filesystem [ 756.271307][T24259] bridge166: port 1(syz_tun) entered blocking state [ 756.282568][T24259] bridge166: port 1(syz_tun) entered disabled state [ 756.297854][T24259] device syz_tun entered promiscuous mode [ 756.308844][T24269] FAT-fs (loop1): bogus number of reserved sectors [ 756.321492][T24268] FAT-fs (loop3): bogus logical sector size 5132 [ 756.331257][T24269] FAT-fs (loop1): Can't find a valid FAT filesystem [ 756.333757][T24270] device syz_tun left promiscuous mode [ 756.340187][T24268] FAT-fs (loop3): Can't find a valid FAT filesystem [ 756.348554][T24270] bridge513: port 1(syz_tun) entered disabled state 09:12:19 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x5904}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 756.401696][T24270] bridge514: port 1(syz_tun) entered blocking state [ 756.410706][T24270] bridge514: port 1(syz_tun) entered disabled state [ 756.420763][T24270] device syz_tun entered promiscuous mode [ 756.429346][T24266] device syz_tun left promiscuous mode [ 756.439695][T24266] bridge166: port 1(syz_tun) entered disabled state [ 756.466764][T24268] FAT-fs (loop3): bogus logical sector size 5132 [ 756.476314][T24269] FAT-fs (loop1): bogus number of reserved sectors [ 756.490277][T24283] FAT-fs (loop2): bogus number of reserved sectors [ 756.490542][T24268] FAT-fs (loop3): Can't find a valid FAT filesystem [ 756.497704][T24283] FAT-fs (loop2): Can't find a valid FAT filesystem [ 756.508017][T24269] FAT-fs (loop1): Can't find a valid FAT filesystem 09:12:19 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="e03f03001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 756.537540][T24275] bridge514: port 1(syz_tun) entered blocking state [ 756.544351][T24275] bridge514: port 1(syz_tun) entered forwarding state 09:12:19 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740c3c04010a0200027400f8", 0x16}], 0x0, 0x0) [ 756.581255][T24275] bond0: (slave bridge514): Enslaving as an active interface with an up link [ 756.597424][T24277] device syz_tun left promiscuous mode [ 756.614845][T24277] bridge250: port 1(syz_tun) entered disabled state [ 756.657796][T24277] bridge251: port 1(syz_tun) entered blocking state [ 756.677707][T24277] bridge251: port 1(syz_tun) entered disabled state 09:12:19 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x4000}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 756.705962][T24277] device syz_tun entered promiscuous mode [ 756.758061][T24285] bridge514: port 1(syz_tun) entered disabled state 09:12:20 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x5a04}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 756.827934][T24290] bridge167: port 1(syz_tun) entered blocking state [ 756.834778][T24290] bridge167: port 1(syz_tun) entered disabled state [ 756.842365][T24290] device syz_tun entered promiscuous mode [ 756.851816][T24289] FAT-fs (loop3): bogus logical sector size 15372 [ 756.877757][T24289] FAT-fs (loop3): Can't find a valid FAT filesystem [ 756.904514][T24294] FAT-fs (loop1): bogus number of reserved sectors [ 756.912014][T24297] FAT-fs (loop2): bogus number of reserved sectors [ 756.916855][T24294] FAT-fs (loop1): Can't find a valid FAT filesystem 09:12:20 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x700, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) 09:12:20 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025680b000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 756.919041][T24297] FAT-fs (loop2): Can't find a valid FAT filesystem 09:12:20 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="e80000201000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 757.069355][T24289] FAT-fs (loop3): bogus logical sector size 15372 [ 757.080241][T24294] FAT-fs (loop1): bogus number of reserved sectors [ 757.088774][T24297] FAT-fs (loop2): bogus number of reserved sectors [ 757.092518][T24303] device syz_tun left promiscuous mode [ 757.104499][T24289] FAT-fs (loop3): Can't find a valid FAT filesystem [ 757.107044][T24303] bridge251: port 1(syz_tun) entered disabled state [ 757.111249][T24294] FAT-fs (loop1): Can't find a valid FAT filesystem [ 757.143380][T24297] FAT-fs (loop2): Can't find a valid FAT filesystem [ 757.176526][T24303] bridge252: port 1(syz_tun) entered blocking state [ 757.189907][T24303] bridge252: port 1(syz_tun) entered disabled state [ 757.202498][T24303] device syz_tun entered promiscuous mode [ 757.229818][T24309] device syz_tun left promiscuous mode 09:12:20 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x4001}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:12:20 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740c4504010a0200027400f8", 0x16}], 0x0, 0x0) [ 757.248113][T24309] bridge167: port 1(syz_tun) entered disabled state 09:12:20 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x6800}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 757.310396][T24309] bridge168: port 1(syz_tun) entered blocking state [ 757.319236][T24309] bridge168: port 1(syz_tun) entered disabled state [ 757.340450][T24309] device syz_tun entered promiscuous mode [ 757.367313][T24310] device syz_tun left promiscuous mode [ 757.372945][T24310] bridge514: port 1(syz_tun) entered disabled state [ 757.419126][T24310] bridge515: port 1(syz_tun) entered blocking state [ 757.431713][T24310] bridge515: port 1(syz_tun) entered disabled state [ 757.440619][T24310] device syz_tun entered promiscuous mode [ 757.452122][T24307] device syz_tun left promiscuous mode [ 757.453771][T24314] FAT-fs (loop1): bogus number of reserved sectors [ 757.458084][T24307] bridge252: port 1(syz_tun) entered disabled state [ 757.474881][T24316] FAT-fs (loop3): bogus logical sector size 17676 [ 757.481451][T24316] FAT-fs (loop3): Can't find a valid FAT filesystem [ 757.487741][T24314] FAT-fs (loop1): Can't find a valid FAT filesystem [ 757.494841][T24323] FAT-fs (loop2): bogus number of reserved sectors [ 757.501417][T24323] FAT-fs (loop2): Can't find a valid FAT filesystem 09:12:20 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0xa00, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) [ 757.536394][T24308] bridge515: port 1(syz_tun) entered blocking state [ 757.543132][T24308] bridge515: port 1(syz_tun) entered forwarding state 09:12:20 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00f0ff7f1000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 757.588782][T24308] bond0: (slave bridge515): Enslaving as an active interface with an up link [ 757.649873][T24310] bridge515: port 1(syz_tun) entered disabled state [ 757.660471][T24316] FAT-fs (loop3): bogus logical sector size 17676 [ 757.672339][T24323] FAT-fs (loop2): bogus number of reserved sectors [ 757.678928][T24314] FAT-fs (loop1): bogus number of reserved sectors [ 757.694501][T24316] FAT-fs (loop3): Can't find a valid FAT filesystem [ 757.707205][T24314] FAT-fs (loop1): Can't find a valid FAT filesystem [ 757.710540][T24323] FAT-fs (loop2): Can't find a valid FAT filesystem 09:12:20 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740c4904010a0200027400f8", 0x16}], 0x0, 0x0) 09:12:21 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025700b000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 757.780094][T24332] device syz_tun left promiscuous mode [ 757.792074][T24332] bridge168: port 1(syz_tun) entered disabled state 09:12:21 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x4010}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 757.839800][T24332] bridge169: port 1(syz_tun) entered blocking state [ 757.857198][T24332] bridge169: port 1(syz_tun) entered disabled state [ 757.882264][T24332] device syz_tun entered promiscuous mode [ 757.907212][T24333] bridge253: port 1(syz_tun) entered blocking state 09:12:21 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x6c00}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 757.931914][T24333] bridge253: port 1(syz_tun) entered disabled state [ 757.957578][T24333] device syz_tun entered promiscuous mode [ 758.009547][T24342] device syz_tun left promiscuous mode [ 758.029773][T24343] FAT-fs (loop1): bogus number of reserved sectors [ 758.037566][T24341] FAT-fs (loop3): bogus logical sector size 18700 [ 758.050990][T24342] bridge515: port 1(syz_tun) entered disabled state 09:12:21 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000040000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 758.060154][T24343] FAT-fs (loop1): Can't find a valid FAT filesystem [ 758.070928][T24341] FAT-fs (loop3): Can't find a valid FAT filesystem [ 758.077898][T24349] FAT-fs (loop2): bogus number of reserved sectors [ 758.089212][T24349] FAT-fs (loop2): Can't find a valid FAT filesystem [ 758.118087][T24342] bridge516: port 1(syz_tun) entered blocking state [ 758.134552][T24342] bridge516: port 1(syz_tun) entered disabled state [ 758.142154][T24342] device syz_tun entered promiscuous mode [ 758.161136][T24335] bridge516: port 1(syz_tun) entered blocking state 09:12:21 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0xc00, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) [ 758.167826][T24335] bridge516: port 1(syz_tun) entered forwarding state [ 758.209148][T24335] bond0: (slave bridge516): Enslaving as an active interface with an up link [ 758.233058][T24343] FAT-fs (loop1): bogus number of reserved sectors [ 758.235012][T24349] FAT-fs (loop2): bogus number of reserved sectors [ 758.246856][T24349] FAT-fs (loop2): Can't find a valid FAT filesystem [ 758.248978][T24356] device syz_tun left promiscuous mode [ 758.260398][T24341] FAT-fs (loop3): bogus logical sector size 18700 [ 758.274498][T24343] FAT-fs (loop1): Can't find a valid FAT filesystem [ 758.284318][T24341] FAT-fs (loop3): Can't find a valid FAT filesystem 09:12:21 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x7400}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 758.305034][T24356] bridge169: port 1(syz_tun) entered disabled state 09:12:21 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x4104}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 758.385831][T24356] bridge170: port 1(syz_tun) entered blocking state [ 758.402124][T24356] bridge170: port 1(syz_tun) entered disabled state [ 758.419768][T24356] device syz_tun entered promiscuous mode 09:12:21 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740c6304010a0200027400f8", 0x16}], 0x0, 0x0) [ 758.452512][T24342] device syz_tun left promiscuous mode [ 758.463933][T24342] bridge516: port 1(syz_tun) entered disabled state [ 758.535365][T24365] FAT-fs (loop1): bogus number of reserved sectors [ 758.542552][T24367] FAT-fs (loop2): bogus number of reserved sectors [ 758.543450][T24365] FAT-fs (loop1): Can't find a valid FAT filesystem [ 758.559059][T24367] FAT-fs (loop2): Can't find a valid FAT filesystem [ 758.632674][T24361] device syz_tun left promiscuous mode [ 758.638609][T24361] bridge253: port 1(syz_tun) entered disabled state [ 758.664953][T24372] FAT-fs (loop3): bogus logical sector size 25356 [ 758.674483][T24365] FAT-fs (loop1): bogus number of reserved sectors 09:12:21 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025780b000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 758.681035][T24365] FAT-fs (loop1): Can't find a valid FAT filesystem [ 758.698106][T24367] FAT-fs (loop2): bogus number of reserved sectors [ 758.706957][T24361] bridge254: port 1(syz_tun) entered blocking state [ 758.717789][T24372] FAT-fs (loop3): Can't find a valid FAT filesystem [ 758.718103][T24361] bridge254: port 1(syz_tun) entered disabled state [ 758.724710][T24367] FAT-fs (loop2): Can't find a valid FAT filesystem [ 758.747997][T24361] device syz_tun entered promiscuous mode [ 758.772578][T24377] bridge517: port 1(syz_tun) entered blocking state 09:12:22 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x7800}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:12:22 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000000100250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 758.779854][T24377] bridge517: port 1(syz_tun) entered disabled state [ 758.788386][T24377] device syz_tun entered promiscuous mode [ 758.800949][T24377] bridge517: port 1(syz_tun) entered blocking state [ 758.807613][T24377] bridge517: port 1(syz_tun) entered forwarding state [ 758.819338][T24377] bond0: (slave bridge517): Enslaving as an active interface with an up link [ 758.868306][T24378] bridge517: port 1(syz_tun) entered disabled state [ 758.893148][T24372] FAT-fs (loop3): bogus logical sector size 25356 09:12:22 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x4204}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:12:22 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0xe00, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) [ 758.926751][T24372] FAT-fs (loop3): Can't find a valid FAT filesystem [ 758.977102][T24383] device syz_tun left promiscuous mode [ 758.994817][T24383] bridge170: port 1(syz_tun) entered disabled state 09:12:22 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025800b000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:12:22 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740c0204000a0200027400f8", 0x16}], 0x0, 0x0) [ 759.068292][T24384] FAT-fs (loop2): bogus number of reserved sectors [ 759.070232][T24383] bridge171: port 1(syz_tun) entered blocking state [ 759.083162][T24383] bridge171: port 1(syz_tun) entered disabled state [ 759.091194][T24383] device syz_tun entered promiscuous mode [ 759.109165][T24387] device syz_tun left promiscuous mode [ 759.114886][T24387] bridge254: port 1(syz_tun) entered disabled state [ 759.124506][T24384] FAT-fs (loop2): Can't find a valid FAT filesystem [ 759.159700][T24387] bridge255: port 1(syz_tun) entered blocking state [ 759.178744][T24387] bridge255: port 1(syz_tun) entered disabled state [ 759.185942][T24390] FAT-fs (loop1): bogus number of reserved sectors [ 759.188841][T24387] device syz_tun entered promiscuous mode [ 759.198063][T24384] FAT-fs (loop2): bogus number of reserved sectors [ 759.216316][T24384] FAT-fs (loop2): Can't find a valid FAT filesystem [ 759.222989][T24390] FAT-fs (loop1): Can't find a valid FAT filesystem [ 759.227217][T24398] device syz_tun left promiscuous mode [ 759.230769][T24396] FAT-fs (loop3): bogus logical sector size 524 09:12:22 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000000200250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 759.264213][T24398] bridge517: port 1(syz_tun) entered disabled state [ 759.273339][T24396] FAT-fs (loop3): Can't find a valid FAT filesystem 09:12:22 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x7a00}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 759.311809][T24398] bridge518: port 1(syz_tun) entered blocking state [ 759.324386][T24398] bridge518: port 1(syz_tun) entered disabled state [ 759.335288][T24398] device syz_tun entered promiscuous mode [ 759.358406][T24393] device syz_tun left promiscuous mode [ 759.370209][T24393] bridge255: port 1(syz_tun) entered disabled state [ 759.382219][T24390] FAT-fs (loop1): bogus number of reserved sectors [ 759.397679][T24396] FAT-fs (loop3): bogus logical sector size 524 [ 759.404004][T24390] FAT-fs (loop1): Can't find a valid FAT filesystem [ 759.412027][T24396] FAT-fs (loop3): Can't find a valid FAT filesystem [ 759.429321][T24391] bridge518: port 1(syz_tun) entered blocking state [ 759.436217][T24391] bridge518: port 1(syz_tun) entered forwarding state 09:12:22 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x2000, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) [ 759.471568][T24391] bond0: (slave bridge518): Enslaving as an active interface with an up link [ 759.497995][T24408] device syz_tun left promiscuous mode [ 759.518721][T24408] bridge171: port 1(syz_tun) entered disabled state 09:12:22 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740c0202010a0200027400f8", 0x16}], 0x0, 0x0) 09:12:22 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x4304}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 759.563215][T24412] FAT-fs (loop2): bogus number of reserved sectors [ 759.583021][T24412] FAT-fs (loop2): Can't find a valid FAT filesystem [ 759.592680][T24408] bridge172: port 1(syz_tun) entered blocking state [ 759.602685][T24408] bridge172: port 1(syz_tun) entered disabled state [ 759.610458][T24408] device syz_tun entered promiscuous mode [ 759.632177][T24403] device syz_tun left promiscuous mode [ 759.641639][T24403] bridge518: port 1(syz_tun) entered disabled state [ 759.689263][T24416] __nla_validate_parse: 20 callbacks suppressed [ 759.689275][T24416] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 759.719016][T24420] FAT-fs (loop3): bogus logical sector size 524 [ 759.727043][T24412] FAT-fs (loop2): bogus number of reserved sectors 09:12:22 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025880b000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 759.734512][T24420] FAT-fs (loop3): Can't find a valid FAT filesystem [ 759.746095][T24412] FAT-fs (loop2): Can't find a valid FAT filesystem [ 759.767972][T24418] bridge256: port 1(syz_tun) entered blocking state [ 759.778163][T24418] bridge256: port 1(syz_tun) entered disabled state [ 759.788164][T24418] device syz_tun entered promiscuous mode 09:12:23 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00\n\x00%\b\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 759.875021][T24425] FAT-fs (loop1): bogus number of reserved sectors [ 759.881630][T24420] FAT-fs (loop3): bogus logical sector size 524 [ 759.883222][T24430] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 759.905404][T24420] FAT-fs (loop3): Can't find a valid FAT filesystem 09:12:23 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x3f00, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) 09:12:23 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xedc0}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 759.924997][T24430] device syz_tun left promiscuous mode [ 759.930725][T24430] bridge172: port 1(syz_tun) entered disabled state [ 759.937702][T24425] FAT-fs (loop1): Can't find a valid FAT filesystem 09:12:23 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740c0203010a0200027400f8", 0x16}], 0x0, 0x0) [ 759.996894][T24430] bridge173: port 1(syz_tun) entered blocking state [ 760.018356][T24425] FAT-fs (loop1): bogus number of reserved sectors [ 760.034542][T24430] bridge173: port 1(syz_tun) entered disabled state [ 760.037374][T24425] FAT-fs (loop1): Can't find a valid FAT filesystem [ 760.042354][T24430] device syz_tun entered promiscuous mode [ 760.071502][T24431] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 760.091050][T24443] FAT-fs (loop3): bogus logical sector size 524 [ 760.097767][T24443] FAT-fs (loop3): Can't find a valid FAT filesystem [ 760.127951][T24434] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 760.137296][ C1] net_ratelimit: 12 callbacks suppressed [ 760.137325][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 760.137353][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 760.162961][T24435] bridge519: port 1(syz_tun) entered blocking state [ 760.173355][T24435] bridge519: port 1(syz_tun) entered disabled state [ 760.181657][T24435] device syz_tun entered promiscuous mode [ 760.193098][T24437] device syz_tun left promiscuous mode [ 760.199082][T24437] bridge256: port 1(syz_tun) entered disabled state [ 760.231391][T24443] FAT-fs (loop3): bogus logical sector size 524 [ 760.238526][T24445] FAT-fs (loop2): bogus number of reserved sectors 09:12:23 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x4404}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 760.252966][T24443] FAT-fs (loop3): Can't find a valid FAT filesystem [ 760.262973][T24445] FAT-fs (loop2): Can't find a valid FAT filesystem [ 760.275414][T24437] bridge257: port 1(syz_tun) entered blocking state [ 760.282109][T24437] bridge257: port 1(syz_tun) entered disabled state [ 760.304088][T24437] device syz_tun entered promiscuous mode [ 760.319652][T24438] bridge519: port 1(syz_tun) entered blocking state [ 760.326320][T24438] bridge519: port 1(syz_tun) entered forwarding state 09:12:23 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740c0205010a0200027400f8", 0x16}], 0x0, 0x0) [ 760.358689][T24438] bond0: (slave bridge519): Enslaving as an active interface with an up link [ 760.399341][T24434] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 760.412609][T24431] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 09:12:23 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000000f00250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 760.448051][T24445] FAT-fs (loop2): bogus number of reserved sectors [ 760.457565][T24445] FAT-fs (loop2): Can't find a valid FAT filesystem 09:12:23 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x4000, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) [ 760.543588][T24452] FAT-fs (loop1): bogus number of reserved sectors [ 760.585577][T24455] FAT-fs (loop3): bogus logical sector size 524 [ 760.591898][T24455] FAT-fs (loop3): Can't find a valid FAT filesystem [ 760.604791][T24452] FAT-fs (loop1): Can't find a valid FAT filesystem 09:12:23 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xfb25}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:12:23 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025900b000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 760.639754][T24459] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 760.690570][T24460] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 760.711910][T24461] device syz_tun left promiscuous mode [ 760.722365][T24461] bridge173: port 1(syz_tun) entered disabled state [ 760.790015][T24452] FAT-fs (loop1): bogus number of reserved sectors [ 760.801191][T24461] bridge174: port 1(syz_tun) entered blocking state [ 760.811407][T24455] FAT-fs (loop3): bogus logical sector size 524 [ 760.820608][T24452] FAT-fs (loop1): Can't find a valid FAT filesystem [ 760.832243][T24455] FAT-fs (loop3): Can't find a valid FAT filesystem [ 760.841364][T24461] bridge174: port 1(syz_tun) entered disabled state [ 760.861901][T24461] device syz_tun entered promiscuous mode [ 760.877348][T24463] device syz_tun left promiscuous mode [ 760.883224][T24463] bridge257: port 1(syz_tun) entered disabled state 09:12:24 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x4504}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:12:24 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740c0206010a0200027400f8", 0x16}], 0x0, 0x0) [ 760.957109][T24463] bridge258: port 1(syz_tun) entered blocking state [ 760.963981][T24470] FAT-fs (loop2): bogus number of reserved sectors [ 760.978623][T24463] bridge258: port 1(syz_tun) entered disabled state [ 760.992017][T24470] FAT-fs (loop2): Can't find a valid FAT filesystem [ 761.009091][T24463] device syz_tun entered promiscuous mode [ 761.015089][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 761.015125][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 761.034718][T24465] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 761.061472][T24467] device syz_tun left promiscuous mode [ 761.070924][T24467] bridge519: port 1(syz_tun) entered disabled state [ 761.120209][T24467] bridge520: port 1(syz_tun) entered blocking state [ 761.130011][T24467] bridge520: port 1(syz_tun) entered disabled state [ 761.139952][T24467] device syz_tun entered promiscuous mode [ 761.153389][T24469] bridge520: port 1(syz_tun) entered blocking state [ 761.160255][T24469] bridge520: port 1(syz_tun) entered forwarding state [ 761.184545][T24476] FAT-fs (loop3): bogus logical sector size 524 [ 761.198183][T24476] FAT-fs (loop3): Can't find a valid FAT filesystem [ 761.198310][T24469] bond0: (slave bridge520): Enslaving as an active interface with an up link [ 761.213456][T24470] FAT-fs (loop2): bogus number of reserved sectors [ 761.224541][T24470] FAT-fs (loop2): Can't find a valid FAT filesystem 09:12:24 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x4800, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) [ 761.256817][T24467] device syz_tun left promiscuous mode [ 761.294758][T24467] bridge520: port 1(syz_tun) entered disabled state 09:12:24 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280200001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:12:24 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xfc25}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 761.313154][T24476] FAT-fs (loop3): bogus logical sector size 524 [ 761.319910][T24482] FAT-fs (loop1): bogus number of reserved sectors [ 761.338349][T24482] FAT-fs (loop1): Can't find a valid FAT filesystem [ 761.339546][T24476] FAT-fs (loop3): Can't find a valid FAT filesystem 09:12:24 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740c0207010a0200027400f8", 0x16}], 0x0, 0x0) [ 761.453395][T24487] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 761.484524][T24488] device syz_tun left promiscuous mode [ 761.500885][T24488] bridge258: port 1(syz_tun) entered disabled state [ 761.529699][T24482] FAT-fs (loop1): bogus number of reserved sectors [ 761.557036][T24488] bridge259: port 1(syz_tun) entered blocking state [ 761.563775][T24482] FAT-fs (loop1): Can't find a valid FAT filesystem 09:12:24 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025980b000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 761.574580][T24488] bridge259: port 1(syz_tun) entered disabled state [ 761.582361][T24488] device syz_tun entered promiscuous mode [ 761.607601][T24493] device syz_tun left promiscuous mode 09:12:24 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x4604}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 761.629526][T24493] bridge174: port 1(syz_tun) entered disabled state [ 761.637978][T24494] FAT-fs (loop2): bogus number of reserved sectors [ 761.653510][T24494] FAT-fs (loop2): Can't find a valid FAT filesystem [ 761.697104][T24493] bridge175: port 1(syz_tun) entered blocking state [ 761.717771][T24493] bridge175: port 1(syz_tun) entered disabled state [ 761.726897][T24493] device syz_tun entered promiscuous mode [ 761.729063][T24494] FAT-fs (loop2): bogus number of reserved sectors 09:12:24 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x4c00, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) [ 761.743471][T24499] FAT-fs (loop3): bogus logical sector size 524 [ 761.761588][T24504] bridge521: port 1(syz_tun) entered blocking state [ 761.769552][T24499] FAT-fs (loop3): Can't find a valid FAT filesystem [ 761.787377][T24494] FAT-fs (loop2): Can't find a valid FAT filesystem [ 761.797585][T24504] bridge521: port 1(syz_tun) entered disabled state [ 761.827644][T24504] device syz_tun entered promiscuous mode 09:12:25 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xff00}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 761.847901][T24507] FAT-fs (loop1): bogus number of reserved sectors [ 761.860497][T24507] FAT-fs (loop1): Can't find a valid FAT filesystem [ 761.868081][T24498] device syz_tun left promiscuous mode [ 761.873896][T24498] bridge175: port 1(syz_tun) entered disabled state [ 761.933162][T24501] bridge521: port 1(syz_tun) entered blocking state [ 761.939836][T24501] bridge521: port 1(syz_tun) entered forwarding state [ 761.953953][T24499] FAT-fs (loop3): bogus logical sector size 524 [ 761.967071][T24499] FAT-fs (loop3): Can't find a valid FAT filesystem [ 761.980207][T24507] FAT-fs (loop1): bogus number of reserved sectors [ 761.990270][T24507] FAT-fs (loop1): Can't find a valid FAT filesystem [ 762.014073][T24501] bond0: (slave bridge521): Enslaving as an active interface with an up link 09:12:25 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280300001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 762.052044][T24512] device syz_tun left promiscuous mode [ 762.066756][T24512] bridge259: port 1(syz_tun) entered disabled state 09:12:25 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740c0208010a0200027400f8", 0x16}], 0x0, 0x0) [ 762.107487][T24512] bridge260: port 1(syz_tun) entered blocking state [ 762.114156][T24512] bridge260: port 1(syz_tun) entered disabled state [ 762.155676][T24518] FAT-fs (loop2): bogus number of reserved sectors [ 762.187940][T24518] FAT-fs (loop2): Can't find a valid FAT filesystem [ 762.200392][T24512] device syz_tun entered promiscuous mode 09:12:25 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x4704}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 762.214472][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 762.220425][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 762.233879][T24519] bridge521: port 1(syz_tun) entered disabled state [ 762.258214][T24518] FAT-fs (loop2): bogus number of reserved sectors [ 762.274322][T24524] FAT-fs (loop3): bogus logical sector size 524 [ 762.274746][T24518] FAT-fs (loop2): Can't find a valid FAT filesystem [ 762.306769][T24524] FAT-fs (loop3): Can't find a valid FAT filesystem 09:12:25 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xff0f}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 762.367877][T24527] bridge176: port 1(syz_tun) entered blocking state [ 762.387512][T24527] bridge176: port 1(syz_tun) entered disabled state 09:12:25 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x5865, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) [ 762.419531][T24524] FAT-fs (loop3): bogus logical sector size 524 [ 762.438819][T24524] FAT-fs (loop3): Can't find a valid FAT filesystem [ 762.440994][T24527] device syz_tun entered promiscuous mode [ 762.451826][T24530] FAT-fs (loop1): bogus number of reserved sectors 09:12:25 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025a00b000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 762.472789][T24530] FAT-fs (loop1): Can't find a valid FAT filesystem [ 762.612227][T24530] FAT-fs (loop1): bogus number of reserved sectors [ 762.618867][T24534] FAT-fs (loop2): bogus number of reserved sectors 09:12:25 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740c020a010a0200027400f8", 0x16}], 0x0, 0x0) 09:12:25 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280400001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 762.654575][T24530] FAT-fs (loop1): Can't find a valid FAT filesystem [ 762.678348][T24534] FAT-fs (loop2): Can't find a valid FAT filesystem [ 762.697520][T24541] device syz_tun left promiscuous mode [ 762.714658][T24541] bridge260: port 1(syz_tun) entered disabled state [ 762.747334][T24541] bridge261: port 1(syz_tun) entered blocking state [ 762.757524][T24541] bridge261: port 1(syz_tun) entered disabled state 09:12:26 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x4800}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 762.788181][T24541] device syz_tun entered promiscuous mode [ 762.803320][T24544] FAT-fs (loop3): bogus logical sector size 524 [ 762.811390][T24534] FAT-fs (loop2): bogus number of reserved sectors [ 762.840339][T24544] FAT-fs (loop3): Can't find a valid FAT filesystem [ 762.847062][T24534] FAT-fs (loop2): Can't find a valid FAT filesystem [ 762.860479][T24542] device syz_tun left promiscuous mode [ 762.878225][T24542] bridge521: port 1(syz_tun) entered disabled state [ 762.929554][T24542] bridge522: port 1(syz_tun) entered blocking state [ 762.940089][T24542] bridge522: port 1(syz_tun) entered disabled state [ 762.948542][T24542] device syz_tun entered promiscuous mode [ 762.962718][T24546] bridge522: port 1(syz_tun) entered blocking state [ 762.969512][T24546] bridge522: port 1(syz_tun) entered forwarding state [ 763.010169][T24554] FAT-fs (loop1): bogus number of reserved sectors [ 763.016823][T24544] FAT-fs (loop3): bogus logical sector size 524 [ 763.026709][T24554] FAT-fs (loop1): Can't find a valid FAT filesystem [ 763.039365][T24544] FAT-fs (loop3): Can't find a valid FAT filesystem 09:12:26 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x407ff}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 763.055110][T24546] bond0: (slave bridge522): Enslaving as an active interface with an up link [ 763.094466][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 763.100258][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 763.120833][T24550] device syz_tun left promiscuous mode [ 763.144132][T24550] bridge176: port 1(syz_tun) entered disabled state [ 763.166174][T24554] FAT-fs (loop1): bogus number of reserved sectors 09:12:26 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x6000, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) 09:12:26 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740c0210010a0200027400f8", 0x16}], 0x0, 0x0) [ 763.188730][T24554] FAT-fs (loop1): Can't find a valid FAT filesystem [ 763.240501][T24550] bridge177: port 1(syz_tun) entered blocking state [ 763.247583][T24550] bridge177: port 1(syz_tun) entered disabled state [ 763.258867][T24550] device syz_tun entered promiscuous mode [ 763.267887][T24542] device syz_tun left promiscuous mode [ 763.273661][T24542] bridge522: port 1(syz_tun) entered disabled state 09:12:26 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x4804}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 763.353648][T24561] FAT-fs (loop2): bogus number of reserved sectors [ 763.387659][T24561] FAT-fs (loop2): Can't find a valid FAT filesystem 09:12:26 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025a80b000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 763.476380][T24567] FAT-fs (loop3): bogus logical sector size 524 [ 763.482896][T24561] FAT-fs (loop2): bogus number of reserved sectors [ 763.494466][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 763.500276][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 763.500367][T24566] device syz_tun left promiscuous mode [ 763.514044][T24561] FAT-fs (loop2): Can't find a valid FAT filesystem [ 763.544586][T24567] FAT-fs (loop3): Can't find a valid FAT filesystem 09:12:26 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280500001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 763.606429][T24566] bridge261: port 1(syz_tun) entered disabled state 09:12:26 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x40800}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 763.666752][T24566] bridge262: port 1(syz_tun) entered blocking state [ 763.680334][T24566] bridge262: port 1(syz_tun) entered disabled state [ 763.699237][T24566] device syz_tun entered promiscuous mode [ 763.708896][T24567] FAT-fs (loop3): bogus logical sector size 524 [ 763.715299][T24572] FAT-fs (loop1): bogus number of reserved sectors [ 763.727556][T24572] FAT-fs (loop1): Can't find a valid FAT filesystem [ 763.738853][T24567] FAT-fs (loop3): Can't find a valid FAT filesystem [ 763.769944][T24578] bridge523: port 1(syz_tun) entered blocking state [ 763.782160][T24578] bridge523: port 1(syz_tun) entered disabled state [ 763.792033][T24578] device syz_tun entered promiscuous mode [ 763.823934][T24580] bridge523: port 1(syz_tun) entered blocking state [ 763.830661][T24580] bridge523: port 1(syz_tun) entered forwarding state [ 763.850586][T24580] bond0: (slave bridge523): Enslaving as an active interface with an up link [ 763.882026][T24581] device syz_tun left promiscuous mode [ 763.920000][T24572] FAT-fs (loop1): bogus number of reserved sectors 09:12:27 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740c0212010a0200027400f8", 0x16}], 0x0, 0x0) 09:12:27 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x6558, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) [ 763.930016][T24584] FAT-fs (loop2): bogus number of reserved sectors [ 763.943870][T24581] bridge177: port 1(syz_tun) entered disabled state [ 763.957809][T24572] FAT-fs (loop1): Can't find a valid FAT filesystem [ 763.969776][T24584] FAT-fs (loop2): Can't find a valid FAT filesystem [ 764.029350][T24581] bridge178: port 1(syz_tun) entered blocking state [ 764.054111][T24581] bridge178: port 1(syz_tun) entered disabled state [ 764.076322][T24584] FAT-fs (loop2): bogus number of reserved sectors [ 764.084537][T24584] FAT-fs (loop2): Can't find a valid FAT filesystem [ 764.095995][T24581] device syz_tun entered promiscuous mode [ 764.112823][T24578] device syz_tun left promiscuous mode [ 764.118614][T24578] bridge523: port 1(syz_tun) entered disabled state 09:12:27 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x4904}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:12:27 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x80400}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:12:27 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280600001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:12:27 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025b00b000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 764.451257][T24595] FAT-fs (loop2): bogus number of reserved sectors [ 764.467771][T24595] FAT-fs (loop2): Can't find a valid FAT filesystem [ 764.475037][T24597] device syz_tun left promiscuous mode [ 764.503094][T24597] bridge178: port 1(syz_tun) entered disabled state [ 764.547229][T24597] bridge179: port 1(syz_tun) entered blocking state [ 764.558580][T24597] bridge179: port 1(syz_tun) entered disabled state [ 764.569013][T24598] FAT-fs (loop3): bogus logical sector size 524 [ 764.569043][T24601] FAT-fs (loop1): bogus number of reserved sectors [ 764.576523][T24598] FAT-fs (loop3): Can't find a valid FAT filesystem [ 764.594140][T24597] device syz_tun entered promiscuous mode [ 764.598858][T24595] FAT-fs (loop2): bogus number of reserved sectors [ 764.609668][T24601] FAT-fs (loop1): Can't find a valid FAT filesystem [ 764.618437][T24595] FAT-fs (loop2): Can't find a valid FAT filesystem [ 764.654452][T24605] device syz_tun left promiscuous mode [ 764.660336][T24605] bridge262: port 1(syz_tun) entered disabled state [ 764.707016][T24605] bridge263: port 1(syz_tun) entered blocking state [ 764.713662][T24605] bridge263: port 1(syz_tun) entered disabled state [ 764.729235][T24605] device syz_tun entered promiscuous mode [ 764.737437][T24598] FAT-fs (loop3): bogus logical sector size 524 [ 764.760509][T24598] FAT-fs (loop3): Can't find a valid FAT filesystem [ 764.771370][T24601] FAT-fs (loop1): bogus number of reserved sectors [ 764.783858][T24606] bridge524: port 1(syz_tun) entered blocking state [ 764.789144][T24601] FAT-fs (loop1): Can't find a valid FAT filesystem 09:12:27 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xe0000}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 764.804882][T24606] bridge524: port 1(syz_tun) entered disabled state [ 764.812562][T24606] device syz_tun entered promiscuous mode [ 764.833212][T24609] bridge524: port 1(syz_tun) entered blocking state [ 764.839962][T24609] bridge524: port 1(syz_tun) entered forwarding state 09:12:28 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x4a04}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 764.882288][T24609] bond0: (slave bridge524): Enslaving as an active interface with an up link [ 764.891742][T24604] device syz_tun left promiscuous mode [ 764.905932][T24604] bridge179: port 1(syz_tun) entered disabled state 09:12:28 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740c0214010a0200027400f8", 0x16}], 0x0, 0x0) [ 764.984408][T24606] device syz_tun left promiscuous mode [ 765.002505][T24606] bridge524: port 1(syz_tun) entered disabled state [ 765.014577][T24618] FAT-fs (loop2): bogus number of reserved sectors 09:12:28 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280700001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:12:28 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x6800, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) [ 765.061805][T24618] FAT-fs (loop2): Can't find a valid FAT filesystem 09:12:28 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025b80b000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 765.173784][T24618] FAT-fs (loop2): bogus number of reserved sectors [ 765.193928][T24621] FAT-fs (loop1): bogus number of reserved sectors [ 765.207635][T24618] FAT-fs (loop2): Can't find a valid FAT filesystem [ 765.212954][T24621] FAT-fs (loop1): Can't find a valid FAT filesystem [ 765.216604][T24625] __nla_validate_parse: 16 callbacks suppressed [ 765.216615][T24625] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 765.258047][T24629] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 09:12:28 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x1000000}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 765.282503][T24630] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 765.322915][T24632] bridge180: port 1(syz_tun) entered blocking state [ 765.330295][T24632] bridge180: port 1(syz_tun) entered disabled state [ 765.344626][T24632] device syz_tun entered promiscuous mode [ 765.352900][T24629] bridge525: port 1(syz_tun) entered blocking state [ 765.372145][T24621] FAT-fs (loop1): bogus number of reserved sectors [ 765.379584][T24631] FAT-fs (loop3): bogus logical sector size 524 [ 765.389535][T24631] FAT-fs (loop3): Can't find a valid FAT filesystem [ 765.399319][T24629] bridge525: port 1(syz_tun) entered disabled state [ 765.411490][T24621] FAT-fs (loop1): Can't find a valid FAT filesystem [ 765.414503][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 765.424033][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 765.426120][T24629] device syz_tun entered promiscuous mode [ 765.429835][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 765.441240][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 765.447019][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 765.452267][T24633] device syz_tun left promiscuous mode [ 765.452759][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 765.461663][T24633] bridge263: port 1(syz_tun) entered disabled state [ 765.517523][T24633] bridge264: port 1(syz_tun) entered blocking state [ 765.524329][T24633] bridge264: port 1(syz_tun) entered disabled state [ 765.546336][T24641] FAT-fs (loop2): bogus number of reserved sectors [ 765.556384][T24631] FAT-fs (loop3): bogus logical sector size 524 09:12:28 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x4b04}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 765.563823][T24641] FAT-fs (loop2): Can't find a valid FAT filesystem [ 765.574101][T24631] FAT-fs (loop3): Can't find a valid FAT filesystem [ 765.574528][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 765.586452][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 765.587795][T24633] device syz_tun entered promiscuous mode [ 765.624649][T24636] bridge525: port 1(syz_tun) entered blocking state [ 765.631391][T24636] bridge525: port 1(syz_tun) entered forwarding state [ 765.672465][T24636] bond0: (slave bridge525): Enslaving as an active interface with an up link 09:12:28 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740c023c010a0200027400f8", 0x16}], 0x0, 0x0) [ 765.728897][T24636] bridge525: port 1(syz_tun) entered disabled state [ 765.752393][T24641] FAT-fs (loop2): bogus number of reserved sectors [ 765.759075][T24641] FAT-fs (loop2): Can't find a valid FAT filesystem 09:12:28 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280a00001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:12:29 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x6c00, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) 09:12:29 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x2000000}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 765.821082][T24647] FAT-fs (loop1): bogus number of reserved sectors [ 765.828592][T24647] FAT-fs (loop1): Can't find a valid FAT filesystem 09:12:29 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025d00b000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 765.967307][T24654] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 766.003231][T24650] FAT-fs (loop3): bogus logical sector size 524 [ 766.011589][T24655] FAT-fs (loop2): bogus number of reserved sectors [ 766.018190][T24647] FAT-fs (loop1): bogus number of reserved sectors [ 766.050023][T24650] FAT-fs (loop3): Can't find a valid FAT filesystem [ 766.058039][T24647] FAT-fs (loop1): Can't find a valid FAT filesystem [ 766.067590][T24659] device syz_tun left promiscuous mode [ 766.079284][T24655] FAT-fs (loop2): Can't find a valid FAT filesystem [ 766.092830][T24659] bridge264: port 1(syz_tun) entered disabled state 09:12:29 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x4c00}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 766.136910][T24659] bridge265: port 1(syz_tun) entered blocking state [ 766.143696][T24659] bridge265: port 1(syz_tun) entered disabled state [ 766.194540][T24659] device syz_tun entered promiscuous mode [ 766.202968][T24662] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 766.222414][T24650] FAT-fs (loop3): bogus logical sector size 524 [ 766.232183][T24655] FAT-fs (loop2): bogus number of reserved sectors [ 766.247192][T24650] FAT-fs (loop3): Can't find a valid FAT filesystem [ 766.254856][T24661] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 766.271292][T24655] FAT-fs (loop2): Can't find a valid FAT filesystem 09:12:29 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740c0245010a0200027400f8", 0x16}], 0x0, 0x0) [ 766.310435][T24664] device syz_tun left promiscuous mode [ 766.316320][T24664] bridge525: port 1(syz_tun) entered disabled state [ 766.380395][T24664] bridge526: port 1(syz_tun) entered blocking state [ 766.384501][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 766.392782][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 766.399242][T24672] FAT-fs (loop1): bogus number of reserved sectors [ 766.415706][T24664] bridge526: port 1(syz_tun) entered disabled state [ 766.427605][T24672] FAT-fs (loop1): Can't find a valid FAT filesystem 09:12:29 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x3000000}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 766.452956][T24664] device syz_tun entered promiscuous mode [ 766.479304][T24663] device syz_tun left promiscuous mode [ 766.487915][T24663] bridge180: port 1(syz_tun) entered disabled state [ 766.517485][T24672] FAT-fs (loop1): bogus number of reserved sectors [ 766.533848][T24672] FAT-fs (loop1): Can't find a valid FAT filesystem [ 766.569251][T24663] bridge181: port 1(syz_tun) entered blocking state [ 766.576908][T24663] bridge181: port 1(syz_tun) entered disabled state [ 766.584365][T24663] device syz_tun entered promiscuous mode [ 766.598454][T24666] bridge526: port 1(syz_tun) entered blocking state [ 766.605103][T24666] bridge526: port 1(syz_tun) entered forwarding state 09:12:29 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x4c04}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 766.618601][T24676] FAT-fs (loop3): bogus logical sector size 524 [ 766.622448][T24666] bond0: (slave bridge526): Enslaving as an active interface with an up link [ 766.636057][T24676] FAT-fs (loop3): Can't find a valid FAT filesystem [ 766.645159][T24654] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:12:29 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x7400, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) [ 766.717960][T24679] FAT-fs (loop2): bogus number of reserved sectors [ 766.726762][T24664] bridge526: port 1(syz_tun) entered disabled state [ 766.727605][T24679] FAT-fs (loop2): Can't find a valid FAT filesystem 09:12:29 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280c00001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 766.817884][T24676] FAT-fs (loop3): bogus logical sector size 524 [ 766.825541][T24683] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 766.847202][T24683] device syz_tun left promiscuous mode [ 766.853021][T24683] bridge265: port 1(syz_tun) entered disabled state [ 766.854011][T24679] FAT-fs (loop2): bogus number of reserved sectors [ 766.867346][T24676] FAT-fs (loop3): Can't find a valid FAT filesystem [ 766.893009][T24683] bridge266: port 1(syz_tun) entered blocking state [ 766.893732][T24679] FAT-fs (loop2): Can't find a valid FAT filesystem [ 766.907199][T24683] bridge266: port 1(syz_tun) entered disabled state 09:12:30 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740c0249010a0200027400f8", 0x16}], 0x0, 0x0) 09:12:30 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025d80b000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 766.920530][T24683] device syz_tun entered promiscuous mode [ 766.938554][T24687] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 766.951162][T24688] FAT-fs (loop1): bogus number of reserved sectors [ 766.978160][T24688] FAT-fs (loop1): Can't find a valid FAT filesystem [ 767.003088][T24692] device syz_tun left promiscuous mode [ 767.018018][T24692] bridge266: port 1(syz_tun) entered disabled state [ 767.074533][T24691] device syz_tun left promiscuous mode [ 767.080253][T24691] bridge181: port 1(syz_tun) entered disabled state [ 767.095761][T24695] FAT-fs (loop3): bogus logical sector size 524 [ 767.104011][T24688] FAT-fs (loop1): bogus number of reserved sectors [ 767.114561][T24695] FAT-fs (loop3): Can't find a valid FAT filesystem 09:12:30 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x7a00, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) 09:12:30 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x30a0000}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 767.123078][T24688] FAT-fs (loop1): Can't find a valid FAT filesystem [ 767.158583][T24691] bridge182: port 1(syz_tun) entered blocking state [ 767.182732][T24691] bridge182: port 1(syz_tun) entered disabled state [ 767.200840][T24691] device syz_tun entered promiscuous mode 09:12:30 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280e00001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 767.212955][T24698] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 09:12:30 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x6800}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 767.264372][T24695] FAT-fs (loop3): bogus logical sector size 524 [ 767.279188][T24702] device syz_tun left promiscuous mode [ 767.293884][T24695] FAT-fs (loop3): Can't find a valid FAT filesystem [ 767.304359][T24702] bridge526: port 1(syz_tun) entered disabled state [ 767.312085][T24710] FAT-fs (loop2): bogus number of reserved sectors [ 767.331960][T24710] FAT-fs (loop2): Can't find a valid FAT filesystem [ 767.387299][T24702] bridge527: port 1(syz_tun) entered blocking state [ 767.393961][T24702] bridge527: port 1(syz_tun) entered disabled state [ 767.418096][T24702] device syz_tun entered promiscuous mode 09:12:30 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740c0204020a0200027400f8", 0x16}], 0x0, 0x0) [ 767.439620][T24710] FAT-fs (loop2): bogus number of reserved sectors [ 767.457321][T24710] FAT-fs (loop2): Can't find a valid FAT filesystem [ 767.488407][T24704] bridge527: port 1(syz_tun) entered blocking state [ 767.495044][T24704] bridge527: port 1(syz_tun) entered forwarding state [ 767.502798][T24719] FAT-fs (loop1): bogus number of reserved sectors [ 767.524588][T24719] FAT-fs (loop1): Can't find a valid FAT filesystem 09:12:30 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x4000000}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 767.539522][T24704] bond0: (slave bridge527): Enslaving as an active interface with an up link [ 767.596218][T24719] FAT-fs (loop1): bogus number of reserved sectors [ 767.602784][T24719] FAT-fs (loop1): Can't find a valid FAT filesystem [ 767.604404][T24723] FAT-fs (loop3): bogus logical sector size 524 [ 767.615547][T24707] bridge267: port 1(syz_tun) entered blocking state [ 767.622489][T24707] bridge267: port 1(syz_tun) entered disabled state [ 767.629158][T24723] FAT-fs (loop3): Can't find a valid FAT filesystem [ 767.659682][T24707] device syz_tun entered promiscuous mode [ 767.700761][T24716] device syz_tun left promiscuous mode [ 767.710930][T24716] bridge182: port 1(syz_tun) entered disabled state 09:12:30 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x6c00}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 767.744319][T24726] FAT-fs (loop2): bogus number of reserved sectors [ 767.751287][T24723] FAT-fs (loop3): bogus logical sector size 524 [ 767.765004][T24723] FAT-fs (loop3): Can't find a valid FAT filesystem [ 767.771651][T24726] FAT-fs (loop2): Can't find a valid FAT filesystem [ 767.774369][T24716] bridge183: port 1(syz_tun) entered blocking state [ 767.797716][T24716] bridge183: port 1(syz_tun) entered disabled state [ 767.817529][T24716] device syz_tun entered promiscuous mode [ 767.831953][T24727] bridge527: port 1(syz_tun) entered disabled state 09:12:31 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025e00b000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:12:31 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740c0204030a0200027400f8", 0x16}], 0x0, 0x0) [ 767.942727][T24726] FAT-fs (loop2): bogus number of reserved sectors [ 767.964580][T24726] FAT-fs (loop2): Can't find a valid FAT filesystem [ 767.982749][T24733] FAT-fs (loop1): bogus number of reserved sectors 09:12:31 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="281000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:12:31 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x8100, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) [ 767.990823][T24733] FAT-fs (loop1): Can't find a valid FAT filesystem [ 768.069420][T24738] device syz_tun left promiscuous mode [ 768.077054][T24738] bridge527: port 1(syz_tun) entered disabled state 09:12:31 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x40a0000}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 768.118169][T24733] FAT-fs (loop1): bogus number of reserved sectors [ 768.127341][T24737] FAT-fs (loop3): bogus logical sector size 524 [ 768.133887][T24733] FAT-fs (loop1): Can't find a valid FAT filesystem [ 768.146709][T24737] FAT-fs (loop3): Can't find a valid FAT filesystem [ 768.148329][T24738] bridge528: port 1(syz_tun) entered blocking state [ 768.166973][T24738] bridge528: port 1(syz_tun) entered disabled state [ 768.175105][T24738] device syz_tun entered promiscuous mode [ 768.186771][T24744] bridge528: port 1(syz_tun) entered blocking state [ 768.193441][T24744] bridge528: port 1(syz_tun) entered forwarding state [ 768.208608][T24744] bond0: (slave bridge528): Enslaving as an active interface with an up link [ 768.239355][T24746] device syz_tun left promiscuous mode [ 768.254553][T24746] bridge267: port 1(syz_tun) entered disabled state [ 768.294581][T24737] FAT-fs (loop3): bogus logical sector size 524 [ 768.307740][T24737] FAT-fs (loop3): Can't find a valid FAT filesystem [ 768.317482][T24746] bridge268: port 1(syz_tun) entered blocking state [ 768.320683][T24755] FAT-fs (loop2): bogus number of reserved sectors [ 768.324099][T24746] bridge268: port 1(syz_tun) entered disabled state [ 768.333888][T24746] device syz_tun entered promiscuous mode 09:12:31 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x7400}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:12:31 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740c0204040a0200027400f8", 0x16}], 0x0, 0x0) [ 768.338172][T24755] FAT-fs (loop2): Can't find a valid FAT filesystem [ 768.352654][T24747] device syz_tun left promiscuous mode [ 768.368081][T24747] bridge183: port 1(syz_tun) entered disabled state [ 768.427664][T24747] bridge184: port 1(syz_tun) entered blocking state [ 768.439189][T24747] bridge184: port 1(syz_tun) entered disabled state [ 768.447519][T24747] device syz_tun entered promiscuous mode [ 768.489372][T24755] FAT-fs (loop2): bogus number of reserved sectors [ 768.503903][T24755] FAT-fs (loop2): Can't find a valid FAT filesystem 09:12:31 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025e80b000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:12:31 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x1000000, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) [ 768.571851][T24760] FAT-fs (loop3): bogus logical sector size 524 [ 768.578377][T24762] FAT-fs (loop1): bogus number of reserved sectors [ 768.608151][T24760] FAT-fs (loop3): Can't find a valid FAT filesystem 09:12:31 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="284800001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 768.640996][T24762] FAT-fs (loop1): Can't find a valid FAT filesystem 09:12:31 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x5000000}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 768.689466][T24765] device syz_tun left promiscuous mode [ 768.696165][T24765] bridge268: port 1(syz_tun) entered disabled state [ 768.737578][T24765] bridge269: port 1(syz_tun) entered blocking state [ 768.744504][T24765] bridge269: port 1(syz_tun) entered disabled state [ 768.751934][T24765] device syz_tun entered promiscuous mode [ 768.788616][T24768] device syz_tun left promiscuous mode [ 768.794256][T24760] FAT-fs (loop3): bogus logical sector size 524 [ 768.799961][T24768] bridge269: port 1(syz_tun) entered disabled state [ 768.800550][T24762] FAT-fs (loop1): bogus number of reserved sectors [ 768.822932][T24775] FAT-fs (loop2): bogus number of reserved sectors [ 768.828949][T24760] FAT-fs (loop3): Can't find a valid FAT filesystem 09:12:32 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x2000000, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) [ 768.832870][T24775] FAT-fs (loop2): Can't find a valid FAT filesystem [ 768.839609][T24762] FAT-fs (loop1): Can't find a valid FAT filesystem [ 768.857390][T24772] device syz_tun left promiscuous mode [ 768.866662][T24772] bridge528: port 1(syz_tun) entered disabled state [ 768.908371][T24772] bridge529: port 1(syz_tun) entered blocking state [ 768.928285][T24772] bridge529: port 1(syz_tun) entered disabled state [ 768.940386][T24772] device syz_tun entered promiscuous mode 09:12:32 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740c0204050a0200027400f8", 0x16}], 0x0, 0x0) [ 768.967908][T24767] bridge529: port 1(syz_tun) entered blocking state [ 768.975633][T24767] bridge529: port 1(syz_tun) entered forwarding state [ 768.994420][T24767] bond0: (slave bridge529): Enslaving as an active interface with an up link [ 769.031345][T24775] FAT-fs (loop2): bogus number of reserved sectors [ 769.040269][T24775] FAT-fs (loop2): Can't find a valid FAT filesystem 09:12:32 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x7800}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 769.075511][T24779] device syz_tun left promiscuous mode [ 769.094705][T24779] bridge184: port 1(syz_tun) entered disabled state 09:12:32 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x50a0000}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 769.156528][T24779] bridge185: port 1(syz_tun) entered blocking state [ 769.163268][T24779] bridge185: port 1(syz_tun) entered disabled state [ 769.170617][T24779] device syz_tun entered promiscuous mode [ 769.180190][T24772] device syz_tun left promiscuous mode [ 769.198139][T24772] bridge529: port 1(syz_tun) entered disabled state [ 769.260247][T24788] FAT-fs (loop3): bogus logical sector size 524 [ 769.268087][T24788] FAT-fs (loop3): Can't find a valid FAT filesystem [ 769.342427][T24787] bridge270: port 1(syz_tun) entered blocking state [ 769.350425][T24787] bridge270: port 1(syz_tun) entered disabled state [ 769.369140][T24792] FAT-fs (loop1): bogus number of reserved sectors [ 769.379567][T24788] FAT-fs (loop3): bogus logical sector size 524 [ 769.380253][T24792] FAT-fs (loop1): Can't find a valid FAT filesystem [ 769.392993][T24788] FAT-fs (loop3): Can't find a valid FAT filesystem [ 769.408976][T24787] device syz_tun entered promiscuous mode 09:12:32 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025f00b000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 769.510800][T24796] FAT-fs (loop2): bogus number of reserved sectors [ 769.518650][T24792] FAT-fs (loop1): bogus number of reserved sectors 09:12:32 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="284c00001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 769.552521][T24796] FAT-fs (loop2): Can't find a valid FAT filesystem [ 769.560430][T24792] FAT-fs (loop1): Can't find a valid FAT filesystem 09:12:32 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740c0204060a0200027400f8", 0x16}], 0x0, 0x0) 09:12:32 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x3000000, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) 09:12:32 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x7a00}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 769.729296][T24802] bridge530: port 1(syz_tun) entered blocking state [ 769.739366][T24796] FAT-fs (loop2): bogus number of reserved sectors [ 769.747960][T24796] FAT-fs (loop2): Can't find a valid FAT filesystem [ 769.770986][T24802] bridge530: port 1(syz_tun) entered disabled state [ 769.793095][T24802] device syz_tun entered promiscuous mode [ 769.843786][T24810] device syz_tun left promiscuous mode [ 769.867995][T24810] bridge185: port 1(syz_tun) entered disabled state [ 769.885185][T24808] FAT-fs (loop3): bogus logical sector size 524 09:12:33 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x6000000}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 769.898815][T24808] FAT-fs (loop3): Can't find a valid FAT filesystem [ 769.957359][T24810] bridge186: port 1(syz_tun) entered blocking state [ 769.964323][T24810] bridge186: port 1(syz_tun) entered disabled state [ 769.979982][T24810] device syz_tun entered promiscuous mode [ 770.002813][T24809] bridge530: port 1(syz_tun) entered blocking state [ 770.009568][T24809] bridge530: port 1(syz_tun) entered forwarding state [ 770.028923][T24809] bond0: (slave bridge530): Enslaving as an active interface with an up link [ 770.042381][T24812] device syz_tun left promiscuous mode [ 770.049799][T24812] bridge270: port 1(syz_tun) entered disabled state [ 770.064620][T24815] FAT-fs (loop1): bogus number of reserved sectors [ 770.075665][T24815] FAT-fs (loop1): Can't find a valid FAT filesystem [ 770.082437][T24808] FAT-fs (loop3): bogus logical sector size 524 [ 770.093182][T24808] FAT-fs (loop3): Can't find a valid FAT filesystem [ 770.128060][T24812] bridge271: port 1(syz_tun) entered blocking state [ 770.148826][T24812] bridge271: port 1(syz_tun) entered disabled state [ 770.157822][T24812] device syz_tun entered promiscuous mode 09:12:33 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="286000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 770.196461][T24819] FAT-fs (loop2): bogus number of reserved sectors [ 770.203391][T24815] FAT-fs (loop1): bogus number of reserved sectors [ 770.218216][T24819] FAT-fs (loop2): Can't find a valid FAT filesystem [ 770.234487][T24815] FAT-fs (loop1): Can't find a valid FAT filesystem 09:12:33 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740c0204080a0200027400f8", 0x16}], 0x0, 0x0) 09:12:33 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080c000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:12:33 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x4000000, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) 09:12:33 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xedc0}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 770.413509][T24828] __nla_validate_parse: 16 callbacks suppressed [ 770.413524][T24828] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 770.448705][T24827] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 770.464134][T24828] device syz_tun left promiscuous mode [ 770.472558][T24828] bridge530: port 1(syz_tun) entered disabled state [ 770.511324][T24819] FAT-fs (loop2): bogus number of reserved sectors [ 770.534522][ C1] net_ratelimit: 14 callbacks suppressed [ 770.534530][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 770.538484][T24819] FAT-fs (loop2): Can't find a valid FAT filesystem [ 770.540284][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 770.560367][T24835] FAT-fs (loop3): bogus logical sector size 524 [ 770.571615][T24828] bridge531: port 1(syz_tun) entered blocking state [ 770.583924][T24835] FAT-fs (loop3): Can't find a valid FAT filesystem [ 770.591141][T24828] bridge531: port 1(syz_tun) entered disabled state [ 770.601602][T24828] device syz_tun entered promiscuous mode 09:12:33 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x60a0000}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 770.609563][T24827] device syz_tun left promiscuous mode [ 770.617524][T24827] bridge186: port 1(syz_tun) entered disabled state [ 770.628224][T24837] FAT-fs (loop1): bogus number of reserved sectors [ 770.639696][T24837] FAT-fs (loop1): Can't find a valid FAT filesystem [ 770.687421][T24827] bridge187: port 1(syz_tun) entered blocking state [ 770.701788][T24827] bridge187: port 1(syz_tun) entered disabled state [ 770.719549][T24835] FAT-fs (loop3): bogus logical sector size 524 [ 770.728765][T24835] FAT-fs (loop3): Can't find a valid FAT filesystem [ 770.739810][T24837] FAT-fs (loop1): bogus number of reserved sectors [ 770.748812][T24827] device syz_tun entered promiscuous mode [ 770.757707][T24837] FAT-fs (loop1): Can't find a valid FAT filesystem [ 770.771355][T24830] bridge531: port 1(syz_tun) entered blocking state [ 770.778160][T24830] bridge531: port 1(syz_tun) entered forwarding state [ 770.792040][T24830] bond0: (slave bridge531): Enslaving as an active interface with an up link [ 770.801201][T24838] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:12:34 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740c02040a0a0200027400f8", 0x16}], 0x0, 0x0) [ 770.836550][T24840] device syz_tun left promiscuous mode [ 770.844732][T24840] bridge271: port 1(syz_tun) entered disabled state 09:12:34 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xfd25}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 770.907176][T24840] bridge272: port 1(syz_tun) entered blocking state [ 770.914011][T24840] bridge272: port 1(syz_tun) entered disabled state [ 770.924957][T24846] FAT-fs (loop2): bogus number of reserved sectors [ 770.931492][T24846] FAT-fs (loop2): Can't find a valid FAT filesystem [ 770.934406][T24840] device syz_tun entered promiscuous mode 09:12:34 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025100c000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:12:34 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="286800001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 771.025600][T24853] FAT-fs (loop3): bogus logical sector size 524 [ 771.031943][T24853] FAT-fs (loop3): Can't find a valid FAT filesystem 09:12:34 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x5000000, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) [ 771.094120][T24857] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 771.128781][T24846] FAT-fs (loop2): bogus number of reserved sectors [ 771.137660][T24846] FAT-fs (loop2): Can't find a valid FAT filesystem [ 771.150052][T24859] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 771.162513][T24853] FAT-fs (loop3): bogus logical sector size 524 [ 771.187409][T24853] FAT-fs (loop3): Can't find a valid FAT filesystem 09:12:34 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x7000000}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 771.230583][T24861] device syz_tun left promiscuous mode [ 771.238932][T24861] bridge531: port 1(syz_tun) entered disabled state 09:12:34 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740c02040b0a0200027400f8", 0x16}], 0x0, 0x0) [ 771.285488][T24866] FAT-fs (loop1): bogus number of reserved sectors [ 771.292039][T24866] FAT-fs (loop1): Can't find a valid FAT filesystem [ 771.309422][T24861] bridge532: port 1(syz_tun) entered blocking state [ 771.337594][T24861] bridge532: port 1(syz_tun) entered disabled state [ 771.359316][T24861] device syz_tun entered promiscuous mode [ 771.395599][T24873] FAT-fs (loop2): bogus number of reserved sectors [ 771.398061][T24857] bridge532: port 1(syz_tun) entered blocking state [ 771.402555][T24874] FAT-fs (loop3): bogus logical sector size 524 [ 771.408752][T24857] bridge532: port 1(syz_tun) entered forwarding state [ 771.422569][T24866] FAT-fs (loop1): bogus number of reserved sectors [ 771.422681][T24873] FAT-fs (loop2): Can't find a valid FAT filesystem [ 771.429183][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 771.429216][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 771.436337][T24874] FAT-fs (loop3): Can't find a valid FAT filesystem [ 771.459092][T24857] bond0: (slave bridge532): Enslaving as an active interface with an up link [ 771.465878][T24866] FAT-fs (loop1): Can't find a valid FAT filesystem [ 771.474716][T24865] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 771.501597][T24864] device syz_tun left promiscuous mode [ 771.509532][T24864] bridge187: port 1(syz_tun) entered disabled state [ 771.561489][T24864] bridge188: port 1(syz_tun) entered blocking state [ 771.568812][T24864] bridge188: port 1(syz_tun) entered disabled state 09:12:34 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x70a0000}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 771.603450][T24864] device syz_tun entered promiscuous mode [ 771.613547][T24874] FAT-fs (loop3): bogus logical sector size 524 [ 771.629585][T24874] FAT-fs (loop3): Can't find a valid FAT filesystem [ 771.641523][T24869] device syz_tun left promiscuous mode 09:12:34 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xff00}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 771.654470][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 771.660219][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 771.666013][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 771.671765][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 771.677521][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 771.683266][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 771.692874][T24869] bridge272: port 1(syz_tun) entered disabled state 09:12:34 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740c0204100a0200027400f8", 0x16}], 0x0, 0x0) [ 771.756656][T24869] bridge273: port 1(syz_tun) entered blocking state [ 771.778781][T24869] bridge273: port 1(syz_tun) entered disabled state [ 771.790681][T24883] FAT-fs (loop2): bogus number of reserved sectors [ 771.803598][T24869] device syz_tun entered promiscuous mode [ 771.812883][T24883] FAT-fs (loop2): Can't find a valid FAT filesystem [ 771.825399][T24861] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 771.835381][T24879] bridge532: port 1(syz_tun) entered disabled state 09:12:35 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025180c000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:12:35 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="286c00001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 771.936965][T24883] FAT-fs (loop2): bogus number of reserved sectors [ 771.944374][T24886] FAT-fs (loop1): bogus number of reserved sectors [ 771.949040][T24888] FAT-fs (loop3): bogus logical sector size 524 [ 771.957369][T24888] FAT-fs (loop3): Can't find a valid FAT filesystem [ 771.959565][T24883] FAT-fs (loop2): Can't find a valid FAT filesystem 09:12:35 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x6000000, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) [ 771.984539][T24886] FAT-fs (loop1): Can't find a valid FAT filesystem [ 772.024090][T24894] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 772.038113][T24888] FAT-fs (loop3): bogus logical sector size 524 [ 772.047811][T24888] FAT-fs (loop3): Can't find a valid FAT filesystem [ 772.049656][T24894] device syz_tun left promiscuous mode [ 772.060193][T24894] bridge532: port 1(syz_tun) entered disabled state [ 772.129054][T24894] bridge533: port 1(syz_tun) entered blocking state [ 772.158079][T24894] bridge533: port 1(syz_tun) entered disabled state [ 772.166571][T24886] FAT-fs (loop1): bogus number of reserved sectors 09:12:35 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740c0204140a0200027400f8", 0x16}], 0x0, 0x0) 09:12:35 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x8000000}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 772.184166][T24886] FAT-fs (loop1): Can't find a valid FAT filesystem [ 772.221177][T24894] device syz_tun entered promiscuous mode [ 772.251629][T24895] bridge533: port 1(syz_tun) entered blocking state [ 772.258310][T24895] bridge533: port 1(syz_tun) entered forwarding state [ 772.292007][T24895] bond0: (slave bridge533): Enslaving as an active interface with an up link [ 772.313770][T24899] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:12:35 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0xff0f}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 772.347966][T24900] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 772.373319][T24901] device syz_tun left promiscuous mode [ 772.383893][T24901] bridge273: port 1(syz_tun) entered disabled state [ 772.435350][T24905] FAT-fs (loop3): bogus logical sector size 524 [ 772.451801][T24905] FAT-fs (loop3): Can't find a valid FAT filesystem [ 772.461590][T24901] bridge274: port 1(syz_tun) entered blocking state [ 772.480226][T24911] FAT-fs (loop2): bogus number of reserved sectors [ 772.492680][T24901] bridge274: port 1(syz_tun) entered disabled state [ 772.497806][T24911] FAT-fs (loop2): Can't find a valid FAT filesystem [ 772.500820][T24901] device syz_tun entered promiscuous mode [ 772.519059][T24902] device syz_tun left promiscuous mode [ 772.527883][T24902] bridge188: port 1(syz_tun) entered disabled state [ 772.578650][T24902] bridge189: port 1(syz_tun) entered blocking state [ 772.589015][T24902] bridge189: port 1(syz_tun) entered disabled state [ 772.599915][T24902] device syz_tun entered promiscuous mode [ 772.624226][T24905] FAT-fs (loop3): bogus logical sector size 524 [ 772.634346][T24911] FAT-fs (loop2): bogus number of reserved sectors [ 772.643654][T24914] FAT-fs (loop1): bogus number of reserved sectors [ 772.651489][T24895] device syz_tun left promiscuous mode [ 772.657282][T24895] bridge533: port 1(syz_tun) entered disabled state [ 772.664863][T24905] FAT-fs (loop3): Can't find a valid FAT filesystem [ 772.671558][T24914] FAT-fs (loop1): Can't find a valid FAT filesystem [ 772.674058][T24911] FAT-fs (loop2): Can't find a valid FAT filesystem [ 772.805836][T24914] FAT-fs (loop1): bogus number of reserved sectors [ 772.812572][T24914] FAT-fs (loop1): Can't find a valid FAT filesystem 09:12:36 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740c02043c0a0200027400f8", 0x16}], 0x0, 0x0) 09:12:36 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x22080}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:12:36 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x7000000, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) 09:12:36 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="287400001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) 09:12:36 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x80a0000}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:12:36 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025200c000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 773.085470][T24923] device syz_tun left promiscuous mode [ 773.091324][T24923] bridge274: port 1(syz_tun) entered disabled state [ 773.142676][T24923] bridge275: port 1(syz_tun) entered blocking state [ 773.168776][T24921] FAT-fs (loop3): bogus logical sector size 524 [ 773.179035][T24925] FAT-fs (loop1): bogus number of reserved sectors [ 773.187922][T24923] bridge275: port 1(syz_tun) entered disabled state [ 773.205270][T24923] device syz_tun entered promiscuous mode [ 773.206727][T24921] FAT-fs (loop3): Can't find a valid FAT filesystem [ 773.212142][T24925] FAT-fs (loop1): Can't find a valid FAT filesystem [ 773.252004][T24934] bridge534: port 1(syz_tun) entered blocking state [ 773.260264][T24934] bridge534: port 1(syz_tun) entered disabled state [ 773.270976][T24934] device syz_tun entered promiscuous mode [ 773.287857][T24935] FAT-fs (loop2): bogus number of reserved sectors [ 773.302078][T24937] bridge534: port 1(syz_tun) entered blocking state [ 773.302102][T24935] FAT-fs (loop2): Can't find a valid FAT filesystem [ 773.308796][T24937] bridge534: port 1(syz_tun) entered forwarding state [ 773.329723][T24921] FAT-fs (loop3): bogus logical sector size 524 [ 773.339187][T24937] bond0: (slave bridge534): Enslaving as an active interface with an up link 09:12:36 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0xa000000, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) [ 773.339381][T24921] FAT-fs (loop3): Can't find a valid FAT filesystem [ 773.352150][T24925] FAT-fs (loop1): bogus number of reserved sectors [ 773.368026][T24933] device syz_tun left promiscuous mode [ 773.373810][T24933] bridge189: port 1(syz_tun) entered disabled state [ 773.385162][T24925] FAT-fs (loop1): Can't find a valid FAT filesystem 09:12:36 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740c0204450a0200027400f8", 0x16}], 0x0, 0x0) [ 773.446661][T24933] bridge190: port 1(syz_tun) entered blocking state [ 773.464470][T24933] bridge190: port 1(syz_tun) entered disabled state [ 773.473333][T24933] device syz_tun entered promiscuous mode 09:12:36 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x407ff}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) [ 773.501273][T24935] FAT-fs (loop2): bogus number of reserved sectors [ 773.508637][T24935] FAT-fs (loop2): Can't find a valid FAT filesystem [ 773.508678][T24943] bridge534: port 1(syz_tun) entered disabled state 09:12:36 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="287a00001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 773.651124][T24948] device syz_tun left promiscuous mode [ 773.659008][T24950] FAT-fs (loop3): bogus logical sector size 524 [ 773.671655][T24950] FAT-fs (loop3): Can't find a valid FAT filesystem [ 773.686791][T24948] bridge275: port 1(syz_tun) entered disabled state 09:12:36 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x9000000}], 0x0, &(0x7f00000000c0)={[{@fat=@usefree='usefree'}]}) 09:12:36 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025280c000000000000000a000000", @ANYRES32=r8, @ANYBLOB="000e00000000000008000a000f000000"], 0x28}}, 0x0) [ 773.703250][T24955] FAT-fs (loop1): bogus number of reserved sectors [ 773.741074][T24955] FAT-fs (loop1): Can't find a valid FAT filesystem [ 773.750090][T24948] bridge276: port 1(syz_tun) entered blocking state [ 773.760177][T24950] ================================================================== [ 773.764487][T24948] bridge276: port 1(syz_tun) entered disabled state [ 773.768292][T24950] BUG: KCSAN: data-race in exit_signals / kthread_unpark [ 773.768295][T24950] [ 773.768313][T24950] write to 0xffff8880907cc064 of 4 bytes by task 24953 on cpu 0: [ 773.768328][T24950] exit_signals+0x13b/0x490 [ 773.768354][T24950] do_exit+0x188/0x18c0 [ 773.777234][T24948] device syz_tun entered promiscuous mode [ 773.782054][T24950] kthread+0x17f/0x200 [ 773.782073][T24950] ret_from_fork+0x1f/0x30 [ 773.782086][T24950] [ 773.817256][T24950] read to 0xffff8880907cc064 of 4 bytes by task 24950 on cpu 1: [ 773.824908][T24950] kthread_unpark+0x24/0xe0 [ 773.829418][T24950] kthread_stop+0xe0/0x390 [ 773.833850][T24950] __loop_clr_fd+0x3ad/0x740 [ 773.838454][T24950] lo_ioctl+0x24c/0xc80 [ 773.842618][T24950] blkdev_ioctl+0xbe5/0x1260 [ 773.847233][T24950] block_ioctl+0x95/0xc0 [ 773.851487][T24950] do_vfs_ioctl+0x84f/0xcf0 [ 773.856000][T24950] ksys_ioctl+0xbd/0xe0 [ 773.860183][T24950] __x64_sys_ioctl+0x4c/0x60 [ 773.864790][T24950] do_syscall_64+0xcc/0x3a0 [ 773.869312][T24950] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 773.875206][T24950] [ 773.877533][T24950] Reported by Kernel Concurrency Sanitizer on: [ 773.883697][T24950] CPU: 1 PID: 24950 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 773.892369][T24950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 773.902431][T24950] ================================================================== [ 773.910610][T24950] Kernel panic - not syncing: panic_on_warn set ... [ 773.917317][T24950] CPU: 1 PID: 24950 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 773.925994][T24950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 773.936047][T24950] Call Trace: [ 773.939352][T24950] dump_stack+0x11d/0x181 [ 773.943706][T24950] panic+0x210/0x640 [ 773.947632][T24950] ? vprintk_func+0x8d/0x140 [ 773.952245][T24950] kcsan_report.cold+0xc/0xd [ 773.956850][T24950] kcsan_setup_watchpoint+0x3fe/0x460 [ 773.962241][T24950] __tsan_read4+0xc6/0x100 [ 773.966823][T24950] kthread_unpark+0x24/0xe0 [ 773.971334][T24950] kthread_stop+0xe0/0x390 [ 773.975786][T24950] __loop_clr_fd+0x3ad/0x740 [ 773.980397][T24950] lo_ioctl+0x24c/0xc80 [ 773.984569][T24950] ? loop_set_fd+0xaa0/0xaa0 [ 773.989197][T24950] blkdev_ioctl+0xbe5/0x1260 [ 773.993799][T24950] block_ioctl+0x95/0xc0 [ 773.998058][T24950] ? blkdev_fallocate+0x2f0/0x2f0 [ 774.003123][T24950] do_vfs_ioctl+0x84f/0xcf0 [ 774.007636][T24950] ? tomoyo_file_ioctl+0x34/0x40 [ 774.012586][T24950] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 774.019518][T24950] ksys_ioctl+0xbd/0xe0 [ 774.023700][T24950] __x64_sys_ioctl+0x4c/0x60 [ 774.028329][T24950] do_syscall_64+0xcc/0x3a0 [ 774.032847][T24950] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 774.038757][T24950] RIP: 0033:0x45b207 [ 774.042681][T24950] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 774.062387][T24950] RSP: 002b:00007f337369fa68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 774.070805][T24950] RAX: ffffffffffffffda RBX: 00007f33736a06d4 RCX: 000000000045b207 [ 774.078785][T24950] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000004 [ 774.086875][T24950] RBP: 000000000075bf20 R08: 00007f337369fb40 R09: 00007f337369fae0 [ 774.094852][T24950] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 774.102947][T24950] R13: 0000000000000bac R14: 00000000004cc870 R15: 000000000075bf2c [ 774.112570][T24950] Kernel Offset: disabled [ 774.116948][T24950] Rebooting in 86400 seconds..